PRIVACY STATEMENT
This privacy statement (version July 2022) contains information about the processing of your personal data via the website www.vandijk-staircasesolutions.com. Van Dijk Postforming & Vlakverlijming B.V. also trading under the name Van Dijk Staircase Solutions (hereinafter: “Van Dijk”) is the controller.
We process your personal data when you buy products from us whether or not via our websites www.vandijkstaircasesolutions.com and its affiliated websites, when you otherwise use our websites or our app that allows products to be measured (further herein the ‘App’) or when you provide measurements to us yourself. Personal data refers to any information about an identified or identifiable person, such as your name, telephone number, e-mail address, etc.
For Van Dijk, the protection of your personal data is very important. We understand that you want to protect your personal data and privacy. We will always process your personal data in accordance with applicable legislation and regulations, including the General Data Protection Regulation (‘GDPR’), its Dutch implementation Act (Algemene Verordening Gegevensbescherming Uitvoeringswet: ‘UAVG’) and the Dutch Telecommunications Act (‘Telecommunicatiewet: ‘TW’).
This privacy statement sets out how Van Dijk handles your personal data when performing processing operations. In this regard, Van Dijk acts as the controller within the meaning of the GDPR.
Van Dijk’s contact details:
Van Dijk Staircase Solutions
Risseweg 19
6004 RM Weert
The Netherlands
Email: info@vandijk-staircasesolutions.com
Phone: +31 495 626 250
Ch. of Comm. no: 58617779
What personal data is processed by Van Dijk, for what purposes and on what basis?
Below, we indicate for each processing activity which personal data we process, on which processing basis and for which purposes.
We process your personal data on the following processing bases:
▪ because you gave your own consent to it, prior to processing;
▪ because it is necessary for fulfilling the agreement;
▪ because it is necessary to comply with a legal obligation; and/or
▪ because it is important for Van Dijk that we process your personal data, for the proper conduct of Van Dijk’s
business (legitimate interest).
If we process personal data because you have given your consent, you may withdraw it at any time (see section 7 of this statement). The processing of your personal data which took place prior to the withdrawal of your consent will then remain lawful.
If you do not want to provide us with your personal data, even though it is necessary to (i) enter into an agreement with you; (ii) carry out an agreement with you; (iii) provide you with more information about our services and products or otherwise do business with you; or (iv) comply with our legal obligations, we will not be able to enter into an agreement with you, provide you with the requested information, services or products and/or do business with you.
Request information
On our websites, you can request information about Van Dijk and the products and services we provide. To do so, please use our contact form. You can also request information by phone or e-mail from Van Dijk. As part of your information request, we process your name, postcode, telephone number and e-mail address, your request and the communication pertaining to this.
We process this personal data to process and follow up on your information request. Your postcode helps us sort certain contact requests and put them into groups. The basis for this processing is your consent and/or our legitimate interest.
To confirm your information request, we will send you an e-mail. We will then contact you by phone to be able to best help you.
To improve our services we, or third parties engaged by us, may at any time contact you by e-mail or telephone to ask whether you would like to participate in a questionnaire or survey. This contact is based on our legitimate interest. You are not obliged to cooperate with this. If you do cooperate, your consent forms the basis of this processing. In doing so, apart from your name and contact details, we also process your input in connection with the questionnaire or survey.
After completing the contact form, we will in any event delete your data after 12 months at the latest if you have not become a customer of Van Dijk.
Newsletter and marketing e-mails
Van Dijk may send you newsletters and/or marketing e-mails. To this end we process your e-mail address.
We process your e-mail address in order to send you our newsletters and/or marketing e-mails. We will only do this if you have given your prior consent or if you are already a customer of ours.
You can unsubscribe from this at any time by clicking on the unsubscribe link included at the bottom of each e-mail, or by sending an e-mail to info@vandijk-staircasesolutions.com with a request to unsubscribe you from the newsletter and/or marketing e-mails.
After withdrawing your consent, we will remove your e-mail address from our database as soon as possible and at the latest within two weeks.
Processing orders
If you place an order with Van Dijk, we process, where applicable, your (company) name, Chamber of Commerce number and VAT number, address details, telephone number, e-mail address, payment details and the information relating to your order.These data are needed to produce the products ordered by you and then deliver them to you. If you have placed an order, we will keep you informed by e-mail about the status of the order and other information in connection with the delivery. Sometimes we may contact you by phone if we have specific questions about your order. We also need these details for any returns or repairs. The basis of this processing is the fulfilment of the agreement and/or our legitimate interest.
