Privacy Policy
This privacy policy applies to the data processing of ncskleuren.nl (Stichting Nederlands Kleur Instituut). We process personal data in accordance with the requirements of the General Data Protection Regulation (GDPR; Dutch: AVG).
Last updated: 6 January 2025
1. Purpose of collecting personal data
We collect and process personal data for the following purposes:
1.1 Contact
We use personal data to get in touch with you by telephone, post, e-mail and/or web forms.
1.2 Payments
We process data for the handling of payments for our products and services.
1.3 Account registration
We process data for creating and managing accounts on our website.
1.4 Newsletters
We use personal data to send newsletters to subscribers (only after explicit consent).
1.5 Legal obligations
We process personal data to comply with legal obligations, such as tax and accounting requirements.
1.6 Statistics and website improvement
We collect data to analyse the use of our website and improve the user experience.
1.7 Delivery of products
We process personal data in order to deliver orders.
2. Personal data we collect
Depending on the purpose, the following personal data may be processed:
- Name and contact details (e-mail address, telephone number, physical address)
- Financial data (bank account number for refunds)
- IP address
- Information about website use (browsing history, search behaviour)
- Payment information (via Stripe; we do not store credit card details)
3. Legal bases for data processing
We process personal data on the basis of:
- Performance of the contract: Necessary for the delivery of products/services
- Legal obligation: To comply with tax and accounting obligations
- Consent: For newsletters and marketing purposes (opt-in)
- Legitimate interest: For improving our services and products
4. Retention periods
We do not retain personal data longer than necessary:
- Customer data: Up to 7 years after the last order (tax obligation)
- Newsletter subscribers: Until unsubscription
- Analytical data: 14 months (anonymised)
- Account data: Until account deletion
5. Sharing of personal data
We share personal data with third parties only where this is necessary:
Processors
- Stripe: For payment processing (PCI-DSS certified)
- Carriers: For the delivery of products (PostNL, DHL)
- E-mail service: For order confirmations and customer service
Marketing partners
We use no external marketing partners without your explicit consent.
Legal obligations
We may share personal data if we are legally required to do so.
6. Cookies
Our website uses cookies:
Functional cookies (necessary)
- Session cookies for the shopping basket
- Authentication cookies for logged-in users
Analytical cookies (optional)
We use no Google Analytics or other tracking tools without your consent.
Marketing cookies
We place no third-party marketing cookies.
You can manage cookies via your browser settings.
7. Security of personal data
We take appropriate technical and organisational measures:
- SSL encryption for all connections
- Secure storage of personal data
- Access control - authorised staff only
- Regular security updates of systems
- No storage of credit card details (via Stripe)
8. Rights of data subjects
You have the following rights:
Right of access
You may request which data we process about you.
Right to rectification
You may ask us to correct inaccurate data.
Right to erasure (right to be forgotten)
You may ask us to delete your data, unless we are legally required to retain it.
Right to restriction of processing
You may request restriction of processing during a complaint.
Right to object
You may object to processing for marketing purposes.
Right to data portability
You may request your data in a machine-readable format.
Right to lodge a complaint
You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise your rights: Send an e-mail to privacy@ncskleuren.nl
9. Changes to the privacy policy
We reserve the right to amend this privacy policy. The latest version is always available on our website. In the event of significant changes, we will inform you by e-mail.
10. Contact information
For questions about this privacy policy or the processing of your data:
ncskleuren.nl (Stichting Nederlands Kleur Instituut) E-mail: privacy@ncskleuren.nl Telephone: +31 (0)20 123 4567 Working days: Mon-Fri 10:00 - 16:00
Specific information about services
Stripe (Payments)
We use Stripe for payment processing. Stripe is PCI-DSS Level 1 certified. Credit card details are sent directly to Stripe and are not stored on our servers. Read more: Stripe Privacy Policy
E-mail communication
Order confirmations and transactional e-mails are sent via our own e-mail service. Newsletters are only sent after explicit opt-in and always contain an unsubscribe link.
Updated: 6 January 2025