Privacy Policy
PRIVACY POLICY STUDIO BATIK
This Privacy Policy applies to the processing of personal data from all our users regarding the products and services of Studio Batik VOF having its registered office at (2031 CE) Haarlem at the Jan van Krimpenweg 9 L and registered in the Chamber of Commerce with registration number 87375974.
In this Privacy Policy we explain how the personal data is processed and for which purposes the data is being processed. By using our products and services and accepting this Privacy Policy, the following terms shall apply.
Disclosing personal data is not required
A user shall at all times have the option whether or not to disclose personal data. However, for the use of a number of our products and/or services it is requested to disclose personal data to Studio Batik. If the input and/or transmission of your data is required, Studio Batik shall inform you which data is ‘necessary’ to be able to use the products and/or services and which data is ‘optional’.
Processing of personal data
By using our services, we process your personal data. This personal data is collected for certain purposes on a legitimate legal basis. It concerns the following categories of data, purposes and legal bases:
| • | Bookings: if the user wishes to book one of our studio’s, the name, e-mail address and telephone number will be processed |
| • | Contacts: if the user contacts Studio Batik, the e-mail and telephone number will be processed. |
| • | Newsletter: if the user wishes to receive our newsletter, the user will have to enter his email address. |
| • | Financial details: If the user purchases a paid product and/or services, Studio Batik requests bank account details and – if it concerns a company – the VAT number. |
The processing of personal data takes place in the following situations:
| a. | The realisation and execution of an agreement concluded with the user; |
| b. | Administrative processing: in order to offer and/or provide the user with the agreed services; |
| c. | Invoicing: in the event of a purchase by the user or in the event of payment to our suppliers. In the event of non-payment we can pass on the claim to third parties such as a collection agency. |
In the aforementioned cases, the name, e-mail address, bank account details and VAT-number are essential for the execution of the agreement.
| d. | To send the user newsletters, offers, service messages or one or more electronic messages that may be of interest to the user; |
| e. | To make the user a targeted offer for promotional purposes. |
In the aforementioned cases, personal data i.e. the e-mail address are essential for the performance of the agreement. The user must give explicit permission for the processing thereof.
| f. | Managing, analysing, maintaining, optimising and securing our products and/or services and for preventing abuse and/or fraud of our products and/or services; |
| g. | Determining strategic analyses and reports on our products and/or services. |
In the aforementioned cases, personal data such as names are processed on the basis of a legitimate interest.
Studio Batik will process the personal data provided solely for the implementation of its products and/or services and in particular for the expressed purpose for which the personal data is collected.
Data collected automatically
Apart from the collection of functional cookies, Studio Batik does not collect any personal data automatically.
Sensitive personal data
Studio Batik does not process sensitive personal data as long as it is not provided by the user.
Retention period
The personal data shall solely be stored during the period which shall be necessary for the execution of the purposes as set out above, unless applicable laws prescribe longer retention periods in which case the personal data shall be stored for the period as prescribed by the applicable laws.
Users’ rights
All our users have certain rights under the law of the General Data Protection Regulation (“GDPR”) to manage their own personal data.
| • | The right to access; |
| • | The right to rectification; |
| • | The right to erasure; |
| • | The right to object; |
| • | The right to data portability; |
| • | The right to restriction; |
A user may also withdraw the consent granted for the processing of their personal data at any time.
Furthermore, the user has the right to lodge a complaint about our data processing activities with a data protection authority.
If a user wishes to invoke one or more of these rights, the user can contact Studio Batik through photo@studiobatik.com.
Transfer to third parties
Notwithstanding the below mentioned, only persons authorised by Studio Batik for the security and/or processing and/or maintenance of IT-structure have access to personal data of users.
For the purposes as set out in this Privacy Statement we involved a controller with whom we closed an agreement to ensure that the controller offers sufficient assurance with regard to technical and organisational safety measures.
Studio Batik shall not provide personal data of its users to third parties unless set out in this Privacy Statement and/or unless this is necessary for the execution of its Products and/or services, on the basis of a statutory provision or in case of an emergency if this is, in the reasonable opinion of Studio Batik, in the interest of it users. This includes legitimate requests of authorities, summons or court orders, acts to investigate or prevent damages or fraud, or acts to guarantee the safety of our network and our Products and/or Services.
Studio Batik shall provide personal data to its accountant:
Grey Men B.V.
Willem de Zwijgerlaan 17-25
1056 JD Amsterdam
info@greymen.nl
Data breach
In the unlikely event that you discover a data breach, it is of utmost importance that we are informed immediately. You can report data breaches directly through: photo@studiobatik.com. Your report and details will be treated confidentially at all times.
Storage of personal data
The personal data processed by Studio Batik will be stored exclusively in the Netherlands and not exceed the borders of the European Union. The GDPR thus applies to these stored personal data.
If under specific circumstances there is an international transfer of personal data outside the European Union, this transfer will only take place under the conditions of the GDPR to countries with an adequacy decision or countries that have taken other suitable guarantees for the protection of personal data.
Security
Studio Batik has taken adequate technical and organisational measures to protect the personal data of users against unauthorised or unlawful processing and against accidental loss, destruction or damage. Studio Batik uses Wordfence which is provided with a firewall and a security scan, the website is provided with a SSL connection by which all data traffic between the browser and the web server is encrypted and documents are secured with Captcha.
Contact information
If there are any questions and complaints regarding this Privacy Policy, or if there is a question or complaint regarding our practice, please contact us at: photo@studiobatik.com.