Privacy Policy
Privacy Policy of ByGaia
About Our Privacy Policy
ByGaia values your privacy highly. Therefore, we process only the data necessary to improve our services and handle carefully the information we collect about you and your use of our services. We never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the services provided by ByGaia. The effective date for these terms is day/month/year. By publishing a new version, the validity of all previous versions expires. This privacy policy describes what data we collect about you, what this data is used for, and with whom and under what conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and what rights you have regarding the personal data you provide to us.
If you have any questions about our privacy policy, please contact our privacy officer. You will find the contact details at the end of this privacy policy.
Data Processing
Below you can read how we process your data, where we store it, what security techniques we use, and who has access to the data.
E-commerce Software
Shopify
Our online store is developed using Shopify software. Personal data that you provide for our services is shared with this party. Shopify has access to your data to offer (technical) support, but they will never use your data for any other purpose. Shopify is obligated to take appropriate security measures based on our agreement. These measures include SSL encryption and a strong password policy. Shopify is a certified credit card processor. Shopify uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored. Shopify reserves the right to share collected data within its own group to further improve its services. The EU/US Privacy Shield applies, meaning your data may be processed in the United States.
Email and Mailing Lists
MailBlue
Our website uses MailBlue, a third party that handles the email traffic from our website and the sending of any newsletters. All confirmation emails you receive from our website and web forms are sent through MailBlue servers. MailBlue will never use your name and email address for its own purposes. At the bottom of every email sent automatically via our website, you will find an ‘unsubscribe’ link. If you click this, you will no longer receive emails from our website, which may severely reduce the functionality of our website! Your personal data is securely stored by MailBlue. MailBlue uses cookies and other internet technologies to see if emails are opened and read. MailBlue reserves the right to use your data to further improve its services and share information with third parties in this context.
Office365
We use Office365 for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent abuse, loss, and corruption of your and our data as much as possible. Office365 has no access to our mailbox, and we handle all our email traffic confidentially.
Payment Processors
Pay.nl
For handling part of the payments in our web store, we use the Pay.nl payment service provider. Pay.nl processes your name, address, and residence details, as well as your payment details such as your bank account or credit card number. Pay.nl has taken appropriate technical and organizational measures to protect your personal data. Pay.nl reserves the right to use your data to further improve its services and to share (anonymized) data with third parties in this context. Pay.nl shares personal data and order information with post-payment service providers in case of a deferred payment request. All the above-mentioned safeguards concerning the protection of your personal data also apply to the parts of Pay.nl’s service for which they engage third parties. Pay.nl does not store your data longer than permitted by legal terms.
Mollie
For handling part of the payments in our web store, we use Mollie’s platform. Mollie processes your name, address, and residence details, as well as your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and share (anonymized) data with third parties in this context. All the above-mentioned safeguards concerning the protection of your personal data also apply to the parts of Mollie’s service for which they engage third parties. Mollie does not store your data longer than permitted by legal terms.
Klarna
For handling part of the payments in our web store, we use Klarna’s platform. Klarna processes your name, address, and residence details, as well as your payment details such as your bank account or credit card number. Klarna has taken appropriate technical and organizational measures to protect your personal data. Klarna reserves the right to use your data to further improve its services and share (anonymized) data with third parties in this context. Klarna shares personal data and financial information with credit rating agencies in case of a deferred payment request. All the above-mentioned safeguards concerning the protection of your personal data also apply to the parts of Klarna’s service for which they engage third parties. Klarna does not store your data longer than permitted by legal terms.
Reviews
WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. When you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur, which uses this information solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide its services; we have given WebwinkelKeur permission for this. All the above-mentioned safeguards concerning the protection of your personal data also apply to the parts of WebwinkelKeur’s service for which they engage third parties.
Shipping and Logistics
PostNL
If you place an order with us, it is our responsibility to have your package delivered to you. We use PostNL’s services to handle deliveries. It is necessary for us to share your name, address, and residence details with PostNL. PostNL uses this information only for the execution of the agreement. If PostNL engages subcontractors, PostNL will also make your data available to these parties.
