GorillaGrip BV cares about your privacy. We therefore only process data that is required for (and to improve) our services and we handle this data with the utmost care. We never offer your data to third parties for the purpose of commercial interest.
About data processing
Below, you find in which ways we process your data, how this data is saved, which security measures are in place and who has access to the data.
We are using Onetoshop’s webhosting and email services. Onetoshop handles personal data on our behalf and does not use this data for their own purposes. However, Onetoshop is allowed to accumulate meta-data about the use of its services. These are not personal data. Onetoshop has taken technical and organizational measures to prevent loss and unauthorized use of your personal data. By contract, Onetoshop is obligated to uphold confidentiality.
We use the Mollie platform to process (part of) the payments in our webshop. Mollie processes your name, address and residence details and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve the service and to share (anonymized) data with third parties. All the above-mentioned safeguards with regard to the protection of your personal data also apply to the parts of Mollie's services for which they engage third parties. Mollie does not store your data longer than permitted by the legal terms.
In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.
Shipping and logistics
By placing an order in our webstore, it is our duty to ensure save delivery of the parcel. We use the services of DPD to expedite our deliveries. For this purpose, it is essential that we share your name and address with DPD. DPD only uses abovementioned data in order to carry out the delivery agreement. In the event that DPD makes use of a subcontractor to handle the delivery of your parcel, aforementioned data will be shared with said subcontractor.
By placing an order in our webstore, it is our duty to ensure save delivery of the parcel. We use the services of PostNL to expedite our deliveries. For this purpose, it is essential that we share your name and address with PostNL. PostNL only uses abovementioned data in order to carry out the delivery agreement. In the event that PostNL makes use of a subcontractor to handle the delivery of your parcel, aforementioned data will be shared with said subcontractor.
Purpose of data processing
We only use your data for the benefit of our services. In other words, we only process data that is directly related to your service requests. We do not use your data for (targeted) marketing purposes. If you share information with us and we use this information to contact you at a later date - other than at your request - we will explicitly ask for your permission. Your information will not be shared with third parties, other than to comply with bookkeeping and other administrative obligations. These third parties are bound by confidentiality agreements they have with us or by legal obligation to keep your data protected.
Automatically accumulated data
Any data that is accumulated automatically by our website is processed for the sole purpose of improving our services. This data (e.g. your IP-address, web browser, operating system) are not personal data.
Tax and criminal investigation
In rare cases, GorillaGrip BV may be legally obligated to share your data in connection to tax and/or criminal investigation by the government. When this occurs, we are forced to share your data, but we will oppose the ordinance within the possibilities that the law offers us.
We retain your data as long as you are our customer. This means that we save your client profile until you indicate your wish to stop using our services. We will interpret this request as a request to be forgotten. On the basis of administrative obligations, we are obligated to retain invoices with your (personal) data. We will discard this data the moment the legally determined retention period ends. In the meantime, our employees can no longer access your client profile and documents that were composited per your request.
On the basis of Dutch and European legislation (GDPR: General Data Protection Regulation), you have certain rights with regard to your personal data that is processed by us or on our behalf. Below, we will set out what these rights are and how you can invoke these rights.
In order to prevent abuse, we will only send transcripts and copies of your data to the email address that is already registered in our system. In the event that you wish to receive the data at another email address or by regular mail, we will ask you to identify yourself. We keep records of completed requests. In the case you wish to invoke the right to be forgotten, we will administer the data anonymously. You will receive all transcripts and copies of data in the data format compatible with our systems. You have the right to file a complaint with the Dutch Data Protection Agency at any time if you suspect that we are using your personal data in the wrong way.
Right of inspection
You always have the right to inspect the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all data with an overview of the processors who have this data, to the registered email address you provided us, citing the category where we have stored this data.
Right of rectification
You always have the right to adjust the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation that your personal details have been changed to the registered email address you provided us.
Right to restriction of processing
You always have the right to restrict the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation that your data will no longer be processed until you lift the restriction to the registered email address you provided us.
Right of transferability
You always have the right to transfer the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you, to another data processing party. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send all transcripts and copies of your data that was processed by us, or on our behalf by other processors or third parties, to the registered email address you provided us. In all likelihood, we will no longer be able to continue our services, because the security of the data files can no longer be guaranteed in such a case.
Right of objection and other rights
In common cases, you have the right to object to the processing of your personal data by or commissioned by GorillaGrip BV. When you object we will immediately halt all processing of your data pending the handling of your request. If it is determined that your objection is grounded, we will permanently halt the processing of your personal data and provide you with all transcripts and/or copies of your data that was processed by us or on our behalf.
Furthermore, you have the right to not be subjected to automated individual decision making or profiling. We do not process your data to the extent that we have this right. If you do believe we are using your data in such a way, please contact our contact person for privacy matters.
GorillaGrip BV Nijverheidsweg 20 7921 JJ Zuidwolde