Privacy Policy Luto Supplements

https://luto-supplements.nl

About our privacy policy

Luto Supplements cares a great deal about your privacy. We therefore only process data that we need for (improving) our services and we handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for purely commercial purposes without your explicit consent.

This privacy policy applies to the use of the website and the services offered through it by Luto Supplements. The effective date for the validity of these terms is 30/12/2022. With the publication of a new version, all previous versions cease to be valid. This privacy policy describes which data about you is collected by us, what this data is used for, and with whom and under which conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and which rights you have with regard to the personal data you have provided to us.

If you have any questions about our privacy policy, you can contact our contact person for privacy matters. You will find the contact details at the end of our privacy policy.

About the data processing

Below you can read how we process your data, where we store it (or have it stored), which security techniques we use and who has access to the data.

Webshop software (Shopify)

Our webshop has been developed with software from Shopify. Personal data that you make available to us for the purpose of our services is shared with this party. Shopify has access to your data in order to provide us with (technical) support; they will never use your data for any other purpose. On the basis of the agreement we have concluded with them, Shopify is obliged to take appropriate security measures. These security measures consist of the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data.

Shopify uses cookies to collect technical information regarding your use of the software. In addition, if you give your consent, cookies and marketing technologies are used. Your data may be processed in the United States on the basis of the applicable European privacy and data transfer frameworks (such as the Standard Contractual Clauses and the EU-U.S. Data Privacy Framework).

Email traffic (Office365)

For our regular business email traffic we use the services of Office365. This party has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as far as possible. Office365 has no access to our mailbox and we treat all our email traffic confidentially.

All the safeguards mentioned above with regard to the protection of your personal data also apply to those parts of Shopify Payments' services for which they engage third parties. Shopify Payments does not retain your data longer than is permitted under the statutory retention periods.

Reviews (WebwinkelKeur)

We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this data with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In the event that we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data.

Shipping and logistics (PostNL)

If you place an order with us, it is our task to have your parcel delivered to you. We use the services of PostNL to carry out the deliveries. For this purpose it is necessary that we share your name, address and place of residence with PostNL. PostNL only uses this data for the purpose of performing the agreement. In the event that PostNL engages subcontractors, PostNL also makes your data available to these parties.

Purpose of the data processing
General purpose of the processing

We primarily use your data for the purpose of our services. This means that the purpose of the processing is always directly related to the order or assignment you place.

In addition, if you have explicitly given your consent via our cookie banner, we use your personal data, cookies and mobile advertising IDs for marketing purposes and ad personalisation. If you do not give consent, your data will not be used for targeted marketing or personalised advertising.

Your data is not shared with third parties, other than to comply with accounting, logistical and other administrative or legal obligations. These third parties are all bound to confidentiality on the basis of the agreement between them and us, an oath or a legal obligation.

Automatically collected data

Data that is automatically collected by our website is processed for the purpose of further improving our services. This data (for example your IP address, web browser and operating system) helps us to optimise the technical operation of the website.

Cooperation with tax and criminal investigations

In certain cases, Luto Supplements may be obliged on the basis of a legal obligation to share your data in connection with a tax or criminal investigation by the authorities. In such a case we are forced to share your data, but we will oppose this within the possibilities offered to us by law.

Retention periods

We retain your data for as long as you are our client. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also regard this as a request to be forgotten. This also means that we will not retain your data for longer than two years from the last contact moment or transaction, unless there is a legal justification for doing so. On the basis of applicable administrative obligations we are required to retain invoices containing your (personal) data; we will therefore retain this data for as long as the applicable period runs.

Cookies and Advertising Tracking
Google Analytics & Google Ads (Ad personalisation)

Cookies and mobile advertising IDs from the American company Google are placed via our website, as part of the "Analytics" and advertising services. We use these services to obtain reports on how visitors use the website and to run targeted marketing campaigns.

When you give your consent for this via our consent mechanism (the cookie banner), your personal data is processed for the personalisation of advertisements. This means that cookies and mobile advertising IDs are used to display both personalised and non-personalised advertisements via Google's network.

As a Google partner, we inform you that Google may use this data in accordance with its own policies. For a full overview of how Google uses your personal data once you give consent on our site, we refer you to Google's official website: Google's site on business data responsibility (Privacy & Terms).

You can adjust or withdraw your consent for the placement of these cookies and the tracking of advertising IDs at any time via the cookie settings on our website.

Third-party cookies

In the event that other third-party software solutions use cookies, this is specifically stated in the functional cookie settings of the website.

Your rights

Under the applicable Dutch and European legislation (GDPR), you as a data subject have certain rights with regard to the personal data that is processed by or on behalf of us.

Right of access: You always have the right to inspect the data that we process and that relates to you.

Right to rectification: You always have the right to have the data that we process and that relates to you amended or corrected.

Right to restriction of processing: You have the right to restrict the processing of your data temporarily or permanently.

Right to data portability: You have the right to have the data that we process carried out by another party.

Right to object: You have the right to object to the processing of your personal data by or on behalf of Luto Supplements. If you object, we will immediately cease the data processing pending the handling of your objection.

You can submit a request relating to these rights to our contact person for privacy matters. You will receive a response within 30 days. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are processing your personal data incorrectly.

Changes to the privacy policy

We reserve the right to amend our privacy policy at all times. However, you will always find the most recent version on this page. If the new privacy policy affects the way in which we process data already collected about you, we will inform you of this by email.

Contact details Luto Supplements

Paxtonstraat 17B, 8013RP Zwolle
info@luto-supplements.nl
Contact person for privacy matters: Tobian van der Aa