Privacy statement Sekisui Eslon B.V. (website and online)


Introduction

Privacy is vital to Sekisui Eslon B.V. (hereafter: “Sekisui Eslon”). It uses personal data both correctly and securely. In this privacy statement, it explains how it deals with privacy, what data it processes and for what purpose. This privacy statement also includes information about the rights of data subjects.

Questions or complaints relating to privacy can be submitted to Mr R. Vernaus (rvernaus@eslon.nl). Data subjects may also contact the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).

This privacy statement may be amended in the interim. The statement should be read on a regular basis to check for any amendments. This version was last amended on 23 May 2018.

 

Identity

Sekisui Eslon B.V. is:

Sekisui Eslon B.V., a private limited liability company.

Metaalweg 7

NL-6045 JB Roermond, the Netherlands

Chamber of Commerce no. 13016183

rvernaus@eslon.nl


What personal data are used?

Sekisui Eslon has data available that have been issued both by the data subjects themselves and by third parties.

An overview of the purposes for which Sekisui Eslon processes personal data is provided below.

Orders, financial and service

Purpose:

Dealing with questions (only on the initiative of a data subject)

Data:

Name, e-mail address, account number, telephone number, order number, details of the complaint

Basis:

Performance of the agreement

Retention period:

As long as necessary for this purpose

 

 

Purpose:

Financial administration (only in the case of an order)

Data:

Name, company name, invoice address, bank details (name of bank/IBAN/BIC), outstanding balance

Basis:

Performance of the agreement / legitimate interest / statutory obligation

Retention period:

Five years after the final order, but no earlier than ten years following the end of the current financial year

 

 

Purpose:

Invoicing (only in the case of an order)

Data:

Name or company name, invoicing address, Chamber of Commerce number, VAT number, client number, telephone number, e-mail address

Basis:

Performance of the agreement / legitimate interest / statutory obligation

Retention period:

One month after the order

 

 

Purpose:

Order processing (only in the case of an order)

Data:

Name or company name, address or invoice address, Chamber of Commerce number, VAT number, client number, telephone number, e-mail address

Basis:

Performance of the agreement

Retention period:

One month after the order

 

 

Purpose:

Service / guarantee (only in the case of an order)

Data:

Name or company name, invoicing address, Chamber of Commerce number, VAT number, client number, telephone number, e-mail address, order history

Basis:

Performance of the agreement, legitimate interest

Retention period:

Twenty years after the final order

 

 

Marketing

 

Purpose:

Website analytics

Data:

Surfing behaviour, location

Basis:

Unequivocal permission

Retention period:

Six months

 

 

Purpose:

CRM (only when a party becomes a client)

Data:

Name, user name, e-mail address, location, order history, user ID, telephone number, name and address

Basis:

Performance of the agreement, legitimate interest

Retention period:

Five years after the end of the relationship

 

 

Purpose:

Retargeting

Data:

Surfing behaviour, e-mail address

Basis:

Unequivocal permission

Retention period:

As long as necessary for this purpose

 

 

Purpose:

Behavioural targeting

Data:

Surfing behaviour

Basis:

Unequivocal permission

Retention period:

As long as necessary for this purpose

Purpose:

A/B testing

Data:

Surfing behaviour

Basis:

Unequivocal permission

Retention period:

Six months

 

 

Purpose:

Posting messages or reviews

Data:

User ID, name, message content

Basis:

Express permission

Retention period:

Six months after the message /review has been removed

 

 

Security

 

Purpose:

Offering an account

Data:

Name, address, e-mail address, user name, password

Basis:

Performance of the agreement

Retention period:

Six months following the removal of the account

Purpose:

Verifying identity

Data:

Electronic identification data

Basis:

Performance of the agreement / legitimate interest

Retention period:

Six months following the removal of the account

 

 

Purpose:

Securing data

Data:

Password, user name

Basis:

Performance of the agreement

Retention period:

Six months following the removal of the account

 

 

Purpose:

Maintaining IT systems

Data:

All information that is issued

Basis:

Legitimate interest

Retention period:

As long as necessary for this purpose

 

The rights of the data subject

The data subject has the following rights relating to his or her personal data and the processing thereof:

Access

The data subject may always request Sekisui Eslon to grant access to his or her personal data. The overview includes the processed personal data, the processing operation and the purpose of the processing. Sekisui Eslon may request a statutory payment for such.

Changes

The data subject is entitled to submit a request to change, improve, supplement, remove and restrict his or her personal data.

Restriction of processing

The data subject is entitled, subject to conditions, to restrict the processing of personal data.

Objection

If Sekisui Eslon carries out a certain processing operation on the basis of the legitimate interest of itself or a third party, the data subject will be entitled to object to that processing.

Transfer of data

The data subject has the right to obtain his or her personal data. Sekisui Eslon will supply that data in a structured and commonly used form, which can be easily accessed in other commonly used systems.

Withdrawal of permission

The data subject has the right to withdraw his or her permission for a certain processing operation. If the data processing is taking place on that basis, Sekisui Eslon will cease the processing. The withdrawal of permission has no retroactive force.

Sekisui Eslon will respond within one month to a request relating to these rights. Such requests can be sent to Mr R. Vernaus (rvernaus@eslon.nl). Sekisui Eslon will always substantiate a rejection.


Recipients

The personal data may be transferred to processors and parties that are involved in the performance of the agreement.


Transfer to a third country or organisation

It may be necessary to transfer personal data to a third party in a country outside the European Economic Area. Legislation regarding privacy protection in such countries is different to that in the Netherlands. For this reason, Sekisui Eslon uses the Privacy Shield or the EU Model Clauses to protect the privacy of data subjects as much as possible. If that is not possible, Sekisui Eslon will ask permission to transfer the personal data to countries without an adequate level of protection. This permission may always be withdrawn. A withdrawal has no retroactive force.

By signing the privacy statement, the data subject grants permission to share surfing behaviour with Google Inc and other parties in the US for the purpose of website analytics. There is no adequate Privacy Shield in the US.


Cookies

Sekisui Eslon uses cookies to analyse visits to its website and to have its website function in an effective manner. Cookies are small text files that are installed in the memory of a device (computer, telephone, tablet) during website visits. The cookies cannot damage the device. When it refers to cookies, Sekisui Eslon also means similar technology to collect information, such as device fingerprinting.