• Quality
  • Sustainable
  • Functional

About our privacy policy
GorillaGrip BV cares about your privacy. We therefore only process data that is required for (and to improve) our services and we handle this data with the utmost care. We never offer your data to third parties for the purpose of commercial interest.

This privacy policy applies to the use of this website and the corresponding services that GorillaGrip BV offers. This privacy policy goes into effect on May 24, 2018 and with the publication of this latest version all previous versions will be nullified. This privacy policy describes which kinds of data we accumulate about you and the conditions by which we are obligated or necessitated to share this data with third parties. We also explain how we keep your data save and protected and what your rights are concerning the personal data you provided us with.

In case you have questions about our privacy policy, you can contact our contact person for privacy matters. You will find the contact information at the end of this privacy policy.

About data processing
Below, you find in which ways we process your data, how this data is saved, which security measures are in place and who has access to the data.

Webstore software
Our webstore is developed with software from Onetoshop. Personal data that you share with us for the purpose of our services is being shared with this party. Onetoshop can access your personal data in order to offer (technical) support. They will never use your data for any other purpose. By contract, Onetoshop is obligated to secure your data properly. These security measures encompass SSL-encryption and a strict password policy. Onetoshop uses cookies to collect technical information concerning the use of their software. No personal data will be accumulated or stored. Onetoshop has the right to share accumulated data within its own company for the sole purpose of improving their services.

Webhosting
We are using Onetoshop’s webhosting and email services. Onetoshop handles personal data on our behalf and does not use this data for their own purposes. However, Onetoshop is allowed to accumulate meta-data about the use of its services. These are not personal data. Onetoshop has taken technical and organizational measures to prevent loss and unauthorized use of your personal data. By contract, Onetoshop is obligated to uphold confidentiality.

Processors

Sisow
In order to expedite transactions in our webstore we use the payment platform of Sisow. Sisow processes your name, address and payment data, e.g. your bank account or credit card number. Sisow has taken technical and organizational measures to ensure the protection and safety of your personal data. Sisow has the right to use your data to improve their services, and, within this scope, share your data anonymously with third parties. The aforementioned guarantees also apply to the components of Sisow’s services for which they rely on the services of third parties. Sisow will not retain your data longer than legally permitted.

Shipping and logistics

DPD
By placing an order in our webstore, it is our duty to ensure save delivery of the parcel. We use the services of DPD to expedite our deliveries. For this purpose, it is essential that we share your name and address with DPD. DPD only uses abovementioned data in order to carry out the delivery agreement. In the event that DPD makes use of a subcontractor to handle the delivery of your parcel, aforementioned data will be shared with said subcontractor.

PostNL
By placing an order in our webstore, it is our duty to ensure save delivery of the parcel. We use the services of PostNL to expedite our deliveries. For this purpose, it is essential that we share your name and address with PostNL. PostNL only uses abovementioned data in order to carry out the delivery agreement. In the event that PostNL makes use of a subcontractor to handle the delivery of your parcel, aforementioned data will be shared with said subcontractor.

Purpose of data processing
We only use your data for the benefit of our services. In other words, we only process data that is directly related to your service requests. We do not use your data for (targeted) marketing purposes. If you share information with us and we use this information to contact you at a later date - other than at your request - we will explicitly ask for your permission. Your information will not be shared with third parties, other than to comply with bookkeeping and other administrative obligations. These third parties are bound by confidentiality agreements they have with us or by legal obligation to keep your data protected.

Automatically accumulated data
Any data that is accumulated automatically by our website is processed for the sole purpose of improving our services. This data (e.g. your IP-address, web browser, operating system) are not personal data.

Tax and criminal investigation
In rare cases, GorillaGrip BV may be legally obligated to share your data in connection to tax and/or criminal investigation by the government. When this occurs, we are forced to share your data, but we will oppose the ordinance within the possibilities that the law offers us.

Retention periods
We retain your data as long as you are our customer. This means that we save your client profile until you indicate your wish to stop using our services. We will interpret this request as a request to be forgotten. On the basis of administrative obligations, we are obligated to retain invoices with your (personal) data. We will discard this data the moment the legally determined retention period ends. In the meantime, our employees can no longer access your client profile and documents that were composited per your request.

Your rights


On the basis of Dutch and European legislation (GDPR: General Data Protection Regulation), you have certain rights with regard to your personal data that is processed by us or on our behalf. Below, we will set out what these rights are and how you can invoke these rights.

In order to prevent abuse, we will only send transcripts and copies of your data to the email address that is already registered in our system. In the event that you wish to receive the data at another email address or by regular mail, we will ask you to identify yourself. We keep records of completed requests. In the case you wish to invoke the right to be forgotten, we will administer the data anonymously. You will receive all transcripts and copies of data in the data format compatible with our systems. You have the right to file a complaint with the Dutch Data Protection Agency at any time if you suspect that we are using your personal data in the wrong way.

Right of inspection
You always have the right to inspect the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all data with an overview of the processors who have this data, to the registered email address you provided us, citing the category where we have stored this data.

Right of rectification
You always have the right to adjust the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation that your personal details have been changed to the registered email address you provided us.

Right to restriction of processing
You always have the right to restrict the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation that your data will no longer be processed until you lift the restriction to the registered email address you provided us.

Right of transferability
You always have the right to transfer the data that we process (or is being processed on our behalf), that relate to your person or that can be traced back to you, to another data processing party. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send all transcripts and copies of your data that was processed by us, or on our behalf by other processors or third parties, to the registered email address you provided us. In all likelihood, we will no longer be able to continue our services, because the security of the data files can no longer be guaranteed in such a case.

Right of objection and other rights
In common cases, you have the right to object to the processing of your personal data by or commissioned by GorillaGrip BV. When you object we will immediately halt all processing of your data pending the handling of your request. If it is determined that your objection is grounded, we will permanently halt the processing of your personal data and provide you with all transcripts and/or copies of your data that was processed by us or on our behalf.

Furthermore, you have the right to not be subjected to automated individual decision making or profiling. We do not process your data to the extent that we have this right. If you do believe we are using your data in such a way, please contact our contact person for privacy matters.

Amendments to our privacy policy
We maintain the right to amend our privacy policy at all times. On this page we always provide you with the most up to date version of our privacy policy. If a new privacy policy affects the way in which we process your personal data, we will notify you by email.

Contact details
GorillaGrip BV Nijverheidsweg 20 7921 JJ Zuidwolde