Privacy policy

About our privacy policy

4shine BV cares deeply about your privacy. We therefore only process data that we need for (improving) our services and handle the information we have collected about you and your use of our services with care. We never make your data available to
third parties for commercial purposes.
This privacy policy applies to the use of the website and the services made available on it by 4shine BV. The effective date of these terms is 01/09/2023; upon publication of a new version, all previous versions become invalid. This privacy policy describes which data we collect about you, what these data are used for, and with whom and under what conditions these data may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and what rights you have with regard to the personal data you provide to us. 
If you have any questions about our privacy policy, please contact our privacy contact person; you will find the contact details at the end of our privacy policy. About data processing Below you can read how we process your data, where we store (or have stored) these data, which security techniques we use, and who has access to the data.

Webshop software

WooCommerce

Our webshop was developed using software from Shopify. Personal data that you make available to us for the purpose of our services are shared with this party. Shopify has access to your data in order to provide us with (technical) support; they will never use your data for any other purpose. Based on the agreement we have concluded with them, Shopify is obliged to take appropriate
security measures. These security measures consist of the application of SSL encryption and a strong password policy. Shopify uses cookies to collect technical information regarding your use of the software; no personal data are collected and/or stored.
Shopify reserves the right to share collected data within its own group in order to further improve its services.

IXL Hosting

We purchase web hosting and email services from IXL hosting. IXL hosting processes
personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. These are not personal data. IXL hosting has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your
personal data. Under the agreement, IXL hosting is bound to confidentiality.

Office365

We use the services of Office365 for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our
data as much as possible. Office365 has no access to our mailbox, and we treat all our email traffic confidentially.

Payment processors

MultiSafepay

For handling (part of) the payments in our webshop, we use the platform of
MultiSafepay or the Shopify platform. MultiSafepay processes your name, address, and place of residence details, as well as your payment details such as your
bank account or credit card number. MultiSafepay has taken appropriate technical and organizational measures to protect your personal data. MultiSafepay reserves the right to use your data to further improve its services and, in that context, to share (anonymized) data with third parties.
All safeguards mentioned above regarding the protection of your personal data also apply to the parts of MultiSafepay’s services for which it engages third parties. MultiSafepay does not retain your data longer than is permitted under the statutory retention periods.

Reviews

N/A

Shipping and logistics

Onbezorgd bezorgd

If you place an order with us, it is our responsibility to have your parcel delivered to you. We use the services of DPD and DHL to carry out deliveries. For this purpose, it is necessary for us to share your name, address, and city details with these shipping partners. They use this data solely for the performance of the agreement. If DPD or DHL engages subcontractors, Onbezorgd bezorgd will also make your data available to these parties.

Invoicing and accounting

Exact

We use the services of Exact accounting software to maintain our administration and bookkeeping. We share your name, address, and  city details, as well as details relating to your order.
This data is used for the administration of sales invoices. Your personal data is transmitted and stored securely. Exact accounting software is bound by confidentiality and will treat your data
confidentially. Exact accounting software does not use your personal data for purposes other than those described above.

External sales channels

Bol.com

We sell (part of) our items via the Bol.com platform. If you place an order through this platform, Bol.com shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and
organizational measures to protect your data against loss and unauthorized use.

Purpose of data processing

General purpose of processing

We use your data exclusively for the benefit of our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time – other than at your
request – we will ask for your explicit consent. Your data will not be shared with third parties, except insofar as necessary to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality on the basis of the agreement
between them and us, or by oath or legal obligation.

Automatically collected data

Data that is automatically collected by our website is processed for the purpose of further improving our services. This data (for example your IP address, web browser, and operating system) is not personal data.

Cooperation with tax and criminal investigations

In applicable cases, 4shine BV may be legally obliged to share your data in connection with tax or criminal investigations by government authorities. In such a case
we are compelled to share your data, but we will oppose this within the possibilities offered to us by law.

Retention periods

We retain your data for as long as you are our client. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If if you notify us of this, we will
also interpret this as a request to be forgotten. This also means that we will not retain your data for longer than two years from the last contact moment or transaction, unless there is a legal justification for doing so. Based on applicable administrative obligations, we are required to retain invoices containing your
(personal) data, so we will keep this data for as long as the applicable term runs.
However, employees no longer have access to your client profile and documents that we have prepared in response to your assignment.

Your rights

Under applicable Dutch and European legislation, you as a data subject have certain rights with regard to the personal data processed by us or on our behalf. Below we explain what these rights are and how you can invoke them. In principle, to prevent misuse, we send
extracts and copies of your data only to the email address already known to us. If you wish to receive the data at a different email address or, for example, by post, we will ask you to identify yourself. We keep records of completed requests; in the case of a request to be forgotten,
we record anonymized data. You will receive all extracts and copies of data in the machine-readable data format that we use within our systems. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data in an
incorrect manner.

Right of access

You always have the right to inspect the data that we process (or have processed) and that relates to your person or can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted,
we will send you, at the email address known to us, a copy of all data together with an overview of the processors that hold this data, stating the category under which we have
stored this data.

Right to rectification

You always have the right to have the data that we process (or have processed) and that relates to your person or can be traced back to you adjusted. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted,
we will send you, at the email address known to us, a confirmation that the data has been adjusted.

Right to restriction of processing

You always have the right to restrict the data that we process (or have processed) that relates to your person or can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted,
we will send you, at the email address known to us, a confirmation that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have the data that we process (or have processed) and that relates to your person or can be traced back to you transferred by another party. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your
request is granted, we will send you, at the email address known to us, extracts or copies of all data about you that we have processed or that has been processed on our behalf by other processors or third parties. In all likelihood, in such a case we will no longer be able to continue the service continue, because the secure
linking of data files can then no longer be guaranteed.

Right to object and other rights

In applicable cases, you have the right to object to the processing of your personal data by or on behalf of 4shine BV. If you object, we will immediately cease data processing pending the handling of your objection. If your objection is well-founded, we will make transcripts and/or copies
of the data that we process (or have processed) available to you and will then permanently stop the processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is
the case, please contact our privacy contact person.

Cookies

Google Analytics

Through our website, cookies are placed by the American company Google as part of the “Analytics” service. We use this service to keep track of and receive reports on how visitors use the website.
This processor may be required under applicable laws and regulations to provide access to this data. We have not permitted Google to use the obtained analytics information for other Google services.

Third-party cookies

If third-party software solutions use cookies, this is stated in this privacy policy.

Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we process data already collected in relation to you, we will notify you by email.

Contact details

4shine BV
Kelvinring 52 C – 2952 BG Alblasserdam Netherlands
T (078) 303-0267
E peter@4shine.nl
Privacy contact person
P. Hoek