Lisap Benelux BV cares a great deal about your privacy. That is why we only process data we need for, and to improve, our services and deal carefully with the information we have collected about you and your use of our services.
About data processing:
Below you can read how we process your data, where we store or have your data stored, which security techniques we use, and who can access these data.
Web shop software: Koek&Peer CMS
Web hosting: MijnDomein
We purchase web hosting and email services from MijnDomein. MijnDomein processes personal data on our behalf and does not use your data for its own purposes. Although it may collect metadata on the use of services; these are not personal data. MijnDomein has adopted appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. MijnDomein is bound by a confidentiality agreement.
Email and mailing lists: Your Mailing List Provider
E-mail and mailing lists: Cloudorb
We use Cloudorb’s services for our regular business email traffic. It has adopted appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as much as possible. Cloudorb has no access to our inbox and we treat all our email traffic confidentially.
Payment processors: Sisow Payment Innovations
To process part of the payments in our web shop, we use the Sisow Payment Innovations platform. Sisow Payment Innovations processes your name and address details and payment data, such as your bank account or credit card number. Sisow Payment Innovations has adopted appropriate technical and organisational measures to protect your personal data. It reserves the right to use your data to improve the service and to share anonymised data with third parties for this purpose. All these safeguards for protecting your personal data also apply to components of Sisow Payment Innovations’ services for which they hire third parties. Sisow Payment Innovations does not retain your data for longer than permitted by law.
Dispatch and logistics: PostNL
If you place an order with us, we must have your package delivered to you. We use PostNL’s services for deliveries. We thus need to share your name and address details with PostNL. PostNL uses these data solely to perform the agreement. If PostNL hires subcontractors, it will also provide your data to these parties.
Dispatch and logistics: DPD
If you place an order with us, we must have your package delivered to you. We use DPD’s services for deliveries. We thus need to share your name and address details with DPD. DPD uses these data solely to perform the agreement. If DPD hires subcontractors, it will also provide your data to these parties.
Invoicing and accounting: Snelstart
We use Snelstart’s services to keep our records and accounts. We share your name and address details and order data. These data are used to administer sales invoices. Your personal data will be transmitted and stored under protected conditions. Snelstart is bound to secrecy and will treat your data confidentially. Snelstart does not use your personal data for purposes other than those described above.
General purpose of the processing
We use your data only to provide our services. This means that the purpose of the processing is always directly related to the order you place. We do not use your data for targeted marketing. If you share data with us and we subsequently use these data to contact you at a later time – other than at your request – we will ask for your explicit consent to do so. Your data will not be shared with third parties other than for complying with accounting and other administrative obligations. These third parties are all bound to secrecy under their agreement with us, an oath or a legal obligation.
Automatically collected data
Data automatically collected by our website are processed to improve our services. These data (such as your IP address, web browser and operating system) are not personal data.
Cooperating in tax and criminal investigations
In certain cases, Lisap Benelux BV may be legally obliged to share your data because of a tax or criminal investigation by the authorities. We are then forced to share your data, but will oppose this within the limits of the law.
We retain your data as long as you are our customer. This means we will keep your customer profile until you state you no longer wish to use our services. If you state this, we will also regard it as a request to be forgotten. Under our administrative obligations, we must retain invoices with your personal data, so we will retain this data for the specified period. But employees will then no longer have access to your customer profile and the documents we have produced because of your order.
As the data subject, you have certain rights under Dutch and European legislation regarding the personal data processed by us or on our behalf. We explain below which rights are involved and how you can rely on them.
To prevent misuse, we normally only send copies and transcripts of your data to your email address already known to us. If you want the data to be sent to another email address or, for example, by post, we will ask you to provide proof of identity. We keep records of completed requests; if you have submitted a request to be forgotten, we will anonymise the data. You will receive all copies and transcripts of data in the machine-readable data format we use within our systems. You may always lodge a complaint with the Dutch Data Protection Authority if you suspect we are using your personal data incorrectly.
Right of access
You may always access the data we process (or have a third party process) relating to you or that can be traced back to you. You may submit a request for this purpose to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all data to your email address known to us, along with a list of the processors in possession of these data, stating the category under which we have stored these data.
Right to rectification
You may always arrange to modify the data we process (or have a third party process) relating to you or that can be traced back to you. You may submit a request for this purpose to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to your email address known to us that these data have been modified.
Right to restriction of processing
You may always restrict the data we process (or have a third party process) relating to you or that can be traced back to you. You may submit a request for this purpose to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to your email address known to us that these data will no longer be processed until you lift the restriction.
Right to data portability
You may always have another party process the data that we process (or have a third party process) relating to you or that can be traced back to you. You may submit a request for this purpose to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send to your email address known to us copies or transcripts of all data we have processed or that have been processed on our instructions by other processors or third parties. In such a case, we will most likely no longer be able to continue providing services because the safe connection of data files can no longer be guaranteed.
Right to object and other rights
In certain cases, you may object to the processing of your personal data by or on the instructions of Lisap Benelux BV. If you object, we will immediately stop data processing pending the outcome of your objection. If your objection is valid, we will provide copies and/or transcripts of data we process (or have a third party process) to you and then permanently stop processing. You also have the right not to be subjected to automated individual decision-making or profiling. Although we do not process your data in a way for this right to apply, please get in touch with our contact person for privacy matters if you disagree.
Our website places cookies from the U.S. company Google as part of the ‘Adwords’ service. We use this service to keep track of, and receive reports on, how visitors use our website. This processor may have to allow access to these data under applicable legislation and regulations. We have not consented to Google using the Adwords information obtained for other Google services.
Our website places cookies from the U.S. company Flipsnack, which produces our catalogues and brochures. This service places cookies and web beacons to track and obtain reports on how visitors view the catalogues. This processor may have to allow access to these data under applicable legislation and regulations. We have not consented to Flipsnack using the information obtained for other services.
Google Tag Manager
Our website places cookies from the U.S. company Google as part of the ‘Tag Manager’ service. We use this service to make quick adjustments to the website without having to go offline. This processor may have to allow access to these data under applicable legislation and regulations. We have not consented to Google using the information obtained for other Google services.
Lisap Benelux BV
6042 PB Roermond
T +31 (0) 475 – 342 903
Contact person for privacy matters: Mr M.M. Sijmons