Privacy Policy Stone by Stone Diamond Painting

www.steenvoorsteendp.nl

About our privacy policy

Stone by Stone Diamond Painting cares a lot about your privacy. We therefore only process data that we
necessary for (improving) our services and handle the information we hold about you with care
and your use of our services. We never use your data for commercial purposes
available to third parties.
This privacy policy applies to the use of the website and the services provided by Steen on it
for Stone Diamond Painting. The effective date for the validity of these conditions is 26/10/2021, with the
publishing a new version will void the validity of all previous versions. This privacy policy describes
what data about you is collected by us, what this data is used for and with whom and under
under what conditions this data may be shared with third parties. We also explain to you which ones
how we store your data and how we protect your data against misuse and what rights you have
regarding the personal data you provide to us.
If you have any questions about our privacy policy, please contact our privacy contact, u
find the contact details at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we store it or have it stored, which
security techniques we use and for whom the data can be viewed.

Online store software

Shopify

Our webshop has been developed with software from Shopify. Personal data that you provide for our
services available to us are shared with this party. Shopify has access to your data
to provide us with (technical) support, they will never use your data for any other purpose. Shopify
is obliged to take appropriate security measures on the basis of the agreement we have concluded with them
to take. These security measures consist of the application of SSL encryption and a strong
password policy. Shopify is a certified credit card data processor. Shopify uses
cookies to collect technical information related to your use of the software, no
personal data collected and/or stored. Shopify reserves the right to collect information
within the own group in order to further improve the service. Shopify takes into account the
applicable statutory retention periods for (personal) data. The EU/US Privacy Shield applies, your
data may be processed in the United States.

Web hosting

MyDomain

We purchase web hosting and email services from MijnDomein. MijnDomein processes personal data on behalf of
us and does not use your data for its own purposes. However, this party can collect metadata about it
use of the services. This is not personal data. MijnDomein has appropriate technical and
organizational measures taken to prevent loss and unauthorized use of your personal data
prevent. MijnDomein is obliged to observe secrecy on the basis of the agreement.

Email and mailing lists

Shopify

We send our newsletters and transactional emails using our webshop software 'Shopify'.
All confirmation emails you receive from our website and web forms are sent through the servers of
Shopify. Shopify will never use your name and email address for its own purposes. At the bottom of every email
automatically sent via our website, you will see the 'unsubscribe' link. Clicking on this will not send you an email
receive more from our website. This can seriously reduce the functionality of our website! Your
personal data is sent, stored and disclosed securely by Shopify. Shopify uses
cookies and other internet technologies that provide insight into whether e-mails are opened and read. In addition
Shopify processes information about you as a recipient and the subject line of emails to improve the
quality of service, this data is kept for 30 days. Shopify reserves the right
to use your data to further improve the service and in that context
share information with third parties.

My Domain

We use the services of My Domain for our regular business e-mail traffic. This party has appropriate
technical and organizational measures have been taken to prevent misuse, loss and corruption of your and our data
prevent as much as possible. My Domain does not have access to our mailbox and we handle all our e-mail traffic
confidential.

payment processors

Mollie

We use the platform of to handle (part of) the payments in our webshop
Mollie. Mollie processes your name, address and residence details and your payment details such as your bank account or
credit card number. Mollie has taken appropriate technical and organizational measures to protect your
protect personal data. Mollie reserves the right to use your data to
to further improve services and in this context to share (anonymised) data with third parties.
All the above mentioned guarantees with regard to the protection of your personal data are also
applicable to the parts of Mollie's services for which they engage third parties. Mollie saves your
data no longer than permitted by law.

Klarna

We use the platform of to handle (part of) the payments in our webshop
Klarna. Klarna processes your name, address and residence details and your payment details such as your bank account or
credit card number. Klarna has taken appropriate technical and organizational measures to protect your
protect personal data. Klarna reserves the right to use your data to
to further improve services and in this context to share (anonymised) data with third parties.
In the case of an application for a deferred payment (credit facility), Klarna shares personal data and
information regarding your financial position with credit rating agencies. All mentioned above
guarantees regarding the protection of your personal data also apply to the
parts of Klarna's services for which they engage third parties. Klarna does not store your data
longer than permitted by law.

Pay Pal, Shopify payments

We use the platform of to handle (part of) the payments in our webshop
Pay Pal, Shopify payments. Pay Pal, Shopify payments processes your name, address and residence details and your
payment details such as your bank account or credit card number. Pay Pal, Shopify payments has appropriate
technical and organizational measures taken to protect your personal data. PayPal, Shopify
payments reserves the right to use your data to further improve the service and in
to share (anonymised) data with third parties in this context. Pay Pal, Shopify payments share in case
of an application for a deferred payment (credit facility) personal data and information related
to your financial standing with credit rating agencies. All the above mentioned guarantees with regard to the
protection of your personal data also applies to the parts of Pay Pal, Shopify
payments's services for which they engage third parties. Pay Pal, Shopify payments stores your information
no longer than permitted by law.

Reviews

Trust pilot

We collect reviews through the Trustpilot platform. If you leave a review via Trustpilot then you are
required to provide your name, place of residence and e-mail address. Trustpilot shares this information with us so that we
link the review to your order. Trustpilot also publishes your name and place of residence on its own
website. In some cases, Trustpilot may contact you to clarify your review. In
in the event that we invite you to leave a review, we will share your name and email address with Trustpilot. She
use this information only for the purpose of inviting you to leave a review. Trustpilot has
appropriate technical and organizational measures have been taken to protect your personal data.
Trustpilot reserves the right to engage third parties for the purpose of providing the service
switching, we have given permission to Trustpilot for this. All the guarantees mentioned above with
regarding the protection of your personal data also apply to the parts of the
services for which Trustpilot engages third parties.

Shipping and logistics

PostNL

If you place an order with us, it is our job to have your package delivered to you. We use
the services of PostNL for carrying out the deliveries. It is therefore necessary that we know your name,
share address and residence details with PostNL. PostNL uses this data only for the purpose of
performance of the agreement. In the event that PostNL engages subcontractors, PostNL will provide your data
also available to these parties.

DHL

If you place an order with us, it is our job to have your package delivered to you. We use
the services of DHL for carrying out the deliveries. It is therefore necessary that we provide your name, address
and share residence details with DHL. DHL only uses this data for the purpose of carrying out the
agreement. In the event that DHL engages subcontractors, DHL will also make your data available to these parties
order.

Billing and accounting

E-bookkeeping

We use the services of E-accounting to keep track of our administration and accounting.
We share your name, address and residence details and details regarding your order. This information
are used for the administration of sales invoices. Your personal data is protected
sent and stored. E-bookkeeping is bound to secrecy and will keep your data confidential
to deal with. E-bookkeeping does not use your personal data for purposes other than those set out above
described.

External Sales Channels

marketplace

We sell (part of) our articles via the Marktplaats.nl platform. If you order a
place an order, Marktplaats.nl will share your order and personal data with us. We use this data
to process your order. We treat your data confidentially and have appropriate technical and
organizational measures have been taken to protect your data against loss and unauthorized use.

Purpose of data processing

General purpose of the processing

We only use your data for the benefit of our services. That is, the purpose of the
processing is always directly related to the assignment you provide. We do not use your data for
(targeted) marketing. If you share information with us and we use this information to - other than on your
request - to contact you at a later time, we will ask you for explicit permission. Your
data is not shared with third parties, other than for accounting and other administrative purposes
fulfill obligations. These third parties are all bound to secrecy on the basis of the agreement
between them and us or an oath or legal obligation.

Automatically collected data

Data that is automatically collected by our website is processed for the purpose of our
to further improve services. This data (for example your IP address, web browser and
operating system) are not personal data.

Cooperation in tax and criminal investigations

In some cases, Steen voor Steen Diamond Painting can do so on the basis of a legal obligation
be obliged to share your data in connection with tax or criminal investigations
government. In such a case, we are forced to share your data, but we will act within the
possibilities that the law offers us to oppose this.

