Privacy policy

Introduction

As part of our services, we process personal data. Most often, we receive this data directly from you, for instance, via our website, email, or telephone. This privacy statement informs you about how we handle this personal data.

‍

Personal Data Processed

The specific personal data we process depends on the exact service or product and is subject to the preferences indicated by the client. This typically includes the following data:

• Name and address details;
• Contact details (email address and phone numbers);
• Bank account number;
• Data about your activities on our website;
• IP address.

‍

Purposes and Grounds for Processing

In some cases, we process personal data to comply with a legal obligation, but mostly we do so to facilitate our services. Some data is recorded for practical or efficiency reasons, which we assume are also in your interest, such as:

• Communication and information provision;
• Providing our services as efficiently as possible;
• Delivering the items you ordered;
• Improving our services;
• Invoicing and collection.

This specifically means that we also use your personal data for marketing purposes or to send you messages about our services or products if we believe they may be of interest to you. We may also contact you to request feedback on services or products we have provided, or for market or other research purposes.

If a situation arises where we wish to process personal data for reasons other than those listed above, we will explicitly ask for your consent. If we intend to process personal data, which we are permitted to process based on your consent, for other or additional purposes, we will first ask for your renewed consent.

Finally, we may also use your personal data to protect our own rights and property and those of our users and, if necessary, to comply with legal procedures.

‍

Provision to Third Parties

As part of our services, we may engage third parties, for example, if these third parties possess resources that we do not have in-house. These may be so-called processors or sub-processors, who will process personal data based on your exact instructions. Other third parties who are not strictly speaking processors of personal data but who do or may have access to it include our system administrator, suppliers or hosting providers of online software, or consultants whose advice we seek regarding your assignment. If engaging third parties results in them having access to personal data, or if they themselves record and/or otherwise process it, we will (in writing) agree with these third parties that they will comply with all obligations of the GDPR.

Naturally, we only engage third parties whom we can and may assume are reliable parties who handle personal data adequately and who can and will comply with the GDPR. This means, among other things, that these parties may only process your personal data for the aforementioned purposes. Of course, it may also be necessary for us to provide your personal data to third parties due to a legal obligation. Under no circumstances will we provide your personal data to third parties for commercial or charitable purposes without your explicit consent.

‍

Retention Periods

We will not process your personal data longer than is useful for the purpose for which it was provided. This means that your personal data will be stored as long as necessary to achieve the relevant purposes. Certain data must often be stored for 7 years because we must adhere to legal retention obligations (e.g., tax retention obligations) or in connection with regulations from our professional association.

‍

Security

For the protection of personal data, we have taken appropriate organizational and technical measures insofar as can reasonably be expected from us, taking into account the interest to be protected, the state of the art, and the costs of the relevant security measures.

We oblige our employees and any third parties who necessarily have access to personal data to observe confidentiality. Furthermore, we ensure that our employees have received proper and complete instructions on handling personal data and that they are sufficiently familiar with the responsibilities and obligations of the GDPR. If you wish, we would be happy to provide you with further information on how we have shaped the protection of personal data.

‍

Cookies

Europe Grass uses functional, analytical, and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet, or smartphone when you first visit this website. Europe Grass uses cookies with purely technical functionality. These ensure that the website works properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work well and to optimize it. Additionally, we place cookies that track Browse behavior so we can share specific information.

During your first visit to our website, we informed you about these cookies and asked for your permission to place them. You can opt out of cookies by setting your internet browser to no longer store cookies. In addition, you can also delete all information previously stored via your browser settings.

‍

Rights

You have the right to access, rectify, or delete the personal data we hold about you (unless, of course, this conflicts with any legal obligations). Furthermore, you can object to the processing of your personal data (or a part thereof) by us or by one of our processors. You also have the right to have the data you provided transferred by us to yourself or directly to another party if you wish. For this, you can make an appointment to visit the Europe Grass office at Katoenstraat 17, 8281 JZ Genemuiden.

‍

Personal Data Incidents

If there is an incident (a so-called data breach) concerning the relevant personal data, we will, unless there are compelling reasons to the contrary, immediately inform you if there is a concrete chance of negative consequences for your personal privacy and its realization. We aim to do this within 48 hours after we discover this data breach or are informed about it by our (sub)processors.

‍

Complaints

Should you have a complaint about the processing of your personal data, we ask you to contact us about it. If this does not lead to a satisfactory outcome, you always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); the supervisory authority in the field of privacy.

‍

Processing within the EEA

We will only process personal data within the European Economic Area, unless you agree otherwise with us in writing. Exceptions to this are situations where we want to map contact moments via our website and/or social media pages (such as Facebook and LinkedIn). This includes, for example, visitor numbers and requested web pages. Your data may be stored by third parties outside the EU when using Google Analytics, LinkedIn, or Facebook. These parties are 'EU-US Privacy Shield' certified, meaning they must comply with European privacy regulations. This, however, only concerns a limited number of sensitive personal data, specifically your IP address.

‍

Changes

Our privacy policy will undoubtedly be subject to changes. The most recent version of the privacy statement is logically the applicable version and can be found on our website.

‍

Finally

We hope that this privacy statement has provided you with a clear overview of our privacy policy. For questions or comments regarding privacy aspects, you can always contact Europe Grass:info@europegrass.com | + 31 (0)85 273 23 21