Privacy policy

**Privacy and Cookie Policy**

**ABOUT OUR PRIVACY POLICY**

We are aware of the European Court of Justice ruling of July 16, 2020, which has implications for the transfer of personal data. We are currently investigating the best way to address this. We place a high value on privacy and are doing everything possible to find an appropriate solution. When we have a suitable solution, we will inform you via this privacy policy. If you have any questions about the processing of your personal data, please contact us using the contact details provided in this privacy policy.

Duovorm cares deeply about your privacy. Therefore, we only process data that we need for (the improvement of) our services and handle the information we have collected about you and your use of our services with care. We never make your data available for commercial purposes to third parties.

This privacy policy applies to the use of our website and the services accessible via it provided by Duovorm. The effective date for the validity of these conditions is 20.04.2018, with the publication of a new version, all previous versions become invalid. This privacy policy describes what data we collect about you, what we use this data for, and with whom and under what conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data from misuse, and what rights you have regarding the personal data you provide to us.

If you have any questions about our privacy policy, please contact us. You will find the contact details at the end of our privacy policy.

**ABOUT DATA PROCESSING**

Below you can read how we process your data, where we store it, which security techniques we use, and who has access to the data.

**Webshop Software**

Our webshop is developed with software from Shopify. Personal data that you provide to us for our services is shared with this party. Shopify has access to your data to provide us with (technical) support, and they will never use your data for any other purpose. Shopify is obligated by the agreement we have with them to take appropriate security measures. These security measures include the application of SSL encryption, a strong password policy, and secure data storage. Duovorm reserves the right to share collected data within its own concern and affiliated partners to further improve services. Duovorm takes into account the applicable statutory retention periods for (personal) data.

**Web Hosting and Email**

We use web hosting and email services from Shopify and Gmail. These parties process personal data on our behalf and do not use your data for their own purposes. However, these parties can collect metadata about the use of the services. These are not personal data. All the mentioned parties have taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. The mentioned parties are obligated to confidentiality under the agreement.

**Payment Platforms**

To handle payments in our webshop, we use the Shopify-pay platform, Bunq, PayPal, and the most well-known credit card providers. These parties process your name, address, and residence details and your payment details such as your bank account or credit card number. The mentioned payment platforms have taken appropriate technical and organizational measures to protect your personal data. These parties reserve the right to use your data to further improve their services and, in this context, share (anonymized) data with third parties. All the above-mentioned guarantees concerning the protection of your personal data also apply to the parts of the services for which these parties engage third parties. Shopify-pay, Bunq, and PayPal do not store your data longer than allowed by the statutory terms.

**Shipping and Logistics**

When you place an order with us, it is our task to have your package delivered to you. We use the services of Picqer and PostNL for performing the deliveries. For this purpose, it is necessary that we share your name, address, and residence details with Picqer and PostNL. Both parties only use these data to execute the agreement. In the event that PostNL engages subcontractors, they will also provide your data to these parties.

**Invoicing and Accounting**

For keeping our records and accounts, we use the services of Shopify and E-boekhouden. We share your name, address, residence details, and order details. These data are used for administering sales invoices. Your personal data are sent and stored protected. Shopify and E-boekhouden are obliged to confidentiality and will treat your data confidentially. Shopify and E-boekhouden do not use your personal data for purposes other than those described above.

**PURPOSE OF DATA PROCESSING**

**General Purpose of Processing**

We use your data solely for our services. This means that the purpose of processing always directly relates to the order you provide. We do not use your data for (targeted) marketing. If you share data with us, and we use these data to contact you at a later date – other than at your request – we will explicitly ask for your permission. Your data will not be shared with third parties, other than to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality by an agreement between them and Duovorm or an oath or legal obligation.

**Automatically Collected Data**

Data automatically collected by our website are processed with the aim of further improving our services. These data (for example, your IP address, web browser, and operating system) are not personal data.

**Cooperation with Tax and Criminal Investigations**

In certain cases, Duovorm may be held to share your data in connection with governmental tax or criminal investigations based on a legal obligation. In such a case, we are forced to share your data, but we will oppose it within the possibilities that the law offers us.

**WebwinkelKeur**

We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares these data with us so that we can link the review to your order. WebwinkelKeur also publishes your given name on its own website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. If we invite you to leave a review, we share your name, email address, customer ID, and order number with WebwinkelKeur. They only use these data to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide the services, for which we have given WebwinkelKeur permission. All the above-mentioned guarantees concerning the protection of your personal data are also applicable to the parts of the service for which WebwinkelKeur engages third parties.

**Retention Periods**

We retain your data as long as you are a client of ours. This means we keep your client profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also interpret this as a forget request. Based on applicable administrative obligations, we must retain invoices with your (personal) data, so we will keep these data for as long as the applicable term runs. However, employees no longer have access to your client profile and documents that we have produced in response to your order.

**YOUR RIGHTS**

Under the applicable Dutch and European legislation, you have certain rights concerning the personal data processed by or on behalf of us. We explain below which rights these are and how you can invoke these rights.

Knuffelkings
Business Address: Lage Ham 190 - 5102AE, Dongen, The Netherlands
Contact Information: info@knuffelkings.com

**In Principle, Copies and Transcripts of Your Data Are Only Sent to Your Known Email Address**

To prevent misuse, we only send copies and transcripts of your data to your email address already known to us. In the event that you wish to receive the data at another email address or, for example, by post, we will ask you to identify yourself. We keep records of completed requests, in the case of a forget request we administer anonymized data. You receive all copies and transcripts of data in the machine-readable data format we use within our systems.

**Right to Inspect**

You always have the right to inspect the data that we (have) processed and that relate to your person or can be traced to that. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors who hold these data, indicating the category under which we have stored these data, to the email address known to us.

**Right to Rectification**

You always have the right to have the data that we (have) processed that relate to your person or can be traced to that rectified. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted to the email address known to us.

**Right to Restrict Processing**

You always have the right to restrict the data we process (or have processed) that relate to your person or can be traced to that. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us that the data will no longer be processed until you lift the restriction.

**Right to Data Portability**

You always have the right to have the data that we process (or have processed) and that relate to your person or can be traced to that, carried out by another party. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or transcripts of all data about you that we have processed or that have been processed by other processors or third parties on our behalf. In all likelihood,