Privacy Policy

What kind of data do we process from our visitors:

We only process privacy data that we need in order to fulfill our primary function as a web store. In addition, we want to offer our customers a pleasant, interactive experience on our site, and we also use third party services for this. Social media, for example, is one such service. We ask each user of our site in advance whether they want to use our services or not. What our customers subsequently do on and with these services is their own responsibility, we have no insight or influence on this. It is important to emphasise that we do not store any sensitive information related to ethnicity, health, political beliefs or sexual orientation.

Why do we process data from our visitors:

We only process data to be able to complete a successful webshop transaction. We do not want to run the unnecessary risk of losing sensitive information. For this reason, we will try to retain the data of our customers as sparsely as possible. We only store the essentials. This includes name and address details, order and payment details and login details. In the event that a visitor takes the initiative to share additional information with us, such as posting a review, asking questions on our forums or communicating with us via one of the communication methods provided, we also store this information. Since we sell our products online with web store software, we also store (application) log data of our visitors. The latter only serves to solve any problems, and this logging is not used to perform (marketing) analysis.

How long do we keep the data of our visitors:

At the moment we only store data that is relevant for future use. Consider, for example, possible warranty claims (order data), or questions that may also be relevant to other visitors to our site (forum). In addition, transactional data is stored in our systems. Think for example of web server logging, payment traffic and communication data such as e-mails. We will at all times handle this data with care and adequately protect it against misuse and loss. If desired, any user can request at any time to view the stored data and, if desired, have it deleted. Our aim is to delete all stored data of our customers after the legally liable periods for the tax authorities have expired. At the moment this is 7 years.

Who processes this data that we collect:

In the processing register at the bottom of this page, we have listed all customer data that we process, and which we may exchange with third parties. Our approach is that the interests of our customer comes first, and not our company's. We therefore do not value the use of customer data in any way other than to fulfill our main purpose, which is to sell products through our web store and to help visitors obtain more information about our products.

Provide insight into stored data:

As mentioned earlier on this page, we want to offer our customers the opportunity to gain full insight into their stored data. This is a manual process and will therefore take some time. Legally speaking, there is a response period of 4 weeks for this, we try to facilitate this as quickly as possible. We will ask for legitimate and valid identification for such a request.

Transfer of stored data:

Since we do not profile our users, there is also no 'file' to transfer. A data transfer request is therefore not relevant to us and cannot be executed. On request, the stored data can be provided, as described in the point above.

Information about abuse and infringement:

From a legal point of view, notification is required to the EU Data Protection Supervisor in the event of data loss due to an intrusion into our systems. In such cases, our customers are also informed of such an event when possible using the contact details provided.

Right to be 'forgotten':

At the request of our users, we can strip our systems of stored data of relevant users. Registered customers can use the specially designed functionality in their account page. However, we will need the necessary legal term of a maximum of 4 + 6 weeks for this. An applicant will receive a message from us within 4 weeks, after which we will have 6 weeks to identify and delete this data. We will ask for legitimate and valid identification for such a request. Please note: If we have deleted the data on request in this context and a claim is made on a warranty scheme or the right of withdrawal, we will then require the original invoice.

Right to 'modify':

At the request of our users, we can provide access to the stored data of the relevant user, and we offer the possibility to adjust it, whether or not with the help of our web shop software. We will ask for legitimate and valid identification for such a request.

Profiling the visitors of NSD-Spinner.shop:

We do not conduct profiling on our customer base, and as such we do not maintain a specific profile of our individual users.

Marketing:

The only form of marketing we conduct is to advertise on larger ad platforms using generic usage profiles. Think for example of 'people interested in golf' or 'men between the ages of 30 and 40 years old'. These are always anonymized user groups. We do not perform so-called dynamic remarketing: our visitors will therefore not receive our advertisements on random websites again and again because they have visited our site once.

Extra measures for sensitive information:

Since we do not process sensitive information from our users, no special arrangement has been set up for this.

Data storage within Europe:

All personal privacy-related data is stored within the borders of the European Union.

Integration of the Trusted Shops Trustbadge:

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops Trustmark as well as to offer Trusted Shops products to buyers after an order.

This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Article 6 (1) f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, _Germany. The Trustbadge is made available by a CDN provider (Content-Delivery-Network) as part of order processing. The Trusted Shops GmbH uses also service provider from the USA. An adequate level of data protection is guaranteed. Further information to the data security of the Trusted Shops GmbH can be found here: https://www.trustedshops.co.uk/imprint/.

When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security problems. The log files are automatically deleted 90 days after creation at the latest.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose personal data is automatically collected from the order data. Whether or not you are already registered as a Trusted Shops customer is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted to this hash value, which cannot be decrypted by Trusted Shops before it is transmitted. After checking for a match, the parameter is deleted automatically.

This is necessary for the fulfillment of our and Trusted Shops' legitimate prevailing interests in the provision of the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6 para. 1 s. 1 lit. f GDPR. Further details, including your right to object, can be found in the Trusted Shops Privacy Policy linked above and within the Trustbadge.

Data protection officer:

As far as we know, a person-specific assignment to this role is not necessary for smaller companies that do not process sensitive data from users. Users of our site can use the contact methods listed on the site.

Processing register:

A summary of the data we collect while using our site, and that we (and our partners) store from our customers:

Data processing agreements third parties

The processor agreements concluded by us have been concluded for the following third parties:

• Microsoft Office 365
• Amazon Web Services
• Google / YouTube
• MyParcel
• Pay.nl
• TrustedShops.com