Privacy & Cookie Statement

Business data:
boostyourbox.com KVK 22020757
Hudsonweg 20
4462 HJ Goes
info@boostyourbox.nl
0113-250135

General

Hereby you find the privacy statement of Boostyourbox. You are advised to read this privacy statement carefully before proceeding on this website. The Boostyourbox website is owned by Grafisch Bedrijf Goes B.V. (hereinafter GBG, us or we). GBG is the controller of your personal data. With this privacy statement GBG informs you exclusively about the processing of personal data it receives from you via this website and the web shop. Where GBG is mentioned in the privacy statement, this also means Boostyourbox.

The purpose of this privacy statement is to inform you about the processing of your personal data and how these data are processed by us. This privacy statement indicates which (categories of) personal data of you can be processed and for what purpose the personal data are used. This privacy declaration also states on what legal basis the personal data are processed and how you can exercise your rights.

We reserve the right to modify this privacy statement. The adjustment may be necessary because of new processing or to comply with the law. We therefore advise you to consult this privacy statement regularly.

Personal data we process

GBG processes your personal data because you visit the website boostyourbox.nl, use the contact form, telephone number or other media to contact her or if you place an order via this webshop. We only process personal data if there is a valid basis for doing so. The basis for processing is always underlined in the text.

Below is an overview of the personal data GBG may process about you:

• first and last name, and possibly middle name;
• street name;
• postal code and place of residence;
• country;
• telephone number;
• e-mail address;
• company name;
• log data;
• other personal data you actively provide through the contact form, your account, email or when contacting GBG by phone.

We do not intend to process personal data of children under the age of 16, unless express permission is granted by an authoritative parent. If you find that we are processing children's data inappropriately, please notify us immediately at info@boostyourbox.nl. We will then terminate the processing as soon as possible.

Types, purposes, legal grounds and period of processing of personal data

Contact form and other media

In the first place, your first and last name, possible middle name, address, postal code, place of residence, company name and e-mail address in combination with the content of the message are processed with your implicit consent if you fill out the contact form on this website, or contact us via e-mail. We have a legitimate interest to process your data in order to answer your inquiry and provide you with further service. Your data will thereafter be stored indefinitely. Of course you have the right to request that your data be deleted earlier. To do so, please contact us at the e-mail address listed under 'Your privacy rights'.

Newsletter

Via the form on the website and when placing an order you can subscribe to our digital newsletter. With your permission, your e-mail address will be processed. The processing ends when you unsubscribe via the link in the newsletter.

Webshop

If you make a purchase through the webshop, personal data will be processed that is necessary to execute the agreement with you. Failure to provide the data requested in the order form may result in no order being possible via the webshop.

If you place an order via the webshop, we will process the following data: company name (optional), first name, middle name (optional), last name, street name and house number, postal code, place of residence, country, telephone number and e-mail address. In addition, of course, the data related to your order.

Mollie is used to pay for website orders. Mollie is an independent financial service provider. Mollie processes your personal data which are necessary to pay for your order. We have no influence on this processing because Mollie itself is the data controller for these payment services.

For information about the processing of your data by Mollie, please refer to the privacy statement of Mollie: https://www.mollie.com/nl/privacy.

Your personal data and order information will be kept for 18 months after delivery. After that they are automatically deleted, with the exception of your e-mail address if you have signed yourself up for the newsletter. We keep this data to be able to fall back on the previous design in connection with possible repeat orders. Of course you have the right to request that your data be deleted earlier. To do so, please contact us at the e-mail address listed under 'Your privacy rights'. If the order data is deleted, this may incur additional costs if you wish to repeat the order or design.

Personal account

If you have created a personal account, your data will be kept until your account is deleted. Within the account you can view and manage your own data. The use of the account is logged. This means that, in case of an emergency, the use of the account can be analyzed. Logging is a security measure. To delete your account, you can send an e-mail to the e-mail address listed under 'Your privacy rights'.

Transfer to processors and third parties

Your personal data will only be shared with third parties, not being processors engaged by GBG, if GBG is obliged on the basis of a legal obligation to pass on personal data to authorized bodies or has a legitimate interest to do so itself. In addition to Mollie, this may also include, for example, the tax authorities or an investigative body.

A processing agreement is always concluded with processors, such as FrisBEE that hosts the webshop and sends the newsletters.

