If you order from us, we need your details to be able to process the order. We handle this data with care. In this privacy statement we explain what we do with your data and why we need it.
This privacy statement may and will be amended from time to time. It is therefore recommended that you read this privacy statement regularly. The current privacy statement was published May 24, 2018.
Who is responsible for the processing of your personal data
That is De Hekserij, Spoorstraat 57, 8271RG, IJsselmuiden, The Netherlands. See our contact details for further information.
What data is involved
Personal data is all data that ultimately refers to an individual person. Name, for example, but also address, telephone number and the IP address of a computer you use.
When does this privacy statement apply
This statement applies to all personal data that De Hekserij receives. This can be via one of our websites (hekserij.nl, hexapus.nl, ondervinding.nl), for example when you place an order or subscribe to a newsletter. It can be by email, for example because you ask a question. This could be by letter, telephone or otherwise, depending on how you contacted us.
Of whom does De Hekserij process personal data
We process personal data of anyone who has (had) direct or indirect contact with De Hekserij, for example by ordering, by sending an email, because we have contacted a supplier. It is also possible that we have received this information from someone else, for example your name and delivery address if someone has gifted you something from our webshop.
What data does De Hekserij process, why and for how long
You place an order
In order to process the order, we need name, billing address, delivery address, email address, telephone number and payment details. We also need this information for service, a return, a recall and other matters related to the order.
The IP address you have used is stored for use in case of fraud.
We must consider this data by law as administration with a retention period of at least seven years. Data on delivery of certain hazardous substances must even be kept for at least ten years.
You create an order account
You can order without creating an account, if you create an account we will store all the data necessary for placing an order. In addition, your order history is saved.
You cannot (yet) delete the account yourself, but we can do that for you. You can request this by email to email@example.com.
You are subscribing to a newsletter
The email address is recorded for this. You can unsubscribe from the newsletter yourself using the link in every newsletter email. We can do that for you too. You can request this by email to firstname.lastname@example.org.
You are visiting one of our websites
To ensure that our websites work properly on your device, technical information such as IP address, type of device used (smartphone for example), browser, etc. is temporarily stored. Temporarily recording this data is necessary to solve any problems.
In addition, this technical information is used to compile statistics with which we try to improve our website and product range. For example, we have renewed our webshop because we noticed that many people ordered with a smartphone and we sometimes add products to the range because many people turned out to be looking for this.
What information does De Hekserij share and with whom
We receive data from others and give data to others.
Our websites, emails and some systems are located on servers that are not owned by us. This means that our hosting providers have access to almost all data that we process. They only make use of this option in special cases (technical failure, legal obligation).
We receive our payments through payment providers such as Rabobank, Mollie and PayPal. They pass on the order number, the name, sometimes the address, email address, telephone number and IP address. We or you provide the same information to the payment provider. This is necessary so that we can process payment for an order. We can also pass this information on to a payment provider in the event of a refund.
We ship orders using the service of carriers, usually DHL, but we occasionally use the services of others. We provide the name, delivery address, email address and sometimes phone number needed. With this data, the carriers can do their job and fulfill their legal obligations.
At the request of governments, government services and supervisors, such as Customs, the Tax Authorities and the Police, we pass on personal data in special cases if they are necessary for the performance of their duties.
We use the services of others, such as an accountant, consultants, IT support staff. In certain cases, they need access to personal data in order to do their job with us.
What rights do I have
Right of access.
If you want to know which data we have recorded about you, you can request access. You can request this by email to email@example.com.
Right to rectification and addition
You can adjust data yourself in your account. You can provide us with other information so that we can correct it. You can request this by email to firstname.lastname@example.org.
Right to be forgotten
You have the right to delete or have deleted the personal data we hold about you. The latter only insofar as we are not legally obliged to keep it. You can request this by email to email@example.com.
Right to data portability
You have the right to request data that we hold about you as a file. This concerns the data relating to orders, including the order history. You can request this by email to firstname.lastname@example.org.
Right to restriction
In certain cases you may ask us to keep the data, but not to use it. For example, if we no longer need them, but you still want to be able to request them. You can request this by email to email@example.com.
If you have a complaint about the way in which we process personal data, you can submit that complaint to our customer service: customer firstname.lastname@example.org.
Separately, you can submit a complaint to the Dutch Data Protection Authority.
If you have further questions regarding the way in which we process personal data, you can ask them to our customer service: email@example.com.