Privacy Statement

Privacy Statement for Customers, visitors, suppliers, and business contacts

Introduction

We process personal data. That is information about individuals.

In this notice we explain why and how we (and/or our group entities) use personal data. We directly provide you with all the essential information. If you’d like to learn more about a certain topic, you can click on the drop-down arrow for more information.

Our processing activities

We are responsible for deciding how and why we process the personal data as described in this privacy statement. Depending on the situation(s) that apply to you, we use the following personal data:

1. When you visit our website
   We use your IP-address and browser-ID, and information about your use of the website (for example, 'IP Address' pages you have visited on our website).

We use this data to provide you with a website that is adjusted to the standard settings of your browser, to analyze the use of our website and to manage, protect and improve our website and services.

Note: Please be aware that we also install cookies. If you’d like to learn more about our use of cookies, and what personal data are processed with these cookies, you can read our Cookie Statement.

We may use this data because we have a legitimate interest to do so. We namely need this data to provide you with a tailored, functioning, and secure website. Besides, this information is needed to make our services better.

We keep this data as long as necessary to provide you with access to our website and to improve our services.

2. When you register an account
   We use your first- and last name and mail address. As well as your email preferences and purchase history. Besides, you may choose to provide us with your postal address (first- and last name, street and number, postal code, city, country and, if applicable company name).
3. You can also login through your Google or Apple account. In case you login through your Google or Apple account, your first- and last name and mail address are shared with us.

We use this data to register an account for you, to provide you with access to this account and to store useful data in your account in relation to (previous) purchases and to send you promotional emails if you gave us permission to do so.

We may use these personal data because:

• We have a legitimate interest in storing the information you voluntarily added to your account and in retaining your purchase history.
• We only send you promotional emails after you gave us your consent for it. Please be aware it is always possible to unsubscribe from these e-mails via the link at the bottom of each e-mail.

We keep this data as long as your account is active. If you remove certain details or close your account, we delete the data sooner.

3. When you make a purchase on our website
   We use your account information (see above), including postal address, and details related to your order (such as required alterations). Besides, we use the payment details related to the purchase. Such as the payment method you selected (for example, iDeal, a credit card provider, PayPal or another payment method supported in your location) and general transaction details. Also, you may provide us with a separate billing address (first- and last name, street and number, postal code, city, country and, if applicable company name).

We use this data to prepare and ship your order and keep you updated on the status. Depending on the item you ordered, we may also send you informative emails to help you maintaining it. Also, we use it to assist you in paying for the order and make sure we obtain all information we need to keep accounts.

We may use these personal data because:

• We need the account and order information to enter and fulfill the purchase agreement we conclude with you in relation to the order.
• We need certain payment details because we are legally obliged to include it in our tax administration. Also, we are legally obliged to send you certain status updates, such as an order confirmation.
• We have a legitimate interest in keeping you informed about the status of your order and help you maintaining the items ordered.

We keep this data in your account until your account is deleted. Payment details are stored for seven (7) years for tax reasons.

4. When you get in touch with us through our website or via social media
   We use the contact details you provided, and any other data included in your message. Please be aware that social media networks also use personal data. We do not control this. If you want to know how these networks use your personal data, read their privacy statements.

We use this data to reply to the message and to improve our services.

We may use this data because we have a legitimate interest. Specifically, we need this data to reach out to you and assist you. Besides, this information is needed to make our services better.

We use this data until we’ve finished with the message and up to 1 year thereinafter. Information you put on social media is not actively deleted and can usually be deleted by yourself.

5. When you subscribe for the newsletter
   We use your mail address and information on your response to this newsletter.

We use this data send you promotional emails and to improve our commercial communication.

We may use this data because you have provided us with your consent to do so. Please be aware it is always possible to unsubscribe from these e-mails via the link at the bottom of each e-mail.

We keep this data until you unsubscribed from the newsletter.

6. When you are a business relation
   We use contact details and relevant business-related information such as correspondence and financial details. In some cases, we also use personal data in extracts from Chamber of Commerce and other public registers and/or copies of identity documents.

We use this data to correspond with our business relations regarding their services and invoices, and to keep records. The extracts of the Chamber of Commerce or other public registers and copies of identity documents are used to verify the identity and representative authority of our business relations.

We may use these personal data because:

• We are legally obliged to include certain financial details in our tax administration. In some cases, we are also obliged to verify the identity of our business relations.
• We need these details to enter and fulfill the agreement.
• We have a legitimate interest in using personal details of our business relations’ employees to communicate and effectively work together. And to ensure our business contact is authorized to represent the business.

We keep this data for as long as necessary for the above purposes.

 

Sometimes, we retain personal data longer than specified. This is done only if mandated by law, in cases of fraud or abuse investigation, or when necessary for legal claims. In such situations, we keep these personal data separate from the rest.

Cookies

When you visit our website, we inform you about our use of cookies. We use cookies like functional, analytical, and tracking cookies. These are small text files stored on your device that help us recognize your browser or device when you return, making your online experience more personalized. We only put a tracking cookie if you agree, which lets us, and third parties monitor your online actions and show ads that match your interests. You can always withdraw such permission by contacting us via the contact details provided below.

If you’d like to learn more about our use of cookies, and what personal data are processed with these cookies, you can read our Cookie Statement.

Third parties

We work with other organizations that help us process the personal data. They do this on our behalf. This means we remain responsible for the protection of your data during such processing. We use third parties for:

• Managing our orders;
• Managing our relations with customers;
• Improving our online customer experience;
• Optimizing our online experience;
• Managing application procedures;
• Monitor and manage security risks;
• Email management and communication;
• Project management;
• Data hosting;
• Invoicing and accounting.

Sometimes, we need to share your personal data with other organizations that use it for their own purposes. This means that once they received your personal data, they are responsible to protect it. We only share personal data with others if the law says we must, if you gave us your permission, or in exceptional cases. To know how these parties handle personal data, you can check their privacy notices. We share personal data with:

1. Payment service providers
2. Tax authorities

Furthermore, we only share personal data with third parties if the law obliges us to, if you gave us your permission, or in special situations, like when sharing personal data is necessary to:

• Protect our own interests or those of third parties;
• Deal with a legal case; or
• Sell or merge our company.

Some of these third parties are located outside the European Economic Area (the European Union, Norway, Iceland, Liechtenstein). We only transfer personal data to these parties if the personal data is adequately protected by the laws of the relevant country or if we have contractual safeguards in place.

You have certain rights when it comes to your personal data. You can always contact us to execute your rights.

You have the following rights:

• Access - You can request us to provide access to, and/or a copy of, your personal data along with additional relevant details.
• Rectification - You can request us to rectify any inaccuracies or complete any incompleteness in your personal data.
• Erasure - You can request us to erase your personal data. Sometimes, people call this the ‘right to be forgotten’.
• Data portability - You can request us to hand over your personal data, so that you can use it elsewhere.
• Restrict processing - You can request us to stop using your personal data. We can, however, keep it stored.
• Withdraw consent - You can request us to stop using your personal data for the purpose we requested your permission for.

Besides, you can request to stop the processing of your personal data based on our ‘legitimate interest’.

You can file a complaint with your national data protection authority if you believe we are not handling your personal data properly. You can find a list of the European data protection authorities, their websites and contact details here.

SUE HILL may change this privacy notice from time to time. The most current statement is published on the SUE HILL website. In case major changes are made to the processing activities, we will inform you via a separate email.

Questions, comments or advise? Please contact us via info@suehill.nl