Rebel & the Gypsea Privacy Statement
This privacy statement was last changed on 07-11-2020.
When processing data, we comply with the requirements set in the privacy legislation. This includes the following things:
we clearly state the purposes for which we process your personal data. These can be found in this privacy statement.
we limit the personal data that we collect to only the data required for legitimate purposes;
we request your consent prior to processing your personal data in instances where your consent is required;
we take appropriate security measures to protect your personal data and these are also required of parties (e.g. logistics partners) who process personal data under assignment from us.
we respect your right to inspect, correct, remove, block, or transfer your personal data at your request. Additionally, you are entitled to withdraw your consent with processing if your consent is the legal grounds on which the processing is based.
Personal data includes all data that can be traced to you as an individual. This includes your name, telephone number, address, email address, IP address, client number, order history, and browsing behaviour.
Use of personal data
During a visit to our website rebelandthegypsea.com, we obtain specific data from you. Instances in which this occurs include when you visit our website, create an account and enter certain information, or when you contact our customer service. We exclusively store and use the personal data that you provide yourself in the context of the service you request or which is clearly intended by being provided to us that it is intended for processing.
In some instances, we receive your data from other parties. An example is when we receive your name and address information from someone who wants to send a gift to you directly. We may also obtain information from other parties, but only if you have provided these parties with consent to share specific data with us.
Data of children
Our services are not targeted to children. Therefore, the use of rebelandthegypsea.com by children under the age of 18 is only permitted with express permission from a parent or guardian.
Access to the account environment
If you opt to create an account for the rebelandthegypsea.com website, you will gain access to an account management environment where you can set, provide, and if necessary, change data. In your personal account, we store the following date: your name, delivery/residential addresses, telephone number, email address, payment information, and your business name and VAT no. if applicable. Your order history and selected delivery options are also stored. The interests that you enter are stored, specifically your wishlist and email preferences.
Processing your order
When you order an item, we require specific information from you in order to deliver your order and keep you informed about it. We also require this information for any returns or repairs.
In order to handle the payment for your order properly, we use payment information. Of course, all payments occur in a secure payment environment.
In order to have communication regarding your order run smoothly and simply, we use your personal data.
Satisfying legal obligations
In order to satisfy our legal obligations, we store the data required to perform the agreement that we concluded with your within the set legal period of seven years.
Marketing (with consent)
In order to provide you with personalised offers, we use your personal/contact data. These data are only used if you have provided your express consent.
For the purposes of fraud prevention, we use your IP address, address information, and payment information if there is justified reason.
If necessary for the proper handling of your payment, we may provide your personal data to third parties as well. More information on this is explained later in this privacy statement.
After receiving your consent, we may inform you of offers, special promotions, and news from Rebel & the Gypsea via email marketing.
Contact and newsletter
Via our webshop, we offer the option to ask questions using a variety of mediums (such as email, telephone, and social media). You choose the data that you provide in this process. The data that you send us will be stored for as long is necessary for to fully answer and address your question.
We provide a newsletter which we use to inform interested parties about our products and/or services. Every newsletter contains a link that you can use to unsubscribe.
Data for prize-winning promotions
For participation in competitions and prize-winning promotions, we ask for data from you, such as your name, residential address, and/or email address. We need this data to conduct the prize-winning promotion and announce the winner(s).
We continuously work on improving our services so that these line up better with what you want. For this reason, it is possible that we use data (client ID, email address, and/or telephone number) to invite you to participate in commitment-free client or market research. In this way, you are helping us optimise our webshop. Participation in this type of research is entirely voluntary. The length of time that the associated information is stored varies by the research conducted. As soon as the research has been completed, we will remove all of the information that can be traced to you.
We do not publish your client information.
Sharing with third parties
We may provide your data to our partners. These partners are involved in the performance of the agreement and the data may not be used under any circumstances for purposes other than those that we have established. The secure processing of your data is preserved by means of a processing agreement between Rebel & the Gypsea and the partner. An example of this kind of partner is our logistics partner. We provide them with your client number, order number, name, and delivery address. After all, they require this information to deliver your package to the address you selected.
In some instances, we have to provide your information to the government. For example, this may occur if certain government institutions require these data to perform their tasks. It is also possible that the police or other law enforcement bodies require specific information in the event of fraud or misuse, or certain supervisory bodies may be given access to your personal data for an investigation.
It is at your discretion to disable cookies via your internet browser. Please bear in mind that it is possible that our website may no longer work as best it can.
We take many security measures to limit the abuse of and unauthorised access to personal data, both in organisational and technical areas. By utilising a strict access control system, we ensure that your personal data is only accessible for employees who require it to do their work.
The personal data described above is stored for as long as necessary to complete your order(s), including the warranty period, unless there is a legal obligation to store than for longer (such as a tax retention obligation).
Inspecting and changing your data
In order to avoid abuse, we ask that you clearly identify yourself when asking questions. If you would like to inspect personal data associated with a cookie, then you must send a copy of the cookie along with your request. You can find it in the settings of your internet browser. If the data are incorrect, you can request that we change or remove them.
Customer service contact information
Rebel & the Gypsea
Rights that you can exercise regarding your data
Right to information
You are entitled to a transparent and comprehensible explanation of how we handle your data and the rights you can exercise in relation to that. The extensive explanation of which data we collect from you and how we handle them can be found in this privacy statement.
Right to inspection
You are entitled to inspect the data that we collect from you at any time. You can request this via firstname.lastname@example.org.
Right to correction
If your personal data are incorrect or out of date or if you want to add information if they are incomplete, you can do this 24/7 via your account on our website.
Right to objection
If you do not agree with the way in which we process your personal data, then you are entitled to object to the processing of your data.
Right to data portability
Within the framework of the agreement(s) that you have concluded with us, you are entitled to receive a structured, common, machine readable report of the data that you have provided to us. This allows you to store the data in a database or in the database of another party. The data in question are your name, address, residential information, and order history. You can request these data via email@example.com.
Right to restriction
You are entitled to request the restriction of the processing of your data. This means that we are permitted to store your data, but not use them. If you feel that this is right for you, you can contact us at firstname.lastname@example.org
Right to be forgotten/request account deletion
You are entitled to request that all data we collected from you be deleted. If you submit a request to delete your account, we will remove the data that can be traced to you, with the exception of data that we must or can store on a legal basis.
Right to submit a complaint
Of course, we can help you if you have issues with the ways in which we handle your data. To do so, please contact us at email@example.com. In accordance with privacy legislation, you are also entitled to bring your complaint to the Dutch Data Protection Authority. You can contact the Privacy Commission about this.
Do you still have questions about your personal data? If so, please contact us at firstname.lastname@example.org. We are eager to help!