Privacy policy

Our privacy policy

An Nahl cares deeply about your privacy. We therefore only process data that we need for (improving) our services and treat the information we collect about you and your use of our services with care. We never make your data available for commercial purposes to third parties.

This privacy policy applies to the use of the website and the services accessed on it by An Nahl. The effective date for the validity of these terms is 04/08/2023, with the publication of a new version, the validity of all previous versions expires. This privacy policy describes what information about you is collected by us, what this data is used for and with whom and under what conditions. This data may be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse, and what rights you have with respect to the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy contact person. you find the contact details at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we store these (or have them stored), which security techniques we use and to whom the data can be accessed.

Webstore software

WooCommerce

Our online store is built with software from WooCommerce. Any personal information you provide to our service is shared with this party. WooCommerce has access to your data to offer us (technical) support, but they will never use your data for any other purpose. Based on the agreement we have with them, WooCommerce is obligated to implement suitable security measures. These security measures include the use of SSL encryption and a stringent password policy. WooCommerce uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored.

WooCommerce reserves the right to share collected data within its own group to enhance its services further.

WooCommerce hosting

Our online store is built with WooCommerce software, and we've chosen SiteGround for our web hosting. Any personal information you provide for our services is shared with this party. SiteGround has access to your data to offer us (technical) support, but they will never use your data for any other purpose. Based on the agreement we have with them, SiteGround is obligated to implement suitable security measures. These security measures include the use of SSL encryption and a stringent password policy. Regular backups are also conducted to prevent data loss.

Webhosting

SiteGround

We procure web hosting and email services from SiteGround. SiteGround processes personal data on our behalf and does not utilize your data for its own purposes. However, this entity may gather metadata about the usage of its services, which are not considered personal data. SiteGround has implemented appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. SiteGround is obligated to maintain confidentiality under the agreement.

We utilize SiteGround services for our regular business email communications. This provider has implemented suitable technical and organizational measures to prevent abuse, loss, and corruption of your data and ours as much as possible. SiteGround does not have access to our mailbox, and we handle all our email communications confidentially.

Payment processors
Mollie

We utilize the platform of Mollie to manage (part of) the payments in our online store. Mollie processes your personal details such as your name, address, and place of residence, as well as your payment information, including your bank account or credit card number. Mollie has implemented suitable technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to enhance its services and, within this context, share (anonymized) data with third parties. All the aforementioned guarantees regarding the protection of your personal data also apply to those parts of Mollie's services that involve third parties. Mollie will not retain your data longer than allowed by legal time limits.

WebwinkelKeur

We gather reviews via the WebwinkelKeur platform. If you submit a review through WebwinkelKeur, you are obligated to provide your name and email address. WebwinkelKeur shares this information with us, enabling us to associate the review with your order. WebwinkelKeur also publishes your name on its own website. In certain instances, WebwinkelKeur may contact you to elaborate on your review. If we invite you to submit a review, we share your name and email address with WebwinkelKeur. They use this information solely to invite you to write a review. WebwinkelKeur has implemented appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to employ third-party services for the provision of its services.

All the aforementioned guarantees regarding the protection of your personal data also apply to those aspects of the service where WebwinkelKeur engages third parties.

Shipping and logistics

DHL

When you place an order with us, it's our responsibility to ensure your package is delivered to you. We employ DHL's services for the execution of deliveries. Consequently, it's necessary for us to share your name, address, and residential details with DHL. DHL uses this information exclusively for fulfilling the delivery contract. Should DHL engage subcontractors, your data will also be made available to these parties.

DPD

When you place an order with us, we are tasked with ensuring your package reaches you. We utilize the services of DPD for delivery purposes. As a result, we need to share your name, address, and place of residence with DPD. DPD uses this information solely for executing the delivery agreement. In the event that DPD employs subcontractors, your data will also be shared with these parties.

Invoicing and accounting

MoneyBird

For our record-keeping and accounting needs, we utilize the services of MoneyBird. We share your name, address, place of residence, and order details with them. This data is utilized for managing sales invoices. Your personal data is securely transmitted and stored. MoneyBird has implemented the necessary technical and organizational measures to protect your data from loss and unauthorized use. MoneyBird is obligated to maintain confidentiality and will handle your data accordingly. MoneyBird will not use your personal data for any purposes other than those previously outlined.

Purpose of data processing

The general purpose of processing.

