About our privacy policy
Quality Stores Online B.V., h.t.n. CycleBoard Europe cares a lot about your privacy. We therefore only process the data we need to (improve) our services and treat the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the services of CycleBoard Europe. The effective date for the validity of these terms is 18/05/2018, with the publication of a new version the validity of all previous versions expires. This privacy policy describes what data about you is collected by us, what this data is used for and with whom and under what conditions, if any, this data can be shared with third parties. We also explain to you how we store your data, how we protect your data against misuse and what rights you have in relation to the personal data you provide to us.
If you have any questions about our privacy policy, please contact our contact person for privacy matters, you will find the contact details at the end of our privacy policy.
About data processing
Below you can read how we process your data, where we store it, which security techniques we use and to whom the data can be accessed.
Magento web shop software
Our webshop is developed with Magento software. Personal data you make available to us for the purposes of our services are shared with our software developer. They have access to your data to provide us with (technical) support, they will never use your data for any other purpose. Based on the agreement we have with them, Magento is obliged to take appropriate security measures. These security measures include the use of SSL encryption, a strong password policy and secure data storage. Magento reserves the right to share collected data anonymously within its own group and affiliated partners to further improve services. Magento takes into account the applicable legal retention periods for (personal) data.
Magento
Our online shop is developed with software from Magento, we host our online shop on an in-house server. We have taken appropriate technical and organisational measures to prevent abuse, loss and corruption of data as much as possible. These security measures include at least the use of SSL encryption and a strong password policy. Regular backups are made to prevent loss of data.
Internet
KPN
We purchase internet services from KPN. KPN may collect metadata on the use of the services. These are not personal data. KPN has taken appropriate technical and organisational measures to prevent the loss and unauthorised use of your (personal) data. KPN is bound to secrecy under the agreement.
E-mail and mailing lists
MailChimp
We send our e-mail newsletters using MailChimp. MailChimp will never use your name and e-mail address for its own purposes. At the bottom of every e-mail sent automatically via our website, you will see the 'unsubscribe' link. You will then no longer receive our newsletter. Your personal data are stored securely by MailChimp. MailChimp uses cookies and other internet technologies that provide insight into whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and to share information with third parties in this context.
Microsoft and Missive
We use the services of Microsoft and Missive for our regular business e-mail traffic. These parties have taken appropriate technical and organisational measures to prevent abuse, loss and corruption of your and our data as much as possible. Microsoft and Missive do not have access to our mailbox and we treat all our e-mail traffic confidentially.
Mail servers
We host our mail server on an in-house server using Ubuntu Linux, Postfix and Dovecot. We have taken appropriate technical and organisational measures to prevent abuse, loss and corruption of data as far as possible. These security measures consist at least of the application of SSL encryption to and from our mail server (secure SMTP). Regular backups are made to prevent loss of data.
Payment processors
Pay.nl
For handling (part of) the payments in our web shop we use the platform of Pay.nl. Pay.nl processes your name, address and place of residence and payment data such as your bank account or credit card number. Pay.nl has taken appropriate technical and organisational measures to protect your personal data. Pay.nl reserves the right to use your data to further improve the service and in this context (anonymised) data to share with third parties. All the above guarantees regarding the protection of your personal data also apply to those parts of Pay.nl's services for which they engage third parties. Pay.nl will not retain your data longer than permitted under the statutory periods.
Klarna
In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer you the following payment method (s). Payment should be made to Klarna.
- Pay afterwards
- Deferred payment
You can find more information in Klarna's terms of use. General information about Klarna can be found here. Your personal data will be processed by Klarna in accordance with the applicable data protection act and as described in Klarna's privacy notice.
PayPal
We accept payments through PayPal. When processing payments, some information is transferred to PayPal. This includes information necessary to process or support the payment, such as the total amount of the purchase and billing details. Please refer to PayPal's privacy policy for more information.
Reviews
Kiyoh
We collect reviews through the platform of Kiyoh. If you leave a review via Kiyoh, you are required to provide your name, place of residence and e-mail address. Kiyoh shares these details with us so that we can link the review to your order. Kiyoh also optionally publishes your name and place of residence on its own website. In some cases, Kiyoh may contact you to explain your review. If we invite you to leave a review, we share your name and e-mail address with Kiyoh. They only use this data for the purpose of inviting you to leave a review.
Kiyoh has taken appropriate technical and organisational measures to protect your personal data. Kiyoh reserves the right to use third parties for the provision of services, for which we have given our consent to Kiyoh. All aforementioned guarantees regarding the protection of your personal data also apply to those parts of Kiyoh's service for which they use third parties.
Kiyoh retains your entered personal data for as long as you keep the review published on the platform, with the exception of your e-mail address. Your e-mail address will be removed one month after publication of your review by Kiyoh.
