This is the privacy statement of Puff-Commerce (hereinafter referred to as “PC”) registered with the Chamber of Commerce under number 77273184.  This document explains how PC processes your personal data. PC takes the utmost care in processing your personal data.

Acquisition of personal data
If you use PC’s services, you provide PC with some personal data yourself, or personal data about you is obtained in the context of the agreement. Personal data means all data that relates to an identified or identifiable natural person.

Categories of personal data
PC processes the following categories of personal data:

• Contact and address details;
• Different delivery address;
• Financial information;
• Account information, including your password and username;
• Order history;
• Other personal data provided by you.

Purpose of processing
The personal data processed by PC are intended to:

• Contact you to inform you about the services you have purchased and their execution;
• Performing its services;
• Improving the quality of service;
• Performing payments;
• Compliance with legal obligations;
• Conducting marketing and communication activities;
• Improving the website by analyzing visitor behavior on the website;
• Sending newsletters;
• Data exchange with third parties for the purpose of executing the service.
• Legal basis for processing:

Processing personal data is only possible on the following legal bases: (i) legal obligation, (ii) performance of the agreement, (iii) obtained (explicit) consent from the data subjects, and (iv) legitimate interest. When providing PC’s services, personal data is processed. PC only processes data that PC deems necessary for (improving) the service and handles the (personal) data it has collected about you and your use of the services with care. The legal basis for processing this data is the agreement you have entered into with PC. Personal data about you can also be processed by visiting the website www.PC.nl if you have given your consent for this.

Necessity of processing
The processing of your personal data is necessary to perform the service. The services provided by PC cannot be fully executed without processing your personal data. If explicit consent is required for specific purposes relating to personal data, you must separately give your consent for this.

Automated decision-making
There is no automated decision-making.

Retention period
The personal data processed by PC is kept in accordance with the relevant laws and regulations. If a longer retention period is required by law or regulation, the personal data will be kept in accordance with these requirements. All (obtained) personal data is not kept longer than strictly necessary.

Processing by third parties
PC only shares personal data with third parties if it is strictly necessary for the performance of an agreement and to comply with relevant laws and regulations. Personal data is not sold. PC may have a legal obligation to share personal data with third parties. If personal data is shared with third parties, processing agreements are concluded for this purpose. The third parties with whom personal data is shared are:

• The contracted delivery service(s), for the purpose of performing the agreement. The categories of personal data that are processed are contact and address information, as well as location data.
• The Payment Provider, for the purpose of performing an agreement. The categories of personal data that are processed are financial data.
• The Accountant, for the purpose of performing an agreement. The categories of personal data that are processed are contact and address information, as well as financial data.
• Software suppliers, for the purpose of performing the agreement. The categories of personal data that are processed are location data, email address, and contact and address information.
• Website administrator, for the purpose of performing the agreement. The categories of personal data that are processed are location data, email address, and contact and address information.

Security of Personal Data
PC takes the protection of your personal data seriously and, taking into account the state of the art, implementation costs, as well as the nature, scope, context, and processing purposes, and the varying likelihood and severity of risks to the rights and freedoms of individuals, takes appropriate technical and organizational measures to ensure a level of security that is appropriate to the risk.

Disclaimer
By using the website, you agree to the disclaimer. PC reserves the right to change the content of its website and/or this disclaimer at any time without informing its customers and/or website users of such changes. The content of the website has been compiled with the utmost care, but may still contain possible inaccuracies or be incomplete. PC accepts no liability whatsoever for damage that has arisen from or results from the use of the website. The use of this website is entirely at the user’s own risk and expense. No rights can be derived from the content of the website. All texts on the website are protected by copyright and are the property of PC, unless they belong to third parties.

Cookie Statement
PC uses technical and functional cookies to optimize the website. Cookies are small text files that are sent by visiting a website to make visitor user experiences more efficient. According to the law, PC may store cookies on your device if these cookies are strictly necessary to use the website. Your consent is required for other types of cookies. We recommend accepting cookies for the user-friendliness of the website. Visitors to the website have the option to check in.

The cookies that PC uses are functional cookies: these cookies ensure that the website works properly. These cookies have no impact on personal privacy, so no consent needs to be requested or granted. For example, these cookies store your browser settings so that our website can be viewed at its best, or ensure that the website remains accessible (load balancing) but also cookies that ensure that no other cookies may be placed (no-follow).

With your consent, we place “tracking cookies” on your computer. We use these cookies to track which pages you visit in order to build a profile of your online behavior. This profile is not linked to your name, address, email address, or the like, but only to tailor advertisements to your profile so that they are as relevant as possible to you.

PC also places cookies from Google on its website for Google Analytics. We do not keep track of what you do on the internet. Google Analytics may be required by applicable laws and regulations to provide access to this data. This means that PC cannot link information to a natural person. If you have any questions about this, you can contact us via info@puff-commerce.nl.

Use of Social Media
PC uses third-party cookies to optimize the website. Some cookies are placed by third-party services displayed on the website. Third parties refer to Google Analytics and social media (Facebook, Instagram). The privacy and cookie policy of the relevant company applies to the use of cookies from other companies (third parties). When you click on the Social Media button on the website, a Social Media cookie is placed. This allows the Social Media party to recognize your IP address when you share an article from the website. For cookies from social media parties and the data and/or personal information they collect, PC refers you to the privacy and cookie statements of these parties.

Browser Settings
If you do not want websites to place cookies on your device to view the website, you can adjust your browser settings. Before a cookie is placed, you will be warned and asked for permission to accept the cookie. If you do not do so, it may, for example, result in the website working less well. You can adjust your browser settings so that your browser rejects all cookies, including those from third parties. You can also delete placed cookies. To do so, you need to adjust the settings of your browser via preferences and then adjust the privacy settings.

This privacy statement does not apply to third-party websites linked to this website through links. We cannot guarantee that these third parties handle your personal information in a reliable or secure manner. We recommend that you read the privacy statement of these websites before using them.

Rights of data subjects

As a data subject, you have the following rights:

• Right of access; As a data subject, you have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information about the processing.
• Right to rectification; You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
• Right to erasure; Without undue delay, a data subject shall have the right to obtain the erasure of personal data concerning him or her.
• Right to restriction of processing; As a data subject, you have the right to obtain restriction of processing of your personal data. Please contact PC for this.
• Right to data portability; A data subject has the right to receive the personal data concerning him or her, which he or she has provided to PC, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
• Right to object; The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, including profiling based on those provisions. PC shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

Complaint
If you have a complaint about how PC is handling your personal data, or wish to exercise any of the above rights, you can contact PC through the website or via email at info@puff-commece.nl. To ensure that you wish to exercise a right, PC requests that you send a copy of your identity document. You may black out your passport photo and MRZ (strip with numbers at the bottom) to protect your privacy. PC will respond to your request as soon as possible, but no later than within 4 weeks. You can also file a complaint with the Dutch Data Protection Authority, which is the competent supervisory authority. You can contact them through this link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Changes to Privacy Statement

PC may change the privacy statement at any time. The most recent version is published on the website. Therefore, always keep an eye on the website for the most recent version. If the new privacy statement has consequences for the way we process personal data already collected about you, we will inform you of this by email.

This version was last updated on February 10, 2023.