Privacy Statement

Privacy Policy Annex Engineering NL
https://www.annex-engineering.eu/

 

About our privacy policy

Annex Engineering NL cares deeply about your privacy. Therefore, we only process data that is necessary for (improving) our services and handle the information we have collected about you and your use of our services with utmost care. We never provide your data to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided by Annex Engineering NL. The effective date of these terms is 28/05/2024, and with the publication of a new version, the validity of all previous versions will expire. This privacy policy describes what data we collect about you, how we use it, and with whom and under what conditions we may share this data with third parties. We also explain how we store and protect your data from misuse, and what rights you have regarding the personal information you provide to us.

If you have any questions about our privacy policy, you can contact our privacy officer. You will find the contact information at the end of our privacy policy.

 

Data processing

Below you can read how we process your data, where we (or our partners) store it, which security techniques we use, and who has access to the data.

– Webshop software
Our webshop is developed using software from WordPress/Woocommerce, and we have chosen Strato for web hosting. Any personal data you provide for our services will be shared with this party. Strato has access to your data to provide us with technical support, but they will never use your data for other purposes. They are required by our agreement to take appropriate security measures, including SSL encryption and strong password policies.

– Web hosting
We use web hosting and email services from Strato. They process personal data on our behalf and do not use your data for their own purposes. They may collect metadata about the use of their services, which are not personal data.

– Payment processors
For processing payments in our webshop, we use Stripe as our platform. Stripe processes your name, address, residence data, and payment details such as your bank account or credit card number. Stripe has taken appropriate technical and organizational measures to protect your personal data and may use the data to improve their services, sharing anonymized data with third parties. The same data protection guarantees apply to any third parties Stripe engages for its services.

– Shipping and logistics
We use PostNL, DHL, and DPD to deliver your orders. To do this, we share your name, address, and residence data with them. These carriers use this information solely to fulfill the contract. If they use subcontractors, they will share your data with them for the same purpose.

– Invoicing and accounting
We use WordPress for our administration and bookkeeping. We share your name, address, and residence data, as well as details about your order, with them for administrative purposes. WordPress will handle your personal data confidentially and will not use it for other purposes.

 

– Dutch Government
For private customers the “Unieregeling” is applicable. This means we need to store up to 10 years data used to prove to taxes to the dutch or other european government.

 

Purpose of data processing

We use your data exclusively for our services. This means that the processing’s purpose is always directly related to the assignment you give us. We do not use your data for (targeted) marketing purposes. If we use your data to contact you later for purposes other than your request, we will explicitly ask for your permission. We do not share your data with third parties, except to meet accounting and other administrative obligations. These third parties are bound by confidentiality under the agreement between them and us or a legal obligation.

 

Automatically collected data

Data automatically collected by our website is processed to further improve our services. This data (such as your IP address, web browser, and operating system) is not personal data.

 

Cooperation in tax and criminal investigations

Annex Engineering NL may be obliged to share your data due to a legal obligation in the context of fiscal or criminal investigations by the government. In such cases, we will resist the sharing to the extent possible within the law.

 

Retention periods

 We will retain your data for as long as you are a client of ours. This means we will keep your customer profile until you indicate that you no longer wish to use our services. If you make this request, we will also regard it as a request to be forgotten. We are obliged to keep invoices with your (personal) data due to administrative obligations. We will keep this data for as long as the relevant term applies. However, employees will no longer have access to your client profile and documents created in response to your assignment.

 

Your rights

According to Dutch and European legislation, you have certain rights regarding the personal data processed by or on behalf of Annex Engineering NL. Below, we explain these rights and how you can invoke them. We will usually send copies or copies of your data in the machine-readable data format used within our systems to your known email address, in case of misuse prevention. If you wish to receive the data at a different email address or by regular mail, we will ask you to identify yourself. We keep a record of completed requests, in the case of forget requests, we will keep anonymized data. All copies and copies of data you receive in the data format used within our systems. You always have the right to file a complaint with the Dutch Data Protection Authority if you suspect we are using your personal data in the wrong way.

 

Right of access

You always have the right to access the data that we process or have processed and relate to your person or that can be traced back to you. You can make a request to our privacy officer for this purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors holding this data, along with the categories under which we store this data.

 

Right to rectification

You always have the right to have the data we process or have processed and relate to your person or that can be traced back to you, amended. You can make a request to our privacy officer for this purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted.

 

Right to limitation of processing

You always have the right to limit the data we process or have processed that relate to your person or that can be traced back to you. You can make a request to our privacy officer for this purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data will no longer be processed until you lift the limitation.

 

Right to data portability

You always have the right to have the data we process or have processed and that relate to your person or that can be traced back to you, performed by another party. You can make a request to our privacy officer for this purpose. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all data about you that we have processed or processed on your behalf or by other processors or third parties. In all likelihood, we can no longer continue the service in such a case, as secure linking of data files can no longer be guaranteed.

 

Right to object and other rights

In some cases, you have the right to object to the processing of your personal data by or on behalf of Annex Engineering NL. If you object, we will immediately stop the data processing pending the handling of your objection. If your objection is justified, we will send you copies and/or copies of data that we process or have processed, and we will stop the processing permanently. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.

– Cookies
– Cookies from third parties
– If third-party software solutions use cookies, this will be mentioned in this privacy statement.
– Changes to the privacy policy
– We reserve the right to change our privacy policy at any time. On this page, you will always find the most recent version. If the new privacy policy affects how we process data already collected about you, we will notify you by email.

 

Contact details

Mail: support@annex-engineering.eu
Contact person for privacy matters: J Jansen