DHL
If you place an order with us, it is our responsibility to have your package delivered to you. We use DHL’s services to handle deliveries. It is necessary for us to share your name, address, and residence details with DHL. DHL uses this information only for the execution of the agreement. If DHL engages subcontractors, DHL will also make your data available to these parties.
GLS
If you place an order with us, it is our responsibility to have your package delivered to you. We use GLS’s services to handle deliveries. It is necessary for us to share your name, address, and residence details with GLS. GLS uses this information only for the execution of the agreement. If GLS engages subcontractors, GLS will also make your data available to these parties.
Accounting and Bookkeeping
Exact Online
For our bookkeeping and accounting, we use Exact Online’s services. We share your name, address, residence details, and order details. These details are used to manage sales invoices. Your personal data is sent and stored securely. Exact Online is obligated to confidentiality and will handle your data confidentially. Exact Online will not use your personal data for purposes other than those described above.
External Sales Channels
We sell (part of) our articles via Facebook’s platform. If you place an order via this platform, Facebook shares your order and personal data with us. We use this data to process your order. We also use the Facebook pixel to create tailored advertisements and may upload email addresses for targeted advertising. We handle your data very confidentially and have taken appropriate technical and organizational measures to protect your data against loss and unauthorized use.
Purpose of Data Processing
General Purpose of Processing
We use your data solely for our services. This means that the purpose of processing is always directly related to the order you place. We do not use your data for (targeted) marketing unless you give us explicit permission to do so. We will not share your data with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality by an agreement with us, an oath, or a legal obligation.
Automatically Collected Data
Data automatically collected by our website is processed with the aim of further improving our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.
Cooperation in Tax and Criminal Investigations
In certain cases, ByGaia may be required by law to share your data in connection with government tax or criminal investigations. In such cases, we are compelled to share your data but will oppose this within the limits of the law.
Retention Periods
We keep your data as long as you are our client. This means we retain your customer profile until you indicate that you no longer wish to use our services. When you indicate this, we will also interpret it as a forget request. Due to applicable administrative obligations, we must retain invoices with your (personal) data, so we will keep this data for the duration of the applicable term. However, employees no longer have access to your client profile and documents created in response to your order.
Your Rights
Under applicable Dutch and European legislation, you have certain rights regarding the personal data processed by us or on our behalf. Below, we explain what these rights are and how you can invoke them.
Right to Access
You always have the right to inspect the data we process or have processed that relates to your person or can be traced back to you. You can request this inspection from our privacy officer.
Right to Rectification
You have the right to have the data we process or have processed that relates to your person or can be traced back to you rectified. You can request this rectification from our privacy officer.
Right to Restriction of Processing
You have the right to limit the data we process or have processed that relates to your person or can be traced back to you. You can request this restriction from our privacy officer.
Right to Data Portability
You have the right to have the data we process or have processed that relates to your person or can be traced back to you carried out by another party. You can request this from our privacy officer.
Right to Object and Other Rights
In certain cases, you have the right to object to the processing of your personal data by or on behalf of ByGaia. If you object, we will immediately cease data processing pending the handling of your objection. If your objection is well-founded, we will make copies and/or copies of data we process or have processed available to you and then cease processing permanently. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.
Cookies
Google Analytics
Through our website, cookies are placed from the American company Google as part of the “Analytics” service. We use this service to keep track of and get reports on how visitors use the website. This processor may be required to provide access to this data based on applicable laws and regulations. We collect information about your browsing behavior and share this data with Google. Google can interpret this information in conjunction with other datasets and thus follow your movements on the internet. Google uses this information to provide targeted advertisements (Adwords) and other Google services and products.
Changes to the Privacy Policy
We reserve the right to change our privacy policy at any time. On this page, you will always find the latest version. If the new privacy policy affects how we process data already collected about you, we will notify you by email.
Contact Details
ByGaia
Website: www.bygaia.nl
Email: info@bygaia.nl
Phone: +31 123 456 789
Address: Lichtstraat 298, 5611XH, Eindhoven, The Netherlands
Privacy Officer: privacy@bygaia.nl