We use your data solely for the purpose of delivering our services. This means that the reason for processing is always directly related to the order you place. We do not use your data for (targeted) marketing. If you share information with us and we later use this information - other than at your request - to contact you, we will seek your explicit permission beforehand. Your data will not be shared with third parties, except to fulfill accounting and other administrative obligations. These third parties are all obligated to maintain confidentiality under the agreement between them and us, or due to an oath or legal obligation.

Data collected automatically

Data automatically collected by our website is processed with the aim of continually improving our services. This data (e.g., your IP address, web browser, and operating system) is not considered personal data. 

Cooperation with Tax and Criminal Investigations: 

In certain circumstances, An Nahl may be legally obligated to share your data in relation to governmental fiscal or criminal investigations. In such cases, we are compelled to share your data, but we will resist such actions to the extent that the law allows.

Retention periods

We will keep your data for as long as you remain our client. This means that we will maintain your customer profile until you indicate that you no longer wish to utilize our services. If you communicate this to us, we will interpret it as a request to erase your data. Consequently, we will not retain your data for more than two years from the last point of contact or transaction, unless there is a legal justification to do so. Due to applicable administrative obligations, we are required to keep invoices containing your (personal) data; therefore, we will retain this data for the duration of the relevant term.

However, once this period has passed, employees will no longer have access to your client profile and any documents produced as a result of your orders.

Your rights

In accordance with Dutch and European legislation, you, as a data subject, have certain rights concerning the personal data processed by us or on our behalf. We explain below what these rights are and how you can exercise them. To prevent misuse, we will only send copies and duplicates of your data to your already known email address. If you request the data be sent to a different email address or via post, for instance, we will ask you to verify your identity.

We maintain records of completed requests, and in the case of a 'forget me' request, we keep anonymized data. You will receive all copies and transcripts of data in the machine-readable data format that we utilize within our systems. You have the right to file a complaint with the Personal Data Authority at any time if you suspect that we are mishandling your personal data.

Right of inspection

You always have the right to access the data that we process (or have processed) that pertains to you or can be traced back to you. You can make a request to our designated privacy contact. You will receive a response to your request within 30 days. If your request is approved, we will send you a copy of all data, along with an overview of the processors who have this data, to the email address we have on file for you, specifying the category under which we have stored this data.

Right of rectification
You always have the right to request corrections to the data that we process (or have processed) that pertains to you or can be traced back to you. You can make such a request to our designated privacy contact. You will receive a response to your request within 30 days. If your request is approved, we will send you a confirmation that the data has been adjusted to the email address we have on file for you.
 
Right to restriction of processing
You always have the right to limit the processing of data that we process or have processed that relates to you or can be traced back to you. You can make such a request to our designated privacy contact. You will receive a response to your request within 30 days. If your request is approved, we will send a confirmation to the email address we have on file for you, stating that the data will no longer be processed until you lift the restriction.
 
Right to portability

You always have the right to have the data we process (or have processed) that relates to your person or is traceable by another party. You can make a request of this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you, an e-mail to the address that is known to us, copies or transcripts of all data about you that we have processed on our behalf by other processors or third parties. We will no longer be able to continue providing services in such a case, because the secure interconnection of data files can then no longer be guaranteed.

Right of objection and other rights

In certain cases, you have the right to object to the processing of your personal data by An Nahl. If you lodge an objection, we will immediately suspend data processing pending the resolution of your objection. If your objection is justified, we will provide you with copies of the data that we have processed and subsequently cease processing permanently.

Furthermore, you have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that this right applies. If you believe otherwise, please contact our designated privacy contact.

Cookies

Google Analytics

Our website utilizes cookies placed by the American company Google as part of their "Analytics" service. We use this service to monitor and receive reports on how visitors interact with our website. 

Under certain laws and regulations, this processor may be required to provide access to these data. We gather information about your browsing behavior and share this data with Google. Google can interpret this information in conjunction with other datasets, enabling them to track your movements on the internet. Google uses this information to, among other things, deliver targeted advertisements (Adwords) and offer other Google services and products.

Third party cookies
In the event that software solutions from third parties use cookies, this is stated in this
privacy statement.
 
Changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, on this page you will always find the most latest version. If the new privacy policy affects the way we process data already collected relating to you, we will notify you by e-mail.

Contact

An Nahl
De Nieuwe Erven 3
5431 NV Cuijk

KVK: 91024420
BTW: NL002253427B87

info@an-nahl.com