Privacy Policy

Privacy Policy of Kitefactory (a subsidiary of Core N More)

About Our Privacy Policy

The Kite Factory cares greatly about your privacy. We only process data that we need for (the improvement of) our services and handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services accessible via the website of Kite Factory. The effective date for the validity of these conditions is 27/03/2019, with the publication of a new version voiding the validity of all previous versions. This privacy policy describes what data about you is collected by us, what this data is used for, and with whom and under what conditions this data may be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse and what rights you have with respect to the personal data you have provided us.

If you have any questions about our privacy policy, please contact our privacy officer. You will find the contact details at the end of our privacy policy.

Data Processing

Below you can read how we process your data, where we store it, what security techniques we use, and who has access to the data.

E-commerce Software

Our online store is developed with Shopify software. Personal data that you provide for our services will be shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Shopify is obliged, based on the agreement we have with them, to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. Shopify uses cookies to collect technical information regarding your use of the software, but no personal data is collected or stored. Shopify reserves the right to share collected data within its own group to further improve services.

Point of Sale (POS) System

We use the Lightspeed X POS system to process our orders. Personal data that you provide to us for order processing will be shared with this system. Lightspeed X has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Lightspeed X is obliged, based on the agreement we have with them, to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. Lightspeed X uses cookies to collect technical information regarding your use of the system, but no personal data is collected or stored. Lightspeed X reserves the right to share collected data within its own group to further improve services.

Email and Mailing Lists

We send our email newsletters with MailChimp. MailChimp will never use your name and email address for their own purposes. At the bottom of every email sent automatically via our website, you will see the ‘unsubscribe’ link. You will no longer receive our newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies that make it possible to see whether emails are opened and read. MailChimp reserves the right to use your data for the further improvement of their services and, in this context, to share information with third parties.

TransiP

We use the services of TransiP for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. TransiP does not have access to our mailbox, and we handle all our email traffic confidentially.

Payment Processors

For processing part of the payments in our online store, we use the platform of Sisow. Sisow processes your name, address, and residence details and your payment data such as your bank account or credit card number. Sisow has taken appropriate technical and organizational measures to protect your personal data. Sisow reserves the right to use your data to further improve the service and, in this context, to share (anonymized) data with third parties. All the guarantees mentioned above regarding the protection of your personal data also apply to the parts of Sisow's services for which they engage third parties. Sisow does not store your data longer than permitted by the statutory terms.

Shipping and Logistics

PostNL

When you place an order with us, it is our task to have your package delivered to you. We use the services of PostNL to carry out the deliveries. It is necessary for us to share your name, address, and residence details with PostNL. PostNL only uses this data to perform the agreement. In case PostNL engages subcontractors, PostNL will also provide your data to these parties.

GLS

When you place an order with us, it is our task to have your package delivered to you. We use the services of GLS to carry out the deliveries. It is necessary for us to share your name, address, and residence details with GLS. GLS only uses this data to perform the agreement. In case GLS engages subcontractors, GLS will also provide your data to these parties.

Invoicing and Accounting

For our administration and bookkeeping, we use the services of Snelstart. We share your name, address, and residence details and details regarding your order. This data is used for the administration of sales invoices. Your personal data is sent and stored protected. Snelstart is bound to confidentiality and will treat your data confidentially. Snelstart does not use your personal data for purposes other than those described above.

Purpose of Data Processing

General Purpose of Processing

We use your data exclusively for the purpose of our services. This means that the purpose of processing is always directly related to the order you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later date, other than at your request, we will ask for your explicit permission. Your data will not be shared with third parties, other than to meet accounting and other administrative obligations. These third parties are all bound to confidentiality based on the agreement between them and us or an oath or legal obligation.

Automatically Collected Data

Data automatically collected by our website is processed for the purpose of further improving our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.

Cooperation in Tax and Criminal Investigations

In some cases, Core N More may be required by law to share your data in connection with governmental tax or criminal investigations. In such a case, we are forced to share your data, but we will oppose this within the possibilities offered by law.

Retention Periods

We retain your data for as long as you are a client of ours. This means that we keep your client profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also interpret this as a forget request. Based on applicable administrative obligations, we must retain invoices containing your (personal) data, so we will keep this data for as long as the applicable term runs. Employees, however, no longer have access to your client profile and documents we have produced in response to your order.

Your Rights

Under applicable Dutch and European legislation, you as the data subject have certain rights regarding the personal data processed by or on behalf of us. Below we explain what these rights are and how you can invoke these rights. In principle, to prevent misuse, we send copies and transcripts of your data only to your already known email address. If you wish to receive the data at another email address or, for example, by mail, we will ask you to identify yourself. We keep records of completed requests; in the case of a forget request, we administer anonymized data. You will receive all copies and transcripts of data in the machine-readable data format we use within our systems. You have the right to submit a complaint to the Dutch Data Protection Authority if you suspect that we are using your personal data incorrectly.

Right of Inspection

You always have the right to view the data we (have) processed that relate to your person or are traceable to that. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors who hold this data, specifying the category under which we have stored this data, at the email address known to us.

Right to Rectification

You always have the right to have the data we (have) processed that relate to your person or are traceable to that, adjusted. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted at the email address known to us.

Right to Restrict Processing

You always have the right to restrict the data we (have) processed that relate to your person or are traceable to that. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data until you lift the restriction will no longer be processed at the email address known to us.

Right to Transferability

You always have the right to have the data we (have) processed that relate to your person or are traceable to that, carried out by another party. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send

The Kite Factory

Suderseleane 7

8711GX Workum

Nederland 

T 0515-750864

E info@corenmore.nl