Buckler Boots B.V. Privacy Statement
We highly value the reliability and integrity of your personal data. That is why we will process your data with utmost care and use this data for specific purposes in accordance with the permission given by you and the statutory provisions on the protection of personal data.
In the following sections this statement on the protection of personal data of Buckler Boots B.V. describes how Buckler Boots B.V. (Sprendlingenstraat 57, 5061 KM, Oisterwijk, the Netherlands) acting under the name “Buckler Boots” (referred to below as: Buckler Boots) collects, processes and uses the personal data of its customers and potential customers.
Who is responsible for data processing acts?
As defined in the General Data Protection Regulation (GDPR) Buckler Boots is the controller of the processing of your personal data.
Buckler Boots operates the website www.bucklerboots.nl, which offers the possibility to create an account or submit a request for contact.
Buckler Boots is responsible for all your personal data that is processed through the website www.bucklerboots.nl as part of the purposes of the direct marketing of Buckler Boots. Buckler Boots expressly does not sell this personal data to any third parties.
When does Buckler Boots collect and process personal data?
Buckler Boots collects and processes your personal data in e.g. the following cases:
- If you directly contact us, for instance by email, through our website or the Buckler Boots customer service.
- If you use the forms available at the Buckler Boots website for a dealer registration, which allows you to e.g. place orders or contact us on various subjects.
- If you request information concerning our products (for instance by submitting a request for an offer).
- If you respond to our direct marketing activities, for instance if you submit your data online through our website (www.bucklerboots.nl).
Please help us keep your personal data up to date by informing us of changes of your personal data, in particular your contact information.
What data of you may be collected?
The following categories of personal data may be collected through the services and contact channels which have been described in this data protection information:
Contact information ► Name, address, telephone number, email address.
Use of websites and communications ► Information on the way in which you use the website and whether you open or forward messages sent by us, including data that has been collected by means of cookies and other tracking technology.
How do we protect your personal data?
We use various security measures such as encryption and authentication tools in accordance with the latest state of technology in order to protect and maintain the security, integrity and availability of your data.
We cannot guarantee a 100% protection from unauthorized access in case of data transfer through the internet or a website, but we and our service providers and business partners make every effort to protect your personal data in accordance with applicable legislation and regulations concerning data protection, by means of physical, electronic and process-related security precautions in accordance with the latest state of technology. The precautions we have taken include:
- Strict criteria for the approval to obtain access to your data according to the ‘need to know’ principle (limitation to as few persons as possible) and for specified reasons only.
- Transfer of collected data in encrypted form only.
- Storage of confidential information such as credit card information in encrypted form only.
- Protection of IT systems by means of a firewall to protect against unauthorized access by for instance hackers.
- Permanent monitoring of access to IT systems in order to detect and prevent misuse of personal data.
If you have received a password from us or made a password yourself in order to obtain access to certain sections of our website or other portals or services we operate, you yourself are responsible for keeping this password confidential and meeting any other security procedures we advise to you. In particular we ask you not to share your password with anyone.
What personal data of you is processed by third parties?
For the purpose of performing services, for instance delivery of articles and other activities, we use services of other parties. To the extent that third parties use your data on behalf of Buckler Boots, they will do so as data processors. All arrangements on e.g. security, confidentiality and your rights have been included in data processing agreements which we have concluded with these third parties.
How long do we retain your data?
In accordance with article 17 of the General Data Protection Regulation (GDPR) we will retain your data for as long as is necessary for the purposes for which we process your data. If we process data for more than one purpose this data is automatically removed or stored in a format that prevents that this data can be directly traced back to you as a person as soon as the last task has been performed.
Use for performance of a contract
In order to comply with contractual obligations data of you that has been collected may be retained for as long as the contract applies and – depending on the nature and scope of the contract – for 7 to 10 years after that, in order to comply with statutory requirements for storage and in order to respond to any questions or solve any complaints after termination of the contract.
In addition to that there are contracts for the delivery of products and performance of services which require longer retention times; Cf. “Use for the evaluation of claims” below.
Use for the evaluation of claims
Data which in our opinion is required to prevent and evaluate any claims brought against us or to instigate legal (criminal) proceedings or prevent claims against you, us or third parties, may be retained by us for as long as these proceedings may be instigated.
Use for customer service and marketing purposes
Data of you collected for customer service and marketing purposes may be retained for 3 to 10 years, unless you wish that this data is erased and no contractual or statutory obligations for storage prevents compliance with this request for erasure.
Rights of data subjects
In accordance with the General Data Protection Regulation (GDPR) you, as a data subject, have the following specific rights towards Buckler Boots:
Right to information (article 15 of the General Data Protection Regulation (GDPR)):
You may at any point in time request information on all your data that is retained by us. This information concerns among other things the categories of data which we process, the purposes of processing, the origins of the data if we have not received data directly from you and, where applicable, the recipients to whom we have sent the data. You can receive a copy of your data from us free of charge. If you are interested in additional copies, we reserve the right to charge those.
Right to rectification (article 16 of the General Data Protection Regulation (GDPR))
You may request us to rectify your data. We will take the measures required to keep the data of you which is constantly processed by us, correct, complete and up to date, on the basis of the most recent information we have.
Right to erasure (article 17 of the General Data Protection Regulation (GDPR))
You may request us to erase your data, provided that the statutory requirements are complied with. In accordance with article 17 of the General Data Protection Regulation (GDPR) that may be the case if:
- The data is no longer required for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which processing is based and there is no other legal ground for processing.
- You object to the processing of your data and there are no legitimate grounds for processing or in case you object to processing for direct advertising purposes.
- The data has been unlawfully processed and in case processing is not necessary.
Right to data portability (article 20 of the General Data Protection Regulation (GDPR))
At your request we will send your data to a different controller if that is technically possible. However, this right applies only in case data processing is based on your consent or required for performance of a contract. Instead of requesting a copy of your data you can request us to directly transfer the data directly to a different controller indicated by you.
Time limits for compliance with the rights of data subjects
In general we make every effort to comply with requests within 30 days. This time limit may however be extended for reasons in connection with the specific rights of data subjects or the complexity of the request.
You can address your questions and requests concerning processing of personal data to:
Buckler Boots B.V.
Attn. Mr. B. van den Beukel
DOWNLOAD PRIVACY STATEMENT (PDF)