PRIVACY POLICY

Last updated: 28-06-2023

ABOUT OUR PRIVACY POLICY

Viv! Christmas cares deeply about your privacy. Therefore, we only process data that is necessary for (improving) our services and handle the information we have collected about you and your use of our services with care. We never provide your data to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided by Viv! Christmas. The effective date of these terms is 28/06/2023, and the validity of all previous versions expires upon publishing a new version. This privacy policy describes the data we collect about you, the purposes for which we use this data, and under what conditions we may share this data with third parties. We also explain how we store your data, how we protect it against misuse, and what rights you have regarding the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy officer. You can find the contact information at the end of our privacy policy.

DATA PROCESSING

Below, you can read about how we process your data, where we store it (or have it stored), what security techniques we use, and who has access to the data.

WEB STORE SOFTWARE

Shopify

Our web store is developed using Shopify software. Personal data that you provide to us for the purpose of our services is shared with this party. Shopify has access to your data to provide us with technical support and will never use your data for any other purpose. Based on the agreement we have with them, Shopify is obligated to implement appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information regarding your use of the software, but no personal data is collected or stored. Shopify reserves the right to share collected data within its own group to further improve its services. Shopify complies with the applicable legal retention periods for (personal) data. The EU/US Privacy Shield applies, and your data may be processed in the United States.

WEB HOSTING

Shopify

We use web hosting and email services from Shopify. Shopify processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of its services, which does not include personal data. Shopify has implemented appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. Shopify is bound by a confidentiality agreement.

EMAIL AND MAILING LISTS

Shopify and Klaviyo

Our website uses Shopify, a third-party service, to handle email traffic originating from our website and the sending of newsletters, if applicable. All confirmation emails you receive from our website and web forms are sent through Shopify servers. Shopify will never use your name and email address for its own purposes. At the bottom of each automated email sent through our website, you will find an "unsubscribe" link. Clicking on this link will unsubscribe you from receiving further emails from our website. However, this may significantly reduce the functionality of our website. Your personal data is securely stored by Shopify. Shopify uses cookies and other internet technologies to track whether emails are opened and read. Shopify reserves the right to use your data to further improve its services and share information with third parties for that purpose.

For our regular business email communication, we use the services of Klaviyo. This party has implemented appropriate technical and organizational measures to prevent the misuse, loss, and corruption of your data and ours. Klaviyo does not have access to our mailbox, and we treat all email communication as confidential.

PAYMENT PROCESSORS

Shopify Payment

For processing (part of) the payments in our web store, we use the Shopify Payment platform. Shopify Payment processes your name, address, city, and payment details, such as your bank account or credit card number. Shopify Payment has implemented appropriate technical and organizational measures to protect your personal data. Shopify Payment reserves the right to use your data to further improve its services and share (anonymized) data with third parties. In the case of a deferred payment request (credit facility), Shopify Payment shares personal data and information about your financial position with credit rating agencies. The safeguards mentioned above regarding the protection of your personal data also apply to the parts of Shopify Payment's services for which they engage third parties. Shopify Payment does not retain your data longer than permitted by legal retention periods.

REVIEWS

Shopify

We collect reviews through the Shopify platform. When you leave a review via Shopify, you are required to provide your name, city, and email address. Shopify shares this data with us so that we can link the review to your order. Shopify also publishes your name and city on its own website. In some cases, Shopify may contact you to provide an explanation regarding your review. If we invite you to leave a review, we share your name and email address with Shopify, who will only use this data for the purpose of inviting you to leave a review. Shopify has implemented appropriate technical and organizational measures to protect your personal data. Shopify may engage third parties to provide its services, and we have given permission to Shopify for this purpose. The safeguards mentioned above regarding the protection of your personal data also apply to the parts of the services for which Shopify engages third parties.

SHIPPING AND LOGISTICS

PostNL

When you place an order with us, it is our responsibility to deliver your package to you. We use the services of PostNL for the delivery. Therefore, we need to share your name, address, and city with PostNL. PostNL only uses this data for the purpose of executing the agreement. If PostNL engages subcontractors, it will also provide your data to these parties.

EXTERNAL SALES CHANNELS

Bol.com

We sell (part of) our products through the Bol.com platform. If you place an order through this platform, Bol.com shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have implemented appropriate technical and organizational measures to protect your data against loss and unauthorized use.

PURPOSE OF DATA PROCESSING

General purpose of processing

We only use your data for the purpose of providing our services. This means that the purpose of the processing is always directly related to the request you have made. We do not use your data for (targeted) marketing purposes. If you share your data with us, and we use this data to contact you at a later time - other than at your request - we will explicitly ask for your consent. We do not share your data with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound by confidentiality agreements with us or are subject to an oath or legal obligation.

Automatically collected data

Data automatically collected by our website is processed for the purpose of improving our services. This data (such as your IP address, web browser, and operating system) is not personal data.

Cooperation in tax and criminal investigations

In certain cases, Viv! Christmas may be obligated to share your data in connection with tax or criminal investigations by government authorities. In such cases, we are compelled to share your data, but we will resist within the limits of the law.

Retention periods

We retain your data as long as you are a client of ours. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you make such a request, we will also interpret it as a request for erasure. According to applicable administrative obligations, we must retain invoices containing your (personal) data, so we will retain this data for as long as the relevant retention period requires. However, employees no longer have access to your client profile and documents created based on your order.

Your rights

Under current Dutch and European legislation, you, as the data subject, have certain rights regarding the personal data processed by or on behalf of us. Below, we explain what these rights are and how you can exercise them. To prevent misuse, we will send copies and copies of your data solely to your already known email address. In case you request the data to be sent to another email address or by mail, we will ask you to provide identification. We maintain an administration of handled requests, and in the case of a request for erasure, we anonymize the data. You will receive all copies and copies of data in a machine-readable data format used within our systems. You have the right at all times to file a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data in the wrong way.

Right of access

You always have the right to access the data we process (or have processed) that relates to your person or is traceable to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors that have this data under their control, stating the category under which we have stored this data.

Right to rectification

You always have the right to have the data we process (or have processed) that relates to your person or is traceable to you adjusted. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on record, stating that the data has been adjusted.

Right to restriction of processing

You always have the right to restrict the data we process (or have processed) that relates to your person or is traceable to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on record, stating that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have the data we process (or have processed) that relates to your person or is traceable to you carried out by another party. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all data about you that we have processed or that has been processed on our behalf by other processors or third parties. It is likely that, in such a case, we can no longer continue our service, as the secure linking of data files can no longer be guaranteed.

Right to object and other rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of Viv! Christmas. If you object, we will immediately cease data processing pending the resolution of your objection. If your objection is well-founded, we will provide you with copies and/or copies of data that we (or have) processed, and subsequently cease processing permanently. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.

COOKIES

Google Analytics

Our website uses cookies from the American company Google as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. This processor may be obliged to provide access to this data under applicable laws and regulations. We collect information about your browsing behavior and share this data with Google. Google may interpret this information in conjunction with other datasets to track your movements on the internet. Google uses this information to offer targeted advertisements (Adwords) and other Google services and products.

Third-party cookies

If third-party software solutions use cookies, this is mentioned in this privacy policy.

Changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you by email.

CONTACT INFORMATION

Viv! Christmas
Daver 11
4012 BA Kerk-Avezaath
Netherlands

T (070) 209-2270
E info@vivchristmas.com

Privacy Officer

Willeke Hofstee