Privacy statement
“DDC” as trade name of the private limited company Canadaco B.V, located and with offices in (7482GW) Haaksbergen, at the address Handelsstraat 38 is the data controller as referred to and mentioned in this privacy statement.
Processing on the basis of “Execution of agreement” and/or “Legal obligation”.
Execution of agreement
DDC is engaged in the marketing of drying materials, and in particular via its website (and related contact options) This marketing takes place on the basis of concluded purchase agreements and/or the (offer) process preceding it. The provision of information by the customer, with the wish to come to an agreement – if possible – can also be included in this (quotation) process.
In order to process these offers and/or agreements, it is necessary for DDC to process data. This is done on the basis of “execution of agreement”.
This data processed in the process may relate to orders and/or companies, but may also include data on the basis of which individuals can be identified. This may include
– name and address details,
– delivery addresses,
– e-mail addresses,
– telephone numbers,
– bank account numbers or payment details;
– Other data related to entering into or completing an agreement, which are actively provided by the customer.
Without this information, the correct order information cannot be linked to the correct customer (account) and contact information, as a result of which it is not possible for DDC to properly fulfil the agreements and/or provide the customer with the correct information.
Legal obligation
On the basis of the fiscal administration and retention obligation, DDC is obliged to store the data belonging to the basic administration (including data concerning the accounts receivable and accounts payable, as well as the purchase and sales records) for 7 years. Only by processing the above data does DDC consider itself capable of complying with its fiscal obligation.
With regard to both the above-mentioned bases, DDC obtains these data when a (new) client contacts DDC, whether or not via the website, contact form or (email) correspondence with DDC, and the client provides data.
Where necessary, these data will be processed by DDC.
Processing based on “Consent” basis
Marketing communications
With regard to marketing activities, various parties and/or programmes may be used by DDC for the purpose of, for example, distributing marketing communications. Data are also processed through these programmes and parties, which may involve data on the basis of which individuals can be identified.
Without the use of these programmes, it is not feasible for DDC to address existing and new customers.
Before recording and processing data for these marketing activities, permission is requested from the customer.
Cookies and analysis programs
For marketing purposes, DDC may use (the placement of) cookies and programmes for the analysis of the obtained (cookie) data. This makes it possible for DDC to conduct market research to a certain extent.
With analysis programmes it is possible to obtain information that could possibly lead to the identification of any (natural) person. For this reason, this data also falls within the scope of the AVG.
Information regarding the cookies placed and/or analysed by (or on behalf of) DDC, and the data that may or may not subsequently be processed as a result, can be found at the bottom of this privacy statement.
Here too, permission is requested from the client before data for these marketing activities are recorded and processed.
How long will (personal) data be kept by DDC
Pursuant to tax legislation, DDC is obliged to keep data related to accounting for 7 years.
Data obtained through the use of analysis programmes are deleted no later than 50 months after registration. DDC states that it considers this period reasonable, as it needs this period to be able to follow up on the outcome of market research and adjust its product range and policies accordingly.
An overview of the cookies used and placed together with the retention period per cookie can be found at the bottom of this privacy statement.
(Personal) data that does not relate to any of the above options will be removed within 6 months of receipt or adjusted in such a way that the data can no longer be traced back to a specific natural person.
With whom DDC shares data
For a proper service and business operation, DDC is obliged to involve third parties.
With regard to service
DDC may, for the purpose of its services, use third parties for e.g. shipping packages, which may also include dropshipping (direct shipment from the manufacturer to the end customer).
These parties have (limited) access to the data of DDC’s relations. Where necessary, DDC enters into a processing agreement with these parties to regulate the protection and use of these data.
With regard to business operations
DDC makes use of the services and products of third parties. For example, in addition to using administration software and an external accountant, a party providing services in the field of hosting and maintenance of the website is engaged. Internally, DDC uses software in the field of order / stock and so on, as well as programmes such as Microsoft Office 365.
These parties have (limited) access to the data of DDC’s relations. Where necessary, DDC enters into a processing agreement with these parties to regulate the protection and use of these data.
Marketing activities
As described earlier, DDC deploys companies and/or cookies and/or programmes for marketing activities.
Data already collected and/or data obtained by these parties can, after use, be used for the purpose of market research, improvement of website/product range and services, among other things. Where necessary, DDC enters into a processing agreement with these parties to regulate the protection and use of this data.
Other third parties
No further data will be shared with other third parties without the consent of DDC’s customer. The only exception is if DDC is obliged to do so on the basis of a statutory provision.
Sharing data with parties outside the EU
For the use of programmes / parties, DDC obtains advice from third parties, e.g. its accountant or its internet marketing agency. If this results in the advice to have the data processed by a party outside the EU then a specific processor agreement will be entered into with that party.
As DDC delivers to customers outside the EU, DDC will have to share data with shipping partners for delivery. To the extent possible, DDC will endeavour to ensure proper processing of data by those parties involved.
Security of data
DDC takes care of organisational and technical measures to secure (personal) data. These include securing the data received after using the webshop and using a firewall and anti-virus software.
Third-party websites
This privacy statement does not apply to third-party websites connected to DDC by links (or otherwise). DDC cannot guarantee that these parties handle (personal) data in the desired manner. You are advised to consult the privacy statement of these third parties to find out how they handle data.
Your rights regarding the processing and protection of personal data
Pursuant to the General Data Protection Regulation, you have several rights regarding your personal data. These rights are listed below. If you have a request and/or comment regarding one or more of these rights, please contact DDC using the contact details below. We will process your request within 14 days.
By e-mail: info@ddc.nl
Phone : +31 (0)85 888 1222
Post : DDC, Handelsstraat 38, 7482 GW Haaksbergen
Right of inspection
This gives you the right to inspect the data that DDC has available on you.
Right to correction, restriction and deletion
You also have the right to have the data DDC has available about you corrected, supplemented or deleted in its entirety.
With regard to the deletion of data, DDC must comply with the retention obligation imposed on it pursuant to the Act. DDC therefore cannot avoid keeping the data that fall under this obligation to retain. All other data (if any) will – after an explicit request from you – be removed from DDC’s systems.
You also have the right to restrict the processing of your personal data. This means that DDC will keep your data, but will no longer use them. This may apply in several cases. An example is a legal process to be initiated for which you may need the data. If you believe that you are entitled to the right to restriction, you are requested to contact DDC.
Right to data portability
You also have the right to receive the personal data that DDC holds about you in a machine-readable format. This allows you to include this data in your database or that of a third party for safekeeping or processing, for example.
Right to withdraw consent
You have the right to withdraw your consent to the processing of certain personal data. If you wish to make such a request, you can reach us via 1 of the contact options above.
Complaints & the Personal Data Authority
DDC likes to hear about any complaints regarding the processing and protection of data. You even have the right to lodge an official complaint about this with DDC. For this too, please use the contact details above.
Under privacy legislation, you also have the right to lodge a complaint with the privacy regulator, the Authority for Personal Data.
(https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons)
Changes to this privacy statement
The content of this declaration may change over time. DDC therefore recommends consulting the privacy statement regularly. The date at the top of the statement shows when the statement was last amended.
Questions?
If you have any further questions or comments about the processing or protection of your (personal) data, we will be happy to help you. Our contact details can be found on this page.
