Privacy Policy

Privacy Policy SimDi Beauty
https://www.simdibeauty.nl/

About our privacy policy

SimDi Beauty cares deeply about your privacy. We therefore process only the data that we need for (the improvement of) our services and handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services accessed on it of SimDi Beauty. The effective date of these terms is 14/11/2024; the validity of all previous versions expires upon publication of a new version. This privacy policy describes which data about you is collected by us, what this data is used for, and with whom and under what conditions this data may possibly be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and which rights you have with regard to the personal data you have provided to us.

If you have any questions regarding our privacy policy, you can contact our privacy contact person; you will find the contact details at the end of this privacy policy.


About data processing

Below you can read how we process your data, where we (have it) stored, which security techniques we use, and who has access to the data.


Webshop software

Shopify

Our webshop is developed with software from Shopify. Personal data that you provide to us for the purpose of our services is shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. On the basis of our agreement with them, Shopify is obliged to take appropriate security measures. These measures include the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored. Shopify reserves the right to share collected data within its own corporate group to further improve its services. Shopify complies with the statutory retention periods for (personal) data. The EU/US Privacy Shield may apply; your data may be processed in the United States.


Web hosting

Double D Concepts

We purchase web hosting and email services from Double D Concepts. Double D Concepts processes personal data on our behalf and does not use your data for its own purposes. This party may collect metadata about the use of the services; these are not personal data. Double D Concepts has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Double D Concepts is bound by confidentiality under the agreement.


Email and mailing lists

Shopify

We send our newsletters and transactional emails using our webshop software “Shopify”. All confirmation emails you receive from our website and web forms are sent via Shopify’s servers. Shopify will never use your name and email address for its own purposes. At the bottom of each automated email sent through our website you will find the “unsubscribe” link. If you click on it, you will no longer receive email from our website. This may seriously reduce the functionality of our website! Your personal data is transmitted, stored, and accessed securely by Shopify. Shopify uses cookies and other internet technologies that give insight into whether emails are opened and read. In addition, Shopify processes information about you as a recipient and the subject line of emails to improve the quality of its services; this data is stored for 30 days. Shopify reserves the right to use your data to further improve its services and, in that context, to share information with third parties.

Double D Concepts

We use the services of Double D Concepts for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. Double D Concepts has no access to our inbox, and we handle all our email traffic confidentially.


Payment processors

Shopify Payments

For handling payments in our webshop we use the Shopify Payments platform. Shopify Payments processes your name, address, place of residence, and your payment details such as your bank account or credit card number. Shopify Payments has taken appropriate technical and organizational measures to protect your personal data. Shopify Payments reserves the right to use your data to further improve its services and, in that context, to share (anonymized) data with third parties. In the case of an application for deferred payment (credit facility), Shopify Payments shares personal data and information regarding your financial position with credit rating agencies. All the above safeguards regarding the protection of your personal data also apply to the parts of Shopify Payments’ services for which they engage third parties. Shopify Payments does not store your data longer than legally permitted.


Reviews

WebwinkelKeur

We collect reviews via the WebwinkelKeur platform. If you leave a review through WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this data with us so that we can link the review to your order. In some cases WebwinkelKeur may contact you to explain your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data only to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the provision of services; we have granted permission for this. All above-mentioned guarantees with regard to the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.


Shipping and logistics

PostNL

If you place an order with us, it is our responsibility to have your package delivered to you. We use the services of PostNL for carrying out deliveries. For this purpose, we must share your name, address, and place of residence with PostNL. PostNL uses this data exclusively for the performance of the agreement. If PostNL engages subcontractors, PostNL will also make your data available to these parties.

DHL

We also use the services of DHL for deliveries. The same applies: your name, address, and place of residence are shared only for the fulfillment of the agreement. If DHL engages subcontractors, your data may also be provided to those parties.


Invoicing and accounting

Efactuurdirect

For maintaining our administration and accounting, we use the services of Efactuurdirect. We share your name, address, place of residence, and details relating to your order. This data is used to administer sales invoices. Your personal data is transmitted and stored securely. Efactuurdirect is bound by confidentiality and will treat your data confidentially. Efactuurdirect will not use your personal data for purposes other than those described above.


Purpose of data processing

General purpose of the processing

We use your data exclusively for the purpose of our services. This means that the purpose of the processing is always directly related to the assignment you have given. We do not use your data for (targeted) marketing. If you share data with us and we use this data — other than at your request — to contact you at a later time, we will explicitly ask your permission. Your data is not shared with third parties other than to meet accounting and other administrative obligations. These third parties are all bound to confidentiality by agreement with us or by oath or statutory obligation.


Automatically collected data

Data automatically collected by our website is processed with the aim of further improving our services. This data (for example your IP address, web browser and operating system) is not personal data.

Cooperation in tax and criminal investigations

In certain cases SimDi Beauty may be legally obliged to share your data in connection with tax or criminal investigations by government authorities. In such a case we are compelled to share your data, but we will oppose it within the limits provided by law.


Retention periods

We retain your data as long as you are our client. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will treat it as a request to be forgotten. This also means that we will not keep your data longer than two years from the last point of contact or transaction unless there is a legal justification for doing so. Based on applicable administrative obligations, we must retain invoices containing your (personal) data for as long as the applicable statutory period runs. However, employees will no longer have access to your client profile and documents that we created in response to your assignment.


Your rights

Under applicable Dutch and European legislation, you as the data subject have certain rights with respect to the personal data processed by or on behalf of us. We explain below what these rights are and how you can invoke them. As a rule and to prevent abuse, we will only send copies and transcripts of your data to the email address already known to us. If you wish to receive the data at another email address or by post, we will ask you to identify yourself. We keep records of completed requests; in the case of a request to be forgotten, we keep anonymized data. You will receive all copies and transcripts of data in the machine-readable format used in our systems. You always have the right to file a complaint with the Data Protection Authority if you suspect that we are using your personal data incorrectly.

Right of access

You always have the right to view the data that we (have) process(ed) that relates to your person or can be traced back to you. You can make a request to that effect to our privacy contact person. You will receive a response within 30 days. If your request is granted, we will send a copy of all data along with an overview of the processors who have access to it.

Right to rectification

You always have the right to have the data that relates to you corrected or supplemented. A request can be submitted to our privacy contact person and will be handled within 30 days.

Right to restriction of processing

You have the right to restrict the processing of your personal data. Upon approval, we will confirm that the data will no longer be processed until you lift the restriction.

Right to data portability

You have the right to have your personal data transferred to another provider. If granted, you will receive copies or transcripts of all your data processed by us or on our behalf.

Right to object and other rights

You have the right to object to the processing of your personal data by SimDi Beauty. If you object, we will immediately stop processing pending the handling of your objection. If your objection is justified, we will permanently stop the processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies; if you believe otherwise, please contact our privacy contact person.


Cookies

Google Analytics

Cookies from the American company Google are placed via our website as part of the “Analytics” service. We use this service to track and receive reports on how visitors use the website. This processor may be obliged under applicable laws and regulations to provide access to this data. We have not permitted Google to use the obtained analytics information for other Google services.

Cookies from third parties

If software solutions from third parties use cookies, this will be stated in this privacy policy.


Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. The most recent version can always be found on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you by email.


Contact details

SimDi Beauty
Krommedijk 51A
3312CD Dordrecht, Netherlands
T: (062) 850-6027
E: info@simdibeauty.nl

Privacy contact person:
Dijana Porute