Privacy and Cookie Statement
This Privacy and Cookie Statement outlines the processing of personal data by Crystal Promotions (“CP”) in the context of ordering products on www.crystalpromotions.nl (the “Website”).
This Privacy Statement applies to all processing of personal data by Crystal Promotions (“CP,” “us,” or “we”). Crystal Promotions is located at Flevolaan 21 in Weesp and registered with the Chamber of Commerce under number 32032918.
Crystal Promotions respects your privacy and handles the data you share with us carefully, processing it in accordance with applicable privacy laws.
Processing Purposes
We use your data for the following purposes:
- To offer you the Website and ensure its functionality.
- For the execution of a purchase agreement, such as processing your order, delivering and invoicing a purchased product.
- To provide customer support, both by phone and email.
Types of Data
We use the following data for the purposes mentioned in this Privacy Statement:
- Name, address, postal code, and residence.
- Contact details such as a (mobile) phone number and email address.
- Payment details such as the invoice address, bank account number, and possibly credit card number.
- Data from (analytical) cookies, such as the type of device and IP address.
Source of Acquisition
We obtain the data by requesting it from you. Providing the data is necessary for the execution of the purchase agreement you enter into with us when ordering something on the Website.
Additionally, there are data we obtain through cookies and similar techniques, such as the type of device you use to visit our Website. Read more about cookies below.
Retention
The personal data provided to CP is not retained longer than necessary. The duration depends on the purpose for which the data is processed.
Security of Your Personal Data
We make every effort to secure personal data as much as possible through organizational and technical security measures that take into account the state of the art. We aim to prevent unauthorized access, modification, disclosure, or loss of data.
Sharing of Data
For processing your data and performing the purchase agreement on our behalf, we use third parties. We require these party(ies) to act as (sub)processors. This means that we determine the purpose and means for these processing activities, and the processor may only handle your data according to our instructions and our (security) standards. We have documented these agreements with these (sub)processors in a so-called data processing agreement. There is no transfer of data outside the EU.
Only if CP is legally obliged to do so, personal data may be provided to supervisory authorities, tax authorities, and law enforcement agencies.
Cookies
The Website uses functional and analytical cookies and similar techniques that may place information on your device and read it from your device. With these cookies, we aim to improve your user experience on the Website. Additionally, CP can, for example, see how often the Website is visited by visitors.
The functional and analytical cookies we use have little to no impact on your privacy and are always placed. The legal basis for the processing of (personal) data from functional and analytical cookies is the legitimate interest.
We use the following types of cookies and similar techniques on the Website:
Functional Cookies:
- .crystalpromotions.nl_gid: Functional, During session
- .crystalpromotions.nl_gat: Functional, During session
- .crystalpromotions.nl_ga: Functional, 24 months
- .crystalpromotions.nlFrontend_cid: Functional, During session
- .crystalpromotions.nlFrontend: Functional, During session
Analytical Cookies:
Analytical cookies are used to collect statistics about the use of our Website. This type of analytical cookies has little to no impact on your privacy. This also includes the privacy-friendly configured cookies from Google Analytics. This means that your IP address is anonymized, the data is not used for other Google services, and it is not shared with third parties. We have concluded a data processing agreement with Google for this service.
Third-Party Website References
The Website may contain references and/or links to one or more third-party websites that may also use cookies. CP has no control over the cookies placed on these websites and advises checking the privacy and/or cookie statement of the respective website for information.
Access, Modification, Blocking, and Deletion of Your Data (Rights of the Data Subject)
You have the right to access, correct, delete, or transfer your personal data. Additionally, you have the right to limit and object to processing. You can send us your request to exercise your rights (also) via the contact form on the webshop with the subject: ‘Execution of data subject rights.’ Specify in your request as much as possible which personal data your request concerns, which right you want to exercise, and provide evidence that it is also your personal data. We will handle your request within one month. If the handling of your request within one month is not possible, for example, because the request is very complex, we will inform you within one month after your request about the extension of our response time (up to two months at most).
If there are uncertainties about your request, we may ask you additional questions. In that case, we may suspend the execution of your request until we have received your (additional) specification. If we cannot (fully) fulfill your request for deletion, for example, because we have a legal obligation to keep your data (partially), we will inform you about this.
Finally, we would like to point out the right to lodge a complaint with the Dutch Data Protection Authority.
Questions or complaints regarding privacy can be submitted via the contact form on the webshop.
Changes
We can unilaterally change this Privacy Statement. Therefore, we recommend checking this Privacy Statement regularly for changes. If significant changes are made, we will notify you of them.