Privacy Policy
About Our Privacy Policy
Rocky Label cares about your privacy. We only process data that is necessary for (improving) our services and handle the information we collect about you and your use of our services with care. We never share your data for commercial purposes with third parties.
This privacy policy applies to the use of the website and the services provided by Rocky Label. The effective date of these terms is 11/10/2020. With the publication of a new version, the validity of all previous versions expires. This privacy policy describes what data we collect about you, how this data is used, and with whom and under what conditions this data may be shared with third parties. It also explains how we store your data, how we protect it from misuse, and what rights you have regarding the personal data you provide to us.
If you have questions about our privacy policy, you can contact our privacy officer. The contact details are at the end of our privacy policy.
Data Processing
Below, you can read about how we process your data, where it is stored, what security techniques we use, and who has access to this data.
Webstore Software
Shopify
Our webstore is developed using Shopify software. The personal data you provide to us for the purposes of our services is shared with this party. Shopify has access to your data to provide us with (technical) support, but they will never use your data for any other purpose. Shopify is required, based on the agreement we have with them, to take appropriate security measures. These measures include the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information related to your use of the software. No personal data is collected or stored. Shopify reserves the right to share collected data within its own company to improve its services. Shopify complies with applicable legal retention periods for (personal) data. The EU/US Privacy Shield applies, and your data may be processed in the United States.
Web Hosting
Shopify
We use Shopify for web hosting and email services. Shopify processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services, which is not personal data. Shopify has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Shopify is obligated to confidentiality under the agreement.
Email Services
Gmail
We use Gmail for our regular business email communication. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. Gmail does not have access to our inbox, and we handle all email communication confidentially.
Payment Processors
Mollie
We use Mollie's platform for processing payments in our webstore. Mollie processes your name, address, and payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to improve its services and, in this context, share (anonymized) data with third parties. All the aforementioned guarantees regarding the protection of your personal data also apply to the parts of Mollie's services where it engages third parties. Mollie will not store your data longer than is legally allowed.
Reviews
MijnWebHost
We collect reviews via Shopify’s platform. If you leave a review through Shopify, you are required to provide your name, city, and email address. Shopify shares this data with us so we can link the review to your order. Shopify also publishes your name and city on its website. In some cases, Shopify may contact you to request clarification of your review. If we invite you to leave a review, we will share your name and email address with Shopify. They use this data solely for the purpose of inviting you to leave a review. Shopify has taken appropriate technical and organizational measures to protect your personal data. Shopify reserves the right to engage third parties to deliver the service, and we have given permission for this. All the above-mentioned guarantees regarding the protection of your personal data also apply to the parts of the service where Shopify engages third parties.
Shipping and Logistics
DHL
When you place an order with us, we are responsible for delivering your package. We use DHL for deliveries. It is necessary to share your name, address, and city with DHL. DHL uses this data solely for the purpose of fulfilling the agreement. If DHL engages subcontractors, it will also share your data with these parties.
Billing and Accounting
Rocky Label
We use Rocky Label’s services for bookkeeping and administration. We share your name, address, city, and order details with Rocