Privacy policy
Privacy Policy BLM SNKRS
About our Privacy Policy: BLM SNKRS values your privacy. We only process data necessary for (improving) our services and handle carefully the information collected about you and your use of our services. We never share your data for commercial purposes with third parties. This privacy policy applies to the use of the website and the services provided by BLM SNKRS. The effective date of these terms is 04/04/2023, and with the publication of a new version, the validity of all previous versions expires. This privacy policy describes what data we collect about you, how we use it, and under what conditions we may share this data with third parties. We also explain how we store your data, protect it against misuse, and outline your rights regarding the personal information you provide to us. If you have any questions about our privacy policy, please contact our privacy officer; you can find the contact details at the end of our privacy policy.
About Data Processing: Below, you can read about how we process your data, where we store it, the security techniques we use, and who has access to the data.
E-commerce Software: Our online store is developed with software from Shopify. Personal data you provide for our services is shared with this party. Shopify has access to your data to provide technical support, but they will never use your data for any other purpose. Based on the agreement we have with them, Shopify is obligated to take appropriate security measures. These security measures include SSL encryption and a strong password policy. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected or stored. Shopify reserves the right to share collected data within its own group to further improve the services.
Gmail: For our regular business email communication, we use Gmail. This party has taken appropriate technical and organizational measures to prevent abuse, loss, and corruption of your and our data. Gmail does not have access to our mailbox, and we treat all our email communication confidentially.
Shopify Payments: To handle (part of) the payments in our online store, we use the Shopify platform. Shopify Payments processes your name, address, and residence details, as well as your payment details such as your bank account or credit card number. Shopify Payments has taken appropriate technical and organizational measures to protect your personal data. Shopify Payments reserves the right to use your data to further improve its services and, in that context, share (anonymized) data with third parties. All the guarantees mentioned above regarding the protection of your personal data also apply to the parts of Shopify's services for which they engage third parties. Shopify Payments does not retain your data longer than allowed by legal terms.
Shipping and Logistics: When you place an order with us, it is our task to have your package delivered to you. We use the services of PostNL for executing the deliveries. Therefore, we need to share your name, address, and residence details with PostNL. PostNL uses this data solely for executing the agreement. In case PostNL engages subcontractors, PostNL also provides your data to these parties.
Invoicing and Accounting: For maintaining our administration and accounting, we use the services of e-boekhouden. We share your name, address, and residence details and details regarding your order for the administration of sales invoices. Your personal data is securely transmitted and stored. E-boekhouden is obligated to confidentiality and will treat your data confidentially. E-boekhouden does not use your personal data for purposes other than described above.
Purpose of Data Processing: General Purpose of Processing: We use your data solely for our services. This means that the processing's purpose is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use it to contact you later, other than at your request, we will explicitly ask for your consent. Your data will not be shared with third parties, except to meet accounting and other administrative obligations. These third parties are all bound by confidentiality under the agreement between them and us or an oath or legal obligation.
Automatically Collected Data: Data automatically collected by our website is processed to further improve our services. This data (such as your IP address, web browser, and operating system) is not considered personal data.
Cooperation in Tax and Criminal Investigations: In some cases, BLM SNKRS may be required by law to share your data in connection with tax or criminal investigations by government authorities. In such cases, we are obliged to share your data, but we will resist within the legal possibilities.
Retention Periods: We retain your data as long as you are our client. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will consider it as a request for forgetting. This also means that we will not retain your data for more than two years from the last contact moment or transaction, unless there is a legal justification. Based on applicable administrative obligations, we must keep invoices with your (personal) data, so we will retain this data for as long as the applicable term runs. However, employees no longer have access to your client profile and documents we have produced as a result of your assignment.
Your Rights: Under the applicable Dutch and European legislation, you, as the data subject, have certain rights regarding the personal data processed by or on behalf of us. We explain these rights below and how you can invoke them. In principle, to prevent abuse, we send copies and copies of your data only to your already known email address. In case you wish to receive the data at another email address or by post, we will ask you to identify yourself. We keep a record of handled requests to prevent misuse. In the case of a forgetting request, we record anonymized data. All copies and copies of data you receive are in the machine-readable data format that we use within our systems. You always have the right to file a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data incorrectly.
Right to Access: You always have the right to access the data we (have) processed and that relate to your person or are traceable to you. You can make a request to our privacy contact person for that purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data at the email address known to us, along with an overview of the processors who have these data under their control, stating the category under which we have stored this data.
Right to Rectification: You always have the right to have the data we (have) processed and that relate to your person or are traceable to you, adjusted. You can make a request to our privacy contact person for that purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address known to us that the data has been adjusted.
Right to Restriction of Processing: You always have the right to have the data