Retention periods

We keep your data as long as you are a client of ours. This means that we keep your customer profile until you
indicates that you no longer wish to use our services. If you indicate this to us, we will
also be regarded as a request to be forgotten. We serve under applicable administrative obligations
invoices with your (personal) data, so we will keep this data for as long as the applicable
retention period. However, employees no longer have access to your client profile and documents
we have produced in response to your order.

Your rights

Under the applicable Dutch and European legislation, you as a data subject have certain rights
with regard to the personal data processed by or on behalf of us. We explain which ones below
rights these are and how you can invoke these rights. In principle, we control to prevent misuse
copies and copies of your data only to your e-mail address already known to us. In case you have the
If you wish to receive data at another e-mail address or, for example, by post, we will ask you to register
legitimize. We keep records of completed requests, in the event of a request to be forgotten
we administer anonymised data. You will receive all copies and copies of data in the
machine-readable data format that we use within our systems. You have the right to a
to submit a complaint to the Dutch Data Protection Authority if you suspect that we have stored your personal data on a
use wrong way.

Right of inspection

You always have the right to have the data that we process or have processed that relates to your person or
can be traced back to this. You can make a request to that effect to our contact person for
privacy matters. You will then receive a response to your request within 30 days. If your request is granted
we will send you a copy of all data with an overview of the processors at the e-mail address known to us
who hold this data, stating the category under which we hold this data
stored.

Right of rectification

You always have the right to have the data that we process or have processed that relates to your person or
can be traced back to it, to have it adjusted. You can make a request to that effect to our contact person
for privacy matters. You will then receive a response to your request within 30 days. If your request is granted
we will send you a confirmation that the data has been changed at the e-mail address known to us.

Right to restriction of processing

You always have the right to request the data that we process or have processed that relates to your person or for that purpose
to be traceable. You can make a request to that effect to our contact person for
privacy matters. You will then receive a response to your request within 30 days. If your request is granted
we will send you a confirmation to the e-mail address known to us that the data will not be lifted until you lift the restriction
processed longer.

Right to portability

You always have the right to have the data that we process or have processed that relates to your person or
can be traced back to this, to be carried out by another party. You can make a request to that effect
our contact person for privacy matters. You will then receive a response to your request within 30 days. If your
request is granted, we will send you copies or copies of all data to the e-mail address known to us
about you that we have processed or have been processed by other processors or third parties on our behalf. To all
In such a case we will probably no longer be able to continue the service, because the safe
linking of data files can then no longer be guaranteed.

Right of objection and other rights

In appropriate cases you have the right to object to the processing of your personal data
by or on behalf of Steen voor Steen Diamond Painting. If you object, we will immediately
suspend data processing pending the handling of your objection. Is your objection well founded?
we make copies and/or copies of data that we process or have processed available to you and then the
permanently suspend processing. You also have the right to opt out of automated individual decision-making
or profiling. We do not process your data in such a way that this right of
applicable. If you believe that this is the case, please contact our contact person for
privacy matters.

Cookies

Google Analytics

Cookies from the American company Google are placed via our website as part of the “Analytics” service.
We use this service to keep track of and receive reports on how visitors use the website.
This processor may be obliged to provide access to this on the basis of applicable laws and regulations
facts. We collect information about your surfing behavior and share this data with Google. Google can do this
interpret information in conjunction with other datasets and thus interpret your movements on the internet
to follow. Google uses this information to offer, among other things, targeted advertisements (Adwords) and
other Google services and products.

Third Party Cookies

In the event that software solutions from third parties use cookies, this is stated in this
privacy declaration.

Changes to the Privacy Policy

We reserve the right to change our privacy policy at any time. However, you will always find the most on this page
recent version. If the new privacy policy has consequences for the way in which we already collect data
relating to you, we will inform you by e-mail.

Contact details

Stone by Stone Diamond Painting
Tjalk 23 16 8232LR Lelystad The Netherlands T (063) 024-0422 Esteenvoorsteen@dutsj.nl

Contact person for privacy matters

Rodney de Boer