Privacy Statement of PHA Retail Netherlands B.V.
1 October 2020
During the processing of personal data PHA Retail Netherlands B.V. works conform the requirements of the applicable data protection legislation, like the General Data Protection Regulation. This means we:
- clearly specify our purposes before we process personal data, by using this privacy statement;
- limit our collection of personal data to only the personal data needed for legitimate purposes;
- first ask for explicit permission to process your personal data in cases where your permission is required;
- take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf;
- respect your right to access, correct or delete your personal data held by us.
PHA Retail Netherlands B.V. is the party responsible for all data processing. In this privacy statement, we will explain what kind of personal data we collect and for which purposes within our web shop PHOA.ART. We recommend that you read it carefully.
If you have any questions regarding the processing of personal data, you can find the contactdetails of PHA Retail Netherlands B.V. at the end of this privacy statement.
Certain features of our service require you to register beforehand. You will have to provide some information about yourself and choose a username and password for the account that we will set up for you.
For this purpose, we use your name and address details, phone number, invoice address, email address and birth date. We need this data because of our agreement with you. We store this information until you close your account. We will retain this data so that you do not have to re-enter it every time you visit our website, and in order to contact you in connection with the execution of the agreement, invoicing and payment, and to provide an overview of the products and services you have purchased from us.
Handling your order
We will use your personal data when handling your order. We may share your data with the delivery service to have your order delivered. We may also obtain information on your payment from your bank or credit card company.
For this purpose, we use your name and address details, phone number, invoice address, email address and payment details. We do this on the basis of your consent. We store this information until your order has been completed. Certain types of personal data will be retained for a longer period with regards to the legal tax retention. (the legal retention period).
We have a newsletter to inform those interested on news, tips and information about our products and services. Your e-mail address is added to the list of subscribers, only with your permission.
For this purpose, we use your email address. We do this on the basis of your consent. We store this information until you cancel your subscription.
You may cancel your subscription to our newsletter at any time. Each newsletter contains a link to unsubscribe from our newsletter.
Access to portal
Within our portal, you can access a management environment where you can set, specify and change settings. We will keep track of your activities for proof.
For this purpose, we use your name and address details and email address. We do this on the basis of your consent. We store this information for six months after our services to you have ended.
Via PHOA.ART you can take out a paid subscription. We use your personal data to complete the payment.
For this purpose, we use your name and address details, phone number, invoice address and email address. We need this data because of our agreement with you. We store this information for two years after you cancelled your subscription. Certain types of personal data will be retained for a longer period with regards to the legal tax retention.
You can use our contact form to ask questions or make any request.
For this purpose, we use your name and address details and email address. We do this on the basis of your consent. We store this information until we are sure that you are satisfied with our response and six months thereafter. This way we can easily access the information in case you have any following questions and train our customer service to improve even more.
Other than the advertisements on the website, we can inform you about new products or services:
- by mail
- by e-mail
- via social media
You can object at all times against this promotional communication. Every letter contains instructions on how to do this. Also, every e-mail contains a cancellation link. On social media, you can block us or use the cancellation option. You can also inform us through your account. Further, you can inform us through the portal.
If necessary, we may collect your location data (GPS). If that is the case, you will be asked to grant consent beforehand.
This location data and other data can also be stored and processed by the provider of the navigation/mapping software, such as Google Maps, but the data could also be used by, for example, Google or Apple itself. We have no control over their actions. We recommend that you read the applicable privacy statement of the provider in question.
Providing data to third parties
Except for the parties necessary to deliver the above mentioned services, we do not under any circumstance provide your personal data to other companies or organisations, unless we are required to do so by law (for example, when the police demands access to personal data in case of a suspected crime).
Our website features social media buttons. These buttons are used by the providers of these services to collect your personal data.
We keep statistics on the use of our web shop.
The first time you visit our web shop, we will show you a notification explaining our cookies and ask for your permission for the use of these cookies.
We use Google Analytics to track visitors on our website and to get reports about how visitors use the website. We accepted the data processing agreement from Google. We don’t allow Google to use information obtained by Analytics for other Google services, and we don’t anonymize the IP-adresses.
We take security measures to reduce misuse of and unauthorized access to personal data. We take responsibility in the security of your personal data. We renew our security measures to ensure safe storage of personal data and keep track what might go wrong.
Changes to this privacy statement
We reserve the right to modify this statement. We recommend that you consult this statement on a regular basis, so that you remain informed of any changes.
Inspection and modification of your data
You have the following rights:
- Right of access: you have the right to see what kind of personal data we processed about you;
- Right of rectification: you have the right to rectify any personal data we have processed about you, if this information is (partially) wrong;
- Right to complain: you have the right to file a complaint against the processing of your personal data by us, or against direct marketing;
- Right to be forgotten: you can file a request with us to remove any personal data we have processed of you;
- Right to data portability: if technically possible, you have the right to ask us to transfer your processed personal data to a third party;
- Right to restriction of processing: you can file a request with us to (temporarily) restrict the processing of your personal data.
If you exercise any of the rights mentioned above, we might ask to identify yourself with a valid ID, to confirm it is your personal data. If so, it is important that you hide your social security number and photo.
We will usually respond to your request within 30 days. This term can be extended if the request is proven to be complex or tied to a specific right. You will be notified about a possible extension of this term.
If you want to file a complaint about our use of personal data, please send an email with the details of your complaint to firstname.lastname@example.org. We will look into and respond to any complaint we receive.
If you think that we are not helping you in the right way, you have the right to file a complaint at the authority. For The Netherlands, this is the Autoriteit Persoonsgegevens.
PHA Retail Netherlands B.V.