Privacy Policy

Below you can read how we process your data, where we store it, which security techniques we use and to whom the data can be viewed.

Our web store is developed with software of WooCommerce, we have chosen for our web hosting for 072DESIGN.
Personal data that you provide for our services are shared with this party.
072DESIGN has access to your data to give us (technical) support, they will never use your data for any other purpose.
072DESIGN is required by the agreement we have with them to take appropriate security measures.
These security measures include the use of SSL encryption and a strong password policy.
Regular backups are made to prevent loss of data.

Our online store is developed with software from WooCommerce, we host our online store on an in-house server.
We have taken appropriate technical and organizational measures to prevent abuse, loss and corruption of data as much as possible.
These security measures consist at least of the application of SSL encryption and a strong password policy.
Regular backups are made to prevent loss of data.

We purchase web hosting and email services from 072DESIGN.
072DESIGN processes personal data on our behalf and does not use your data for its own purposes.
However, this party may collect metadata about the use of the services.
These are not personal data.
072DESIGN has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data.
Balaclavashop.nl is bound to secrecy under the agreement.

We use the services of Microsoft for our regular business e-mail traffic.
This party has taken appropriate technical and organizational measures to prevent abuse, loss and corruption of your and our data as much as possible.
Microsoft has no access to our mailbox and we treat all our e-mail traffic confidentially.

For handling payments in our online store we use the platform of Mollie.
Mollie processes your name, address and place of residence and payment information such as your bank account or credit card number.
Mollie has taken appropriate technical and organizational measures to protect your personal data.
Mollie reserves the right to use your data to further improve its services and to share (anonymized) data with third parties for that purpose.
All of the above guarantees regarding the protection of your personal data also apply to those parts of Mollie’s services for which it engages third parties.
Mollie will not retain your data longer than permitted under the statutory periods.

When you place an order with us, our job is to get your package delivered to you.
We use the services of PostNL to carry out the deliveries.
It is therefore necessary that we share your name, address and place of residence information with PostNL.
PostNL uses this data solely for the purpose of executing the agreement.
If PostNL engages subcontractors, PostNL will also make your data available to these parties.

For our record keeping and accounting we use the services of MoneyBird.
We share your name, address and residence information and details related to your order.
This data is used for the administration of sales invoices.
Your personal data is transmitted and stored securely, MoneyBird has taken the necessary technical and organizational measures to protect your data from loss and unauthorized use.
MoneyBird is bound to secrecy and will treat your data confidentially.
MoneyBird will not use your personal data for any other purposes than those described above.

Purpose of data processing

We use your data exclusively for the purpose of our services.
This means that the purpose of the processing is always directly related to the assignment you provide.
We do not use your data for (targeted) marketing.
If you share data with us and we use this data to contact you other than at your request or at a later time, we will ask your explicit permission.
Your data will not be shared with third parties other than to fulfill accounting and other administrative obligations.
These third parties are all bound to confidentiality by virtue of the agreement between them and us or an oath or legal obligation.

Automatically collected data

Data automatically collected by our website are processed for the purpose of further improving our services.
These data (for example, your IP address, web browser and operating system) are not personal data.

Cooperation in tax and criminal investigations

In appropriate cases, Balaclavashop.nl may be required by law to share your data in connection with governmental fiscal or criminal investigations.
In such a case we are forced to share your data, but we will oppose this within the possibilities offered by law.

Retention periods

We keep your data for as long as you are our customer.
This means that we will keep your customer profile until you indicate that you no longer wish to use our services.
If you indicate this to us, we will also interpret this as a request to forget.
Due to applicable administrative obligations we are required to retain invoices containing your (personal) data, so we will retain this data for the duration of the applicable term.
However, employees no longer have access to your account and documents we have produced as a result of your order.

Pursuant to applicable Dutch and European legislation, as a data subject you have certain rights with respect to personal data processed by us or on our behalf.
We explain below which rights these are and how you can invoke these rights.
In principle, to prevent misuse, we only send copies and copies of your data to your e-mail address already known to us.
In the event that you wish to receive the data at another e-mail address or, for example, by post, we will ask you to identify yourself.
We keep records of processed requests, in the case of a forgetting request we administer anonymized data.
You will receive all copies and transcripts of data in the machine-readable data format used within our systems.
You have the right at any time to file a complaint with the Personal Data Authority if you suspect that we are using your personal data in an inappropriate manner.

Inspection rights

You always have the right to inspect the data that we process or have processed and that relate to your person or can be traced back to you.
You can make a request to this effect to our contact person for privacy matters.
You will receive a response to your request within 30 days.
If your request is granted, we will send you a copy of all data together with a list of the processors holding this data, stating the category under which we have stored this data, at the e-mail address known to us.

Right of Rectification

You always have the right to have the data we process (or have processed) that relates to your person or can be traced back to you amended.
You can make a request to this effect to our contact person for privacy matters.
You will receive a response to your request within 30 days.
If your request is granted, we will send you a confirmation that the data has been changed at the e-mail address we have on record.

Right to restriction of processing

You always have the right to limit the data we process or have processed that relates to your person or can be traced back to you.
You can make a request to this effect to our contact person for privacy matters.
You will receive a response to your request within 30 days.
If your request is granted, we will send you a confirmation at the e-mail address known to us that the data will no longer be processed until you cancel the restriction.

Right to transferability

You always have the right to have the data we process (or have processed) that relates to your person or can be traced back to you by another party.
You can make a request to this effect to our contact person for privacy matters.
You will receive a response to your request within 30 days.
If your request is granted, we will send you, at the e-mail address known to us, copies or transcripts of all data about you that we have processed or that have been processed on our behalf by other processors or third parties.
In such a case, we will in all likelihood no longer be able to continue to provide services, because the secure connection of data files can no longer be guaranteed.

Right to object and other rights

You have in appropriate cases the right to object to the processing of your personal data by or on behalf of Balaclavashop.nl.
If you object we will immediately cease processing your personal data pending the handling of your objection.
If your objection is well-founded, we will provide you with copies and/or copies of the data that we process (or have processed) and then permanently stop the processing.
You also have the right not to be subjected to automated individual decision-making or profiling.
We do not process your data in such a way that this right applies.
If you believe that it does, please contact our contact person for privacy matters.

Google Analytics

Through our website, cookies are placed by the American company Google, as part of the Analytics service.
We use this service to track and receive reports on how visitors use the website.
This processor may be required by applicable laws and regulations to provide access to this data.
We collect information about your browsing habits and share this data with Google.
Google can interpret this information in conjunction with other data sets and thus track your movements on the Internet.
Google uses this information to provide, among other things, targeted advertisements (Ads) and other Google services and products.

Third party cookies

In the event that third-party software solutions use cookies, this is stated in this privacy statement.

We reserve the right to change our privacy policy at any time.
However, you will always find the most recent version on this page.
If the new privacy policy affects the way we process data already collected about you, we will notify you by email.

Benedenweg 74A
1834AK Sint Pancras (Netherlands )
T: (085) 065-3471
E: [email protected]
Contact person for privacy matters: M. Benjamin