Data protection

About our privacy policy

Glaskasten respects your privacy. Therefore, we only process data that we need to improve our services, and we will handle the information we have collected about you and your use of our services with care. We will never share your data with third parties for commercial purposes.

This privacy policy applies to the use of the Glaskasten website and the services available through it. The effective date for these terms is December 5, 2018. With the publication of a new version, all previous versions become invalid. This privacy policy describes what data we collect about you, what this data is used for, and with whom and under what conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data from misuse, and what rights you have regarding the personal data you provide.

If you have any questions about our privacy policy, please feel free to contact us. You can find our contact details on our contact page.

About data processing

Below you will find information on how we process your data, where we store it (or have it stored), what security technologies we use, and who has access to the data.

Webshop-Software

WordPress and WooCommerce

Our online shop was developed in-house using WordPress and WooCommerce software. WordPress uses cookies to collect technical information about your use of the software; no personal data is collected or stored.

Web hosting

VIP Internet

We use web hosting and email services provided by VIP Internet. VIP Internet processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This metadata is not personal data. VIP Internet has implemented appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. VIP Internet is bound by confidentiality agreements.

For regular business email communication, we use the services of VIP Internet. This party has implemented appropriate technical and organizational measures to prevent misuse, loss, and falsification of your and our data as far as possible. VIP Internet does not have access to our inbox, and we treat all our email communication confidentially.

Payment service provider

Mollie

We use the Mollie platform to process (a portion of) the payments in our online shop. Mollie processes your name, address, and city/town, as well as your payment information, such as your bank account details or credit card number. Mollie has implemented appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, in this context, to share (anonymized) data with third parties. All of the aforementioned guarantees for the protection of your personal data also apply to those parts of Mollie’s services for which third parties are engaged. Mollie will not store your data for longer than legally permitted.

Shipping and logistics

transport

When you place an order with us, it is our responsibility to have your package delivered to you. We use the services of various transport companies to carry out deliveries. Therefore, it is necessary for us to share your name, address, and location details with these companies, who will use this data solely for the purpose of fulfilling the contract. If the transport company uses subcontractors, it will also make your data available to these parties.

Invoicing and accounting

Accounting software

We use offline accounting software for our administration and accounting. Therefore, your data in our accounting system is not accessible to third parties.

Purpose of data processing

General purpose of processing

Objectif du traitement

Automatically collected data

Data automatically collected by our website is processed to further improve our service. This data (e.g., your IP address, web browser, and operating system) is not personal data.

Cooperation in tax and criminal investigations

In certain cases, Glaskasten may be legally obligated to disclose your data in connection with official tax or criminal investigations. In such a case, we are required to disclose your data, but will defend ourselves against this to the extent legally possible.

Retention periods

We store your data for as long as you are a customer. This means we keep your customer profile until you indicate that you no longer wish to use our services. When you inform us of this, we also consider it a request to be forgotten. Due to applicable legal requirements, we are obligated to retain invoices containing your (personal) data and will therefore keep them for as long as the applicable retention periods stipulate. However, employees will no longer have access to your customer profile or the documents we created as a result of your order.

Your rights

In accordance with applicable Dutch and European legislation, you, as a data subject, have certain rights regarding the personal data we process or process on our behalf. To prevent misuse, we generally only send transcripts and copies of your data to the email address we already have on file for you. If you wish to receive the data at a different email address or, for example, by post, we will ask you to verify your identity. We log all processed requests; in the case of a request to be forgotten, we use anonymized data. You will receive all transcripts and copies of data in the machine-readable data format that we use within our systems. You have the right to lodge a complaint with the data protection authority at any time if you suspect that we are processing your personal data unlawfully.

Right of access

You have the right to access the data we process (or have processed) that relates to you or can be traced back to you at any time. You can submit a corresponding request to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the email address we have on file, along with an overview of which data processors store this data and under which category we have stored it.

Right of rectification

You have the right to have the data we process (or have processed) that relates to you or can be traced back to you changed at any time. You can submit a corresponding request to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you confirmation to the email address we have on file that the data has been changed.

Right to restriction of processing

You have the right at any time to restrict the processing of your personal data that we process (or have processed) and that can be traced back to you. You can submit a corresponding request to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you confirmation to the email address we have on file that the data will no longer be processed until you lift the restriction.

Right to transferability

You have the right at any time to have the data we process (or have processed) that relates to you or can be traced back to you processed by another party. You can submit a corresponding request to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies of all data about you that we have processed or that has been processed by other processors or third parties on our behalf to the email address we have on file. In all likelihood, we will no longer be able to provide our service in such a case, as the secure linking of the data records can then no longer be guaranteed.

Right to object and other rights

You may have the right to object to the processing of your personal data by or on behalf of Glaskasten. If you object, we will immediately cease processing your data until your objection has been resolved. If your objection is justified, we will provide you with transcripts and/or copies of the data we process (or have processed) and then permanently cease processing it. You also have the right not to be subject to a decision based solely on automated processing or profiling. We do not process your data in a way that would trigger this right. If you believe this is the case, please contact our data protection officer.

Cookies

Our website only uses cookies that are strictly necessary for its operation. No third-party cookies are used on our website or online shop. We do not collect any (personal) data via cookies.

Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. However, you will always find the most up-to-date version on this page. Should the new privacy policy affect how we process the data we have already collected about you, we will inform you by email.