Privacy Notice

1. Who is responsible for your data?

The data controller is:

Ascanbe Amsterdam BV Trading as Ascanbe Schubertlaan 28 4837 CP Breda The Netherlands

Chamber of Commerce (KVK): 42152433 VAT ID: NL869946328B01 Email: info@ascanbe.nl

Ascanbe Amsterdam BV determines how and why your personal data is processed.

2. Personal data we collect

Depending on how you interact with Ascanbe, we may process the following personal data.

Orders and purchases Your name, email address, billing and delivery address, telephone number if provided or required for delivery, order details, order number, payment status, delivery information, returns and relevant customer-service correspondence.

Payments Payment information necessary to confirm and administer your payment. Full payment-card details are processed directly by our payment service provider and are not stored by Ascanbe.

Contact and customer service Your name, contact details, the content of your message, any order number you provide and subsequent correspondence with us.

Newsletter and marketing Your email address, subscription status and information relating to your consent, including when consent was given or withdrawn.

Website and technical data Your IP address, device type, browser information, operating system, website interactions and cookie identifiers. Where required by law, we collect information through non-essential cookies or similar technologies only after you have given consent.

Fraud and security data Technical and transactional information that may reasonably be necessary to detect fraud, misuse or security incidents.

3. Why we process your data

We process personal data only where we have a lawful basis to do so.

To process and fulfil your order We use your information to accept and administer orders, process payments, arrange delivery, handle returns and provide customer service. Legal basis: performance of a contract or taking steps at your request before entering into a contract — Article 6(1)(b) GDPR.

To communicate with you We use your information to answer questions, respond to contact requests and communicate with you about an existing or potential order. Legal basis: performance of a contract or steps prior to entering into a contract — Article 6(1)(b) GDPR — or our legitimate interest in providing effective customer service — Article 6(1)(f) GDPR.

To comply with legal obligations We process and retain certain information where required for tax, accounting and other legal purposes. Legal basis: compliance with a legal obligation — Article 6(1)(c) GDPR.

To send newsletters and marketing communications Where required, we send marketing communications only after you have given your consent. You can withdraw that consent at any time, including by using the unsubscribe link in our emails. Legal basis: consent — Article 6(1)(a) GDPR.

To analyse and improve our website Where analytics or similar non-essential technologies require consent, we use them only after that consent has been given. Legal basis: consent — Article 6(1)(a) GDPR.

To protect Ascanbe and our customers We may process information where reasonably necessary to protect our website, prevent fraud, investigate misuse and maintain the security of our systems. Legal basis: our legitimate interests in protecting our business, website and customers — Article 6(1)(f) GDPR.

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests outweigh them.

4. When providing data is necessary

Certain personal data is necessary for us to enter into and perform a purchase agreement with you.

For example, we need sufficient identification, contact, payment and delivery information to process and deliver an order.

If you do not provide information that is necessary to complete a purchase, we may be unable to accept or fulfil your order.

Providing information for newsletters and non-essential marketing or analytics purposes is optional.

5. Who we share your data with

We do not sell your personal data.

We may share personal data where necessary with carefully selected service providers and other recipients, including:

• payment service providers;
• shipping, logistics and delivery partners;
• website hosting and IT service providers;
• e-commerce and order-management providers;
• email and newsletter providers;
• analytics and cookie providers, where you have provided the required consent;
• professional advisers such as accountants or legal advisers; and
• public authorities where disclosure is required by law.

Where a service provider processes personal data on our behalf, we require appropriate data-protection arrangements in accordance with applicable law.

We share only the personal data reasonably necessary for the relevant service or purpose.

6. International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that an appropriate legal mechanism is used as required by the GDPR.

Depending on the destination and recipient, this may include an adequacy decision adopted by the European Commission, the EU Standard Contractual Clauses or another legally recognised safeguard.

You may contact us at info@ascanbe.nl if you would like further information about the safeguards applicable to a particular international transfer.

7. How long we keep your data

We do not keep personal data for longer than necessary for the purpose for which it was collected, unless a longer retention period is required by law or reasonably necessary for the establishment, exercise or defence of legal claims.

In general:

Order, invoice and accounting information We retain information that forms part of our statutory administration for the period required under applicable Dutch tax and accounting legislation.

Customer service and correspondence We retain correspondence for as long as reasonably necessary to deal with your request, order, warranty matter, complaint or potential legal claim.

Newsletter information We retain your newsletter subscription information until you unsubscribe or otherwise withdraw your consent. We may retain limited information afterwards where necessary to record and respect your opt-out.

Cookie and analytics information Retention periods depend on the cookie or technology concerned and are described in our Cookie Policy.

Security and fraud information We retain this information only for as long as reasonably necessary for security, fraud prevention and the establishment or defence of legal claims.

When personal data is no longer required, we delete or anonymise it where appropriate.

8. Cookies

We use cookies and similar technologies to operate our website and, where you consent, to understand website usage and support analytics or marketing activities.

Cookies that are not strictly necessary will only be placed or accessed where the required consent has been obtained.

You can change or withdraw your cookie choices at any time through the cookie settings available on our website.

Further information is available in our Cookie Policy.

9. Your privacy rights

Under the GDPR, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data where the legal requirements are met;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another organisation;
• withdraw your consent at any time where processing is based on consent; and
• lodge a complaint with a competent data-protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights are subject to the conditions and exceptions set out in applicable data-protection law. For example, we cannot delete information that we are legally required to retain.

To exercise your rights, contact us at:

info@ascanbe.nl

We may ask for information reasonably necessary to verify your identity before processing your request.

We will respond within the period required by applicable data-protection law, normally within one month.

10. Automated decision-making

Ascanbe does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

If this changes, we will update this Privacy Notice and provide the information required by applicable law.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No online system can be guaranteed to be completely secure, but we regularly consider the measures appropriate to the nature of the personal data we process and the risks involved.

12. Complaints

If you have questions or concerns about how we process your personal data, please contact us first at info@ascanbe.nl.

You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens

If you live in another EU or EEA country, you may also have the right to lodge a complaint with the competent supervisory authority in your country of residence.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time, for example when our services, service providers or legal obligations change.

The most recent version will always be published on this website. The date of the latest update is shown at the top of this page.

14. Contact

For questions about this Privacy Notice or the processing of your personal data, please contact:

Ascanbe Amsterdam BV Schubertlaan 28 4837 CP Breda The Netherlands

Email: info@ascanbe.nl Chamber of Commerce (KVK): 42152433 VAT ID: NL869946328B01