In connection with the warranty, we retain the necessary customer data during the warranty period of the purchased product, after your products have been delivered.
Online purchase and account
Some products are also available online. To place your order online, you use our websites whether or not in combination with our app.
When you visit our websites and use our app, we collect your IP address, information about your internet browser, any language settings and information about the settings of the operating system of the computer or mobile device used at that time for the website visit and/or the app.
In order to be able to order products online, you have to create an account. To this end, we ask you for the following information: (company) name, address details, telephone number and e-mail address. If you use a measuring kit, you will receive a personal QR code to create an account, or to log into an already existing account. With an account, you can download an app, which enables you to measure a staircase. We then store the staircase measurement data in our database to provide you with the right products. We provide this information and all the personal data that is needed to deliver the ordered products to suppliers and (logistics) service providers, insofar as this is necessary.
The basis for this processing is Van Dijk’s legitimate interest in enabling and improving the purchasing process.
Ratings and reviews
If you have ordered products from Van Dijk, we may send you an invitation to review our products and the ordering process. If you post a review, we will ask for your e-mail address so that we can prevent any fraud. We won’t display your e-mail address on the website and it is not used for any other purpose. We will retain your e-mail address for an indefinite period of time. You are not obliged to give a review. If you want to submit a review, you can consent to the display of your first name and surname when posting the review. You can also post the review anonymously or submit your review to us for internal use and analysis.
We value your opinion and like to share it with others so that they can make a proper decision. We also use your review to optimise our services. If you post your review anonymously or with your name, we may display it on our website and through Google and Facebook. We do not provide your e-mail address to third parties. The basis of this processing is your consent and/or our legitimate interest.
Working at Van Dijk
Through our website, you can apply for open positions at Van Dijk or at one of our sister companies, Escada B.V., Steyl Montage B.V. and Centesimo B.V., and other (future) affiliates of Van Dijk via the forms for this purpose. To do so, you will need to provide your first name and surname, your phone number and e-mail address, and upload your CV. It is also possible to add your cover letter to the application form or leave comments.The data you provide will only be used for recruitment and selection purposes, to assess your suitability for the vacant position. The basis for this processing is your consent and/or our legitimate interest.
When the application process has been completed, your data will be deleted within four weeks, unless you give your consent for your data to be kept for one year after the end of the application process.
(Telephone) customer service
When you contact our customer service by phone, data on this contact may be kept, for example by recording your comment, question or complaint, so that we can still be of service to you at a later stage. Your phone calls to our customer service can also be recorded. You will also be informed about this at the time of the phone call and before the recording starts.
The recordings will be used for training purposes and as evidence of the formation of an agreement or other arrangement made. The basis of this processing is our legitimate interest.
Recordings of phone calls will be deleted once they are no longer needed for these purposes.
Visits to Van Dijk
We use camera surveillance of visitors to our business premises and/or showroom. The purpose of this processing is to secure and manage our property and systems. The basis of this processing is our legitimate interest.
We do not retain camera images for longer than four weeks, unless there is an incident in connection with which the images need to be retained longer.
Does Van Dijk use cookies?
Yes, we use cookies on our websites. Cookies are small text files stored on your computer by your browser. These aim to make our website more user-friendly, effective and secure.
If you want to know more about how we use cookies, please go to our web page Cookie Policy.
Who has access to your personal data?
Your personal data may be shared with companies in the group of companies of which Van Dijk is a member, external service providers and business partners if this is necessary for the performance of an agreement, if Van Dijk is legally obliged to do so, if we have a legitimate interest in sharing these personal data, or if we have your consent.
We share your personal data with the following categories of service providers and business partners:
▪ IT and cloud service providers, to, among other things, manage and optimise our website and our systems;
▪ Partners processing payment details;
▪ Suppliers;
▪ Logistics service providers to be able to deliver our products to you, among other things;
▪ Marketing service providers who assist us with our marketing activities, including sending newsletters. To send newsletters, for example, we use marketing platforms. For this purpose, we only provide your name and e-mail address to this party;
▪ Legal entities or persons processing reviews and/or providing customer service, including conducting questionnaires or surveys. For example, we use the services of Trustpilot to collect reviews about our services and products, and if you are invited to write a review, we will provide that party with your name and e-mail address.
▪ Legal and fiscal service providers, if necessary in connection with our business activities;
▪ Supervisory authorities, authorities and the judiciary, if we are required to do so by law;
▪ Companies that process your personal data on our instructions, with which we enter into processor agreements to the extent necessary to ensure the same level of security and confidentiality of your data. We remain responsible for this processing.
