Privacy Statement Dr. Candy

This is the privacy statement of Dr. Candy. This document explains how Dr. Candy handles the processing of your personal data. In processing your personal data, Dr. Candy takes the utmost care.

Basis of processing:

In the course of providing Dr. Candy’s services, your personal data will be processed. Dr. Candy only processes data that we deem necessary for (improving) our services and treat information collected about you and your use of our services with care. The basis for processing this data is the agreement you have entered into with Dr. Candy. Personal data about you may also be processed by visiting the www.drCandy.nl website if you have given your consent.

Acquisition of personal data:

If you use Dr. Candy’s services, you yourself provide some personal data to Dr. Candy, or personal data is obtained from you as part of the agreement. Personal data means any data relating to identified or identifiable natural person.

Categories of personal data

Dr. Candy processes the following categories of personal data:

– Contact and name and address information;
– E-mail address;
– Financial data;
– Order History;
– IP address;
– Location details;

Need processing:

The processing of your personal data is necessary to perform the services. The services provided by Dr. Candy cannot be fully performed without the processing of your personal data. If specific purposes related to your data require your explicit consent, you must give your consent separately.

Purpose of processing:

The personal data processed by Dr. Candy are for the purpose of:

– Contacting you to inform you about the products you have purchased and their implementation;
– Performing its services;
– Making payments;
– Compliance with legal obligations;
– Improve the website by analyzing visitor behavior on the website;
– Data exchange with third parties for the purpose of service delivery.

Retention period:

Personal data processed by Dr. Candy are kept in accordance with relevant laws and regulations. Dr. Candy retains data for as long as you are a client of ours. This means that Dr. Candy will keep your client profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also interpret this as a forgetting request. If a longer retention period is required by law or regulations, personal data will be kept longer in accordance with these requirements. On the basis of applicable administrative obligations we must keep invoices with your (personal) data, this data will Dr. Candy for as long as the applicable term runs.

Third-party processing:

Dr. Candy shares personal data with third parties only if strictly necessary for the performance of an agreement and to comply with relevant laws and regulations. The third parties with whom personal data is shared are:
Payment Provider for the purpose of executing the agreement. The category of personal data processed is financial data.
Hostnet processes data for the purpose of improving services The category of personal data processed are contact and name and address information; E-mail address; IP address; Order history; and/or financial data.
Web store software. For the purpose of contract performance. The category of personal data processed are contact and name and address information; E-mail address; IP address; Order history; and/or financial data
The engaged delivery service, such as DHL or GLS, for the purpose of compliance and/or execution of an agreement. The category of personal data processed are contact and name and address information
Mailchimp, The category of personal data processed is email address.
Other financial agencies, for the purpose of executing the agreement and handling financial records. The category of personal data processed are contact and NAW data; E-mail address and/or financial data.
Bookkeeper, for the purpose of handling financial records. The category of personal data processed are contact and name and address information and/or financial data.

Security of Personal Data:

Dr. Candy takes the protection of your personal data seriously and in this regard, taking into account the state of the art, implementation costs, as well as the nature, scope, context and purposes of processing and the risks to the rights and freedoms of individuals, which vary in their likelihood and severity, takes appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Website:

By using the www.drcandy.com website, you agree to the disclaimer. Dr. Candy reserves the right at any time to change the content of its website and/or this disclaimer without informing its customers and/or users of the website of this change. The content of the website has been compiled with the utmost care, but may nevertheless contain possible inaccuracies or be incomplete. Dr. Candy in no way accepts any liability for damages caused by, or resulting from, the use of the website. Use of this website is entirely at a user’s own risk and expense. No rights can be derived from the contents of the website. All texts at www.drcandy.nl. are copyrighted and owned by Dr. Candy.

Cookie Statement:

Dr. Candy uses technical, functional and analytical cookies to optimize the website. Cookies are small text files that are sent along with the visit to a website to make visitors’ user experiences more efficient. Dr. Candy may, by law, store cookies on your device if these cookies are strictly necessary to use the website. Other types of cookies require your consent. We recommend accepting cookies in connection with the usability of the website.
The cookies used by Dr. Candy are functional cookies: these cookies ensure that the website works properly. These cookies have no privacy implications so no consent needs to be sought and granted. For example, these cookies save your browser settings so that our website can be best viewed, or that the website remains accessible (load-balancing) but also cookies that ensure that no other cookies may be placed (no-follow).
Social Media cookies: these are third-party cookies and are set by the Social Media websites themselves. For example, when you click the Social Media button on the website, a Social Media cookie is set. This allows the social media party to recognize your IP address as soon as you share an article from the website. For the cookies of Social Media parties and the data and/or personal data they collect with them, Dr. Candy refers you to the privacy and cookie statements of these parties.
Cookies from Google are placed on the Dr. Candy website for the purpose of Google Analytics. We do not keep information of what you do on the Internet. Google Analytics may be required under applicable laws and regulations to provide access to this data This has the effect that Dr. Candy cannot link information to a natural person. If you have any questions about this, please contact info@drcandy.nl

Browser settings:

If you do not want websites to place cookies on your device with which you view the website, you can adjust your browser settings. Before a cookie is placed, you will receive a warning and must consent to the cookie. Failure to do so may result, for example, in reduced website performance. You can adjust your browser settings so that your browser refuses all cookies as well as those from third parties. You can also delete placed cookies. To do this, you need to adjust your browser settings through preferences and then you can adjust privacy settings.

Rights of concerned:

As a data subject, you have the following rights:
Right of inspection; As a data subject, you have the right to obtain clarification as to whether or not your personal data are being processed and, where this is the case, to obtain access in relation to their processing.
Right to rectification. You have the right to obtain rectification and completion of inaccurate data. – Right to data erasure. Without unreasonable delay, a data subject must obtain erasure of personal data concerning him.
Right to restriction of processing. As a data subject, you have the right to restrict the processing of your personal cases. To do so, contact Dr. Candy
Right to data portability. A data subject has the right to obtain the personal data concerning him that he has provided to Dr. Candy in a structured, common and machine-readable form, and also to transfer these data to Dr. Candy without being hindered by the controller to whom they were provided.
Right to object. The data subject shall have the right to object at any time, on grounds relating to his particular situation, to the processing of personal data concerning him, including profiling, on the basis of those provisions. Dr. Candy shall cease processing personal data unless it adduces compelling legitimate grounds for processing which override the interests, freedoms and rights of the data subject relating to the exercise, institution or support of legal claims.

Complaint:

If you have a complaint about Dr. Candy’s handling of your personal data, or wish to exercise any of the above rights, please contact us at [website]. In order to ensure that you wish to exercise a right, Dr. Candy requests that you send a copy of your proof of identity. You may want to black out your passport photo and MRZ (strip of numbers at the bottom) to protect your privacy. Dr. Candy will respond to your request as soon as possible, but no later than 4 weeks. You can also file a complaint with the Personal Data Authority. This is the competent enforcement agency. To do so, please contact us at this link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Privacy Statement Changes:

Dr. Candy may update the privacy statement at any time. The most recent version is published on the website. Therefore, always keep an eye on the website for the latest version. If the new privacy policy affects how we process data already collected about you, we will notify you by email.
This version was prepared on 23-02-2019