Security

We have taken appropriate technical and organizational measures to secure your personal data against loss or unlawful processing. The website has an SSL certificate, which means that data is sent encrypted via a secure connection. Backups are made of the digital data. Our employees only have access to functionally related personal data. Processing takes place within the EEA. A processing agreement is concluded with processors. The use of the webshop and personal accounts is logged. The grounds and premises of GBG are equipped with physical security, burglary protection and security cameras.

Data leaks

Where work is done, mistakes can be made. We will respond appropriately to a discovered data breach. Depending on the type of data, the possible risks to the data subject(s) and the number of data subjects, we will inform the data subject(s). In addition, based on these considerations, we will determine whether to report the data breach to the Personal Data Authority.

Cookies

We may use cookies on the Boostyourbox website. A cookie is a small file sent with pages of this website and stored by your browser on your computer's hard drive. Cookies can also be rejected or deleted immediately by your browser. To do so, go to your browser settings. However, we cannot then guarantee optimal operation and user experience of our website. There are different types of cookies:

• Session cookies or necessary cookies serve to enable you to use the basic functions of our website properly. When you close your browser or shortly afterwards, these cookies are automatically deleted again.
• Preference cookies remember your preferences. These can be sent back to our server the next time you visit our website. These cookies ensure a pleasant user experience.
• Analytical or statistical cookies are placed by us to analyze the use of our website and improve its functioning. Because these cookies only use part of the IP address, the data involved are not traceable and are not personal data.
• Marketing or tracking cookies are used to provide you with relevant information. With these cookies, your surfing and clicking behavior is tracked by Google, for example. This data is used to create a profile of you in order to provide you with personalized offers. Marketing cookies remain active for a long time, up to several years.

Different cookies have different durations of being active. More information about the specific cookies used and how to accept them can be found in the cookie banner on the website.

More general information about cookies can be found here: https://www.consumentenbond.nl/internet-privacy/wat-zijn-cookies

To manually delete cookies afterwards, GBG refers you to your browser settings.

Links to other websites

Our website may contain links to other websites or social media platforms that are not operated and/or owned by us. If clicking on a link takes you to another website or social media platform, the privacy statement of that organization applies. We are in no way liable or responsible for that website, the privacy statement on that website or the processing of your personal data by the organization behind that website. We encourage you to read the privacy statement of that organization carefully before proceeding to the website in question.

Your privacy rights

You may withdraw your consent at any time. The withdrawal of consent does not affect the personal data already processed in the period prior to the time of withdrawal, but it may affect the further performance of any agreement with us.

You have the right to access, rectify, delete or limit the processing of your personal data. An explanation of these rights follows below. A request regarding these rights can be made via privacy@boostyourbox.nl.

We will confirm receipt of your request and respond within four (4) weeks. This period can be extended once by two months. To check whether the request is legitimate, we may ask you to identify yourself. To this end we may contact you, preferably by telephone, to verify the legitimacy of the request on the basis of a number of specific questions.

inspection

The right of access only applies to your data. If your inspection threatens the privacy of another person, the personal data of this other person will be removed or made unreadable. If this is not possible, we must limit your right of inspection. If we can comply with your request, you will receive a digital copy of the data we have processed about you.

rectification or supplementation

If you believe that your data is incorrect or incomplete, you may request that it be amended or supplemented.

removal

You can request the removal of your personal data. This can be the case, for example, if you believe that they are kept longer than necessary. If there is no basis for keeping your data anyway, they will be removed. However, deletion may possibly result in the inability to properly execute any agreement with us (anymore).

restriction or termination of processing

You may request to restrict or terminate the processing of your personal data. This may be necessary in the event of legal action or if you believe that your data is being processed unlawfully by us.

no profiling

We do not use your data for automated profiling.

complaints

If you would like to make a complaint about GBG's processing of your personal data, you may do so by sending an email describing your complaint to privacy@gbg.nl.

We will make every effort to handle your complaint to the best of our ability. You can also submit your complaint to the Personal Data Authority. If you want more information on how to go about this, click here .

Responsible disclosure

If, despite the care with which we process personal data, you discover that this is not done correctly, please report this by return via privacy@gbg.nl.

We will indemnify you against legal consequences, unless there is a deliberate attempt to hack or another crime.