Kiyoh has appointed a Data Protection Officer, you can find the contact details of this officer on the Kiyoh website.
Shipping and logistics
PostNL
If you place an order with us, it is our job to get your package delivered to you. We use the services of PostNL to carry out deliveries. This requires us to share your name, address and place of residence with PostNL. PostNL uses this data solely for the purpose of executing the agreement. If PostNL engages subcontractors, PostNL will also make your details available to these parties.
Administration and bookkeeping
Twinfield
For our administration and bookkeeping we use the services of Twinfield. We do not share personal data with Twinfield, but enter your invoice anonymously.
External sales channels
Bol.com
We sell (part of) our articles via the platform of Bol.com. If you place an order via this platform, Bol.com shares your order and personal data with us. We use this information to process your order. We treat your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.
Links to other sites
This site may contain hyperlinks to the websites of third parties. These websites may have different privacy policies. This Privacy Statement only covers information collected through this website. CylceBoard Europe is not responsible for other parties' compliance with privacy laws.
Purpose of data processing
General purpose of processing
We use your data exclusively for the purpose of our services. This means that the purpose of processing is always directly related to the order you provide. We do not use your data for (targeted) marketing. If you share data with us and we use these data - other than at your request - to contact you at a later time, we will ask your explicit permission to do so. Your data will not be shared with third parties other than to meet accounting and other administrative obligations. These third parties are all bound to confidentiality by virtue of the agreement between them and us or an oath or legal obligation.
Automatically collected data
Data automatically collected by our website and Google Analytics are processed with the aim of further improving our services. This data (e.g. your IP address, web browser and operating system) is not personal data.
Cooperation with tax and criminal investigations
In appropriate cases, CycleBoard Europe under a legal obligation to share your data in connection with tax or criminal investigations by public authorities. In such a case, we are forced to share your data, but we will resist within the possibilities offered by law.
Retention periods
We keep your data for as long as you are our customer. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also interpret this as a request to forget. On the basis of applicable administrative obligations, we must retain invoices containing your (personal) data, which we will therefore retain for the duration of the applicable term. However, employees no longer have access to your customer profile and documents we have produced in response to your assignment.
Your rights
Pursuant to applicable Dutch and European legislation, as a data subject you have certain rights with regard to personal data processed by or on behalf of us. We explain below which rights these are and how you can invoke these rights.
In principle, to prevent misuse, we only send copies and copies of your data to your e-mail address already known to us. In the event that you wish to receive the data at another e-mail address or by post, for example, we will ask you to identify yourself. We keep records of processed requests; in the case of forgetting requests, we administer anonymised data. You will receive all copies and transcripts of data in the machine-readable data format used within our systems.
You have the right to lodge a complaint with the Personal Data Authority at any time if you suspect that we are using your personal data incorrectly.
Right of inspection
You always have the right to inspect the data we process (or have processed) which relate to your person or can be traced back to you. You can submit a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors holding this data, stating the category under which we have stored this data, at the e-mail address known to us.
Right of rectification
You always have the right to have the data we process (or have processed) that relates to your person or can be traced back to you rectified. You can make a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data have been adjusted at the e-mail address known to us.
Right to restriction of processing
You always have the right to restrict the data we process (or have processed) that relate to your person or can be traced back to you. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you confirmation at the e-mail address known to us that the data - until you lift the restriction - will no longer be processed.
Right to transferability
You always have the right to have the data that we process (or have processed) and that relate to your person or can be traced back to you, carried out by another party. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the e-mail address known to us, copies or transcripts of all data about you that we have processed or that have been processed on our behalf by other processors or third parties. In all likelihood, we will no longer be able to continue providing services in such a case, as the secure interconnection of data files can then no longer be guaranteed.
Right of objection and other rights
You have in appropriate cases the right to object to the processing of your personal data by or on behalf of CycleBoard Europe. If you object, we will immediately discontinue the data processing pending the handling of your objection. If your objection is well-founded, we will provide you with copies and/or copies of the data we process (or have processed) and then permanently stop the processing.
You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe it does, please contact our contact person for privacy matters.
Right to erasure of personal data
You have the right to have all your personal data deleted from us. In our webshop, you can request this in your account under 'Manage personal data', you can also call us to do this (0102661050) or email us (service@cycleboard.eu).
Cookies
Google Analytics
Through our website, cookies are placed by the US company Google, as part of the "Analytics" service. We use this service to track and get reports on how visitors use the website. This processor may be obliged under applicable laws and regulations to grant access to this data. We have not allowed Google to use the obtained analytics information for other Google services.
Third-party cookies
In the event that third-party software solutions use cookies, this is stated in this privacy statement.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you by e-mail.
Contact details
CycleBoard Europe
Huygensstraat 35
2652 XK Berkel en Rodenrijs
Phone 010-2661055
Email sales@cycleboard.eu