Privacy Policy
Crystal Love Privacy Policy
About our privacy policy\
Crystal Love cares a lot about your privacy. We therefore only process data that we need for (the
improve) our services and handle the information we collect about you and your use of
We have collected your data for commercial purposes.
third parties.
This privacy policy applies to the use of the website and the services provided by Crystal
Love. The effective date for the validity of these terms and conditions is 17/07/2023, with the publication of a new
version, the validity of all previous versions expires. This privacy policy describes what information we collect about you.
are collected, what this data is used for and with whom and under what conditions this data is shared
data may be shared with third parties. We also explain to you how we process your data.
store and how we protect your data against misuse and what rights you have with regard to your
personal data provided to us.
If you have any questions about our privacy policy, please contact our privacy officer, you
You will find the contact details at the end of our privacy policy.
About data processing
Below you can read how we process your data, where we store it (or have it stored), which
security techniques we use and who has access to the data.
Web store software
Shopify
Our online store is developed with software from Shopify. Personal data that you provide for our
services provided to us are shared with this party. Shopify has access to your data
to provide us with (technical) support, they will never use your data for any other purpose. Shopify
is obliged to take appropriate security measures based on the agreement we have concluded with them
to take. These security measures consist of the application of SSL encryption and a strong
Password policy. Shopify is a certified credit card processor. Shopify uses
cookies to collect technical information regarding your use of the software, no cookies are used
personal data collected and/or stored. Shopify reserves the right to collect data
to share within its own group to further improve services. Shopify takes into account the
applicable statutory retention periods for (personal) data. The EU/US Privacy Shield applies, your
data may be processed in the United States.
Web hosting
Antagonist.nl
We purchase web hosting and email services from Antagonist.nl. Antagonist.nl processes
personal data on our behalf and does not use your data for its own purposes. However, this party may
collect metadata about the use of the services. This is not personal data. Antagonist.nl has
appropriate technical and organizational measures taken to prevent the loss and unauthorized use of your
to prevent personal data from being shared. Antagonist.nl is obligated to maintain confidentiality under the confidentiality agreement.
Email and mailing lists
Shopify
We send our newsletters and transactional emails using our online store software 'Shopify'.
All confirmation emails you receive from our website and web forms are sent through the servers of
Shopify. Shopify will never use your name and email address for its own purposes. At the bottom of every email you send
If you receive an email automatically via our website, you will see the 'unsubscribe' link. If you click this, you will not receive any emails.
receive more from our website. This may seriously reduce the functionality of our website! Your
Personal data is sent, stored and released securely by Shopify. Shopify uses
cookies and other internet technologies that provide insight into whether emails are opened and read. In addition
Shopify processes information about you as a recipient and the subject line of emails to improve the
quality of service, this data is retained for 30 days. Shopify reserves the right
to use your data to further improve the services and in that context
to share information with third parties.
We use the services of Antagonist.nl for our regular business email traffic. This party has
appropriate technical and organizational measures taken to prevent misuse, loss and corruption of your and our data
data as much as possible. Antagonist.nl does not have access to our mailbox and we already handle
our email correspondence confidential.
Payment processors
Shopify
EXAMPLE: We use the following to process (part of) the payments in our online store:
Shopify's platform. Shopify processes your name, address and residence information and your
payment information such as your bank account or credit card number. Shopify has appropriate technical and
organizational measures taken to protect your personal data. Shopify reserves the right
right to use your data to further improve the services and in that context
(anonymized) data to be shared with third parties. Shopify shares data in the event of a request for a
deferred payment (credit facility) personal data and information regarding your financial position
with credit rating agencies. All the above-mentioned guarantees regarding the protection of your
Personal data also applies to the parts of Shopify's services for which
they engage third parties. Shopify does not store your data for longer than the statutory periods
is allowed.
Reviews
WebwinkelKeur
We collect reviews through the WebwinkelKeur platform. If you leave a review through WebwinkelKeur, you are required to provide your name, city, and email address. WebwinkelKeur shares this information with us so we can link the review to your order. WebwinkelKeur also publishes your name and city on its own website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide its services, for which we have given WebwinkelKeur permission. All the aforementioned guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.
Shipping and logistics
PostNL
When you place an order with us, it is our responsibility to have your package delivered to you. We use
PostNL's services for carrying out deliveries. For this purpose, it is necessary that we have your name,
Share address and residence details with PostNL. PostNL only uses this data for the purpose of
execution of the agreement. In the event that PostNL engages subcontractors, PostNL will share your data
also available to these parties.
Invoicing and accounting
The Green Bookkeeper
We use the services of
The Green Bookkeeper. We share your name, address, and city information, as well as details regarding your order.
