Privacy Policy

Privacy Policy – Body & Soap

About Our Privacy Policy

At Body & Soap, we value your privacy.

We only use your data for the benefit of our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time—other than at your request—we will ask your explicit permission. Your data is not shared with third parties, other than to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality by virtue of the agreement between them and us or an oath or legal obligation.

Automatically collected data

Data automatically collected by our website is processed with the aim of further improving our services. These data (e.g. your IP address, web browser, and operating system) are not personal data.

Cooperation in tax and criminal investigations

In some cases, Body & Soap may be required by law to share your data in connection with a tax or criminal investigation by government authorities. In such a case, we are obliged to share your data, but we will resist this within the limits that the law offers us.

Retention periods

We keep your data as long as you are a client of ours. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you notify us, we will interpret this as a request to be forgotten. Due to applicable administrative obligations, we must retain invoices with your (personal) data, so we will keep this data for as long as the applicable period lasts. However, employees no longer have access to your customer profile or documents created in connection with your assignment.

Your rights

Under applicable Dutch and European legislation, you have certain rights as a data subject with regard to the personal data that are processed by or on behalf of us. Below we explain what these rights are and how you can invoke them. To prevent abuse, we only send copies and copies of your data to your already known email address. If you wish to receive the data at another email address or by mail, we will ask you to identify yourself. We keep records of completed requests. In the case of a request to be forgotten, we will store anonymized data. You will receive all copies and data in the machine-readable format we use within our systems. You always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we misuse your personal data.

Right of access

You always have the right to access the data that we (have) processed and that relates to your person or can be traced back to you. You can submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send you a copy of all data along with an overview of the processors who hold this data, stating the category under which we have stored this data.

Right to rectification

You always have the right to have the data that we (have) processed and that relates to your person or can be traced back to you, adjusted. You can submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will confirm that the data has been modified.

Right to restriction of processing

You always have the right to restrict the processing of data that we (have) processed that relates to your person or can be traced back to you. You can submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will confirm that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have the data that we (have) processed and that relates to your person or can be traced back to you, carried out by another party. You can submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send you copies or transcripts of all data we have processed or that has been processed by other processors or third parties on our behalf. Most likely, in such a case, we will no longer be able to continue our service because the secure linking of data files can then no longer be guaranteed.

Right to object and other rights

In some cases, you have the right to object to the processing of your personal data by or on behalf of Body & Soap. If you object, we will immediately stop processing your data pending the settlement of your objection. If your objection is well-founded, we will provide you with copies and/or transcripts of data that we process and then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.

Cookies

Google Analytics

Cookies from the American company Google are placed via our website as part of the “Analytics” service. We use this service to keep track of and receive reports on how visitors use the website. This processor may be required to provide access to this data based on applicable laws and regulations. We have not allowed Google to use the analytics information obtained for other Google services.

Third-party cookies

In the event that third-party software solutions use cookies, this is stated in this privacy statement.

Changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we already process data collected in relation to you, we will notify you by email.

Contact details

Body & Soap
De Does 9, 2642KT Pijnacker, Netherlands
T: (065) 760-2034
E: [email protected]

Privacy officer
Désirée Hoppezak-Blommaert