Does Van Dijk transfer your personal data to countries outside the European Economic Area?
We will only transfer your personal data to parties located outside the European Economic Area (‘EEA’), if they are parties in countries with an adequate level of protection, if other appropriate safeguards are in place or if there is a statutory exception.
When transferring your personal data to parties outside the EEA, we ensure a comparable level of protection of personal data as required under the GDPR, by implementing at least one of the following safeguards:
We transfer your personal data to countries considered by the European Commission to provide an adequate level of protection for personal data, such as for transfers to the UK; or
If we transfer your personal data to a country that is not covered by a European Union adequacy decision or does not have exceptions for specific transfers/situations, we will protect your personal data through European Commissionapproved (standard) contractual clauses or equivalent mechanisms. These ensure that third parties with whom we share your personal data adhere to the same standards of protection as those in place within the EEA. Where necessary, we will take additional measures to safeguard the transfer of your personal data.
How long does Van Dijk keep your personal data?
We do not keep your personal data for longer than is necessary for the purpose(s) for which we process your personal data. In addition, for certain data, we are subject to statutory retention periods. Processing activities to which specific retention periods apply are listed in section 1 of this statement.
After the retention period, we delete or anonymise your personal data, unless we need to keep certain personal data for other purposes. However, this only happens if we have a legal basis for retaining your personal data and on the condition that these data are only accessible for this specific purpose.
Which measures does Van Dijk take to protect your personal data?
We will take appropriate measures to ensure that your personal information is processed in line with applicable legislation and regulations, and is protected against, for example, unauthorised and unlawful processing, loss, destruction or damage. For example, on our website we use an encrypted connection (HTTPS), so that the data you send are encrypted and secured. Among other measures, we have implemented access control, we use appropriate system and network security measures such as firewalls, we protect our devices with appropriate passwords and all our employees are obliged to keep your personal data confidential.
If you have the impression that your data are not properly secured, if there are indications of misuse, or if you have other questions, please contact us using the details stated at the top of this privacy statement.
What rights do you have with regard to your personal data?
Under the GDPR, you can exercise the following rights in relation to your personal data:
- Right to inspection – You have the right to ask us about the personal data we hold about you and, to the extent applicable, to inspect that data.
- Right to rectification – You have the right to ask us to correct or supplement your data if you believe that the information we keep about you is not accurate or complete.
- Right to objection – You have the right to ask us to discontinue processing your personal data. If you object to the use of your personal data for marketing purposes, Van Dijk will stop processing your personal data as soon as possible. For other processing operations based on the legitimate interests of Van Dijk, we will no longer process your personal data if you submit an objection, based on your grounds relating to your particular situation, unless Van Dijk has a compelling legitimate interest for the respective processing operation. However, we may no longer be able to provide certain products or services if we cannot process necessary personal data.
- Right to restrict processing – You can ask us to (temporarily) restrict the processing of your personal data, for example, if you suspect that the personal data we keep is inaccurate or if you think it is no longer necessary to process your personal data.
- Right to oblivion or deletion – You have the right to request us to delete your personal data, for example, if it is no longer needed for its original purpose, if it is out of date or if you withdraw your consent. However, if we are legally obliged to update certain personal data we cannot comply with this request.
- Right to data transfer – You have the right to transfer your personal data to a third party indicated by you. This right can only be exercised if you provided the personal data to us yourself and if we process that data in an automated file on the basis of your consent or to fulfil our obligations under an agreement with you.
- Right to withdraw consent granted – With regard to processing personal data based on your consent, you can withdraw that consent. However, the processing of your personal data until your consent is withdrawn, is lawful.
When you contact us to exercise your rights, we aim to respond to this within 1 month. In special circumstances this may last longer (up to a maximum of 3 months). We will then let you know the reason for this within 1 month. Always make sure it is clear exactly which right you want to exercise and how you want to receive the information. Please note that in certain cases we will need more information, for example, a copy of your proof of identity. We want to make sure that we are helping the right person.
If you have any questions or complaints regarding the processing of your personal data, please contact us using the contact details stated at the top of this privacy statement.
In addition, you always have the option of filing a complaint with the privacy regulator, the Dutch Data Protection Authority.
Will this statement be amended?
Van Dijk reserves the right to change at any time the privacy statement provided on or via its website without further notice. The latest update is from July 2022. We will always process your personal data in line with the privacy statement in force at the time of collecting your data. It is recommended that you regularly check whether this privacy statement has been amended.
This version of the privacy statement was determined in July 2022.