This data is used to administer sales invoices. Your personal data will be
Sent and stored securely. The Green Bookkeeper is bound by confidentiality and will keep your data confidential.
treat confidentially. The Green Bookkeeper does not use your personal data for purposes other than
described above.
Purpose of data processing
General purpose of the processing
We use your data solely for the purpose of providing our services. This means that the purpose of the
processing is always directly related to the order you place. We do not use your data for
(targeted) marketing. If you share data with us and we use this data for purposes other than your
request - to contact you at a later time, we will ask for your explicit permission to do so. Your
data will not be shared with third parties, other than for accounting and other administrative purposes
to meet obligations. These third parties are all bound by confidentiality under the agreement
between them and us or an oath or legal obligation.
Automatically collected data
Data automatically collected by our website is processed for the purpose of our
to further improve services. This data (for example your IP address, web browser and
operating system) are not personal data.
Cooperation with tax and criminal investigations
In certain cases, Crystal Love may be required to do so on the basis of a legal obligation
sharing your data in connection with tax or criminal investigations by government authorities. In such a
In this case we are forced to share your data, but we will do so within the possibilities that the law offers us.
to oppose it.
Retention periods
We store your data for as long as you are our client. This means that we store your client profile until you
Indicate that you no longer wish to use our services. If you inform us of this, we will
also consider it as a request to be forgotten. This also means that we will not keep your data for longer than two years.
from the last point of contact or transaction, unless there is a legal justification for this.
basis. Based on applicable administrative obligations, we must invoice you
(personal) data to be stored, so we will store this data for as long as the applicable term runs.
However, employees no longer have access to your client profile and documents that we receive as a result
have produced your order.
Your rights
Under applicable Dutch and European legislation, you as a data subject have certain rights with
regarding the personal data processed by or on behalf of us. We explain below which
these rights are and how you can exercise these rights. In principle, we send to prevent abuse
transcripts and copies of your data only to your email address already known to us. In the event that you
If you wish to receive data at a different email address or, for example, by post, we will ask you to
legitimize. We keep a record of completed requests, in the case of a request to be forgotten
We administer anonymized data. You will receive all transcripts and copies of data in the
machine-readable data format that we use within our systems. You have the right at any time to request
to file a complaint with the Dutch Data Protection Authority if you suspect that we have processed your personal data in a
use wrong way.
Right of inspection
You always have the right to access the data that we (have) process and that relate to your person or
can be traced back to this. You can submit a request to that effect to our contact person for
Privacy matters. You will receive a response to your request within 30 days. If your request is granted,
We will send you a copy of all data with an overview of the processors to the email address known to us.
who have this data, stating the category under which we have this data
stored.
Right of rectification
You always have the right to access the data that we (have) process and that relate to your person or
to be traceable to this, to have it adjusted. You can submit a request to that effect to our contact person
for privacy matters. You will receive a response to your request within 30 days. If your request is granted
We will send you a confirmation that the data has been changed to the email address we have on file for you.
Right to restriction of processing
You always have the right to request that we process or have processed data relating to your person or for that purpose
traceable, to limit. You can submit a request to that effect to our contact person for
Privacy matters. You will receive a response to your request within 30 days. If your request is granted,
We will send you a confirmation to the email address we have on file that the data will not be processed until you lift the restriction.
take longer to process.
Right to portability
You always have the right to access the data that we (have) process and that relate to your person or
traceable to this, to have it carried out by another party. You can submit a request to that effect to
our contact person for privacy matters. You will receive a response to your request within 30 days. If your
If your request is granted, we will send you copies of all data to the email address we have on file.
about you that we have processed or that has been processed on our behalf by other processors or third parties. To all
In such a case we will most likely no longer be able to continue providing services because the security
linking of data files can then no longer be guaranteed.
Right to object and other rights
In certain cases, you have the right to object to the processing of your personal data.
by or on behalf of Crystal Love. If you object, we will immediately stop processing the data.
pending the handling of your objection. If your objection is justified, we will send you transcripts and/or copies
of data that we (have) process available to you and then permanently cease processing. You
also has the right not to be subject to automated individual decision-making or profiling.
subject. We do not process your data in such a way that this right applies. Are you from
If you believe this to be the case, please contact our privacy officer.
Cookies
Third-party cookies
In the event that third party software solutions use cookies, this is stated in this
privacy statement.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, you will always find the most up-to-date information on this page.
recent version. If the new privacy policy has consequences for the way in which we already collect data,
with regard to your processing, we will inform you of this by email.
Contact details
Crystal Love
Spaubeekstraat 95-31
5035JV Tilburg
The Netherlands
T 06-22193624
Contact person for privacy matters
Joanna Bruers - Alting Siberg
