Privacy Policy

Table of contents

• Introduction
• Who Are We?
• How Do We Use Your Data?
• How Do We Obtain Your Personal Data?
• What Are Your Rights?
• Recipients of Personal Data
• Automated Decision-Making
• What Are Cookies and How Do We Use Them?
• Can This Privacy Policy Be Changed?
• Where Can You Go with Complaints and Questions?

Introduction

We take the protection of your privacy seriously and are committed to processing and using your personal information in a safe manner.

This privacy policy explains the types of data we collect, how we use it, and your rights related to our processing of your personal data. We encourage you to read this privacy policy carefully and contact us if you have any questions.

I Want to Get in Touch

Who Are We?

Rostro is a trade name of Heerkens Online, a sole proprietorship located at Pastoor Lathouwersstraat 22, 5473 GR Heeswijk-Dinther, The Netherlands, registered under the number 17222446 with the Chamber of Commerce.

As it relates to the processing of your personal data, we act as the data controller.

How Do We Use Your Data?

The following sections outline the different ways we process personal data and include the specific data we use, the legal basis for processing that data, and how long we keep the data.

Service Provision, Customer Management, and Financial Administration

Purpose: Financial Administration Data: Company name, bank details (bank name/IBAN/BIC) Legal Basis: Performance of the contract Retention Period: As long as necessary for this purpose

Purpose: Provision of Service Data: Name, address, email address, service-related data, service-generated data Legal Basis: Performance of the contract Retention Period: Maximum of 90 days

Purpose: Order Management Data: Name, address, delivery address, email address, payment details, order number, complaint details Legal Basis: Performance of the contract Retention Period: Maximum of 90 days

Purpose: Complaint Handling Data: Name, address, delivery address, email address, payment details, order number, complaint details Legal Basis: Performance of the contract Retention Period: As long as necessary for this purpose

Marketing

Purpose: Direct Marketing Data: Name, email address, product interest, order history Legal Basis: Legitimate Interest Involved Interest: Commercial Interest Retention Period: Maximum of 90 days

Purpose: Affiliate Marketing Data: Product interest, order history Legal Basis: Legitimate Interest Involved Interest: Commercial Interest Retention Period: Maximum of 60 days

Website

Purpose: Website Analytics Data: Browsing behavior Legal Basis: Legitimate Interest Involved Interest: Commercial Interest Retention Period: As long as necessary for this purpose

Purpose: Posting Messages or Reviews Data: Name, email address, message content Legal Basis: Performance of the contract Retention Period: As long as necessary for this purpose

Purpose: Chat Function Data: Name, email address, message content Legal Basis: Performance of the contract Retention Period: As long as necessary for this purpose

How Do We Obtain Your Personal Data?

• We collect data about you because you have provided it to us.

What Are Your Rights?

Under the European General Data Protection Regulation, you have several rights regarding your personal data and its processing:

• Access: You can request to access and review your personal data. Modification: You can request that we modify, correct, or delete your personal data.
• Processing Limitation: You can request that we limit the processing of your personal data.
• Objection: You can object to certain types of data processing. Data Transfer: You can request a copy of your personal data in a commonly used format to transfer to another data controller.
• Automated Processing: You can object to automated decision-making based solely on your personal data. Consent Withdrawal: You can withdraw your consent for the processing of your personal data, which may affect our ability to provide certain services.
• Our response: Our response to an access request is straightforward. The request can be sent easily and we will process it as soon as possible, and in any case, no later than one month after we receive it. If we reject the request, we will provide an explanation in our response for the reason behind the rejection.

I want to submit a request to access my data

Recipients of Personal Data

The data may be transferred to processors. We may also be required to provide your data to a third party, for example, under a legal obligation.

Automated Decision-Making

We use automated decision-making based on your data when it is necessary for the performance of a contract with you. Based on your profile, it is possible that some of our services or products may not be available to you. In all cases of automated decision-making, you have the rights outlined in the section "What Are Your Rights?"

What Are Cookies and How Do We Use Them?

Cookies are small pieces of (text) information that are sent to your browser when you visit our website and are then stored on the hard drive or in the memory of your computer, tablet, mobile phone or other device (hereinafter: "Device").

The cookies placed via our website cannot damage your Device or the files stored on it. When we refer to "cookies," we do not only mean these small pieces of (text) information, but also similar techniques through which information is collected, such as device fingerprinting.

Can This Privacy Policy Be Changed?

This privacy policy is subject to change. We recommend that you regularly review it for any changes. The last update was on April 9, 2021.

Where Can You Go with Complaints and Questions?

If you have any questions about this privacy policy and how we use your data, you can contact us below. If you have a complaint about the way we process your data, you can also contact us.

In addition, you can always contact the competent national supervisory authority in the field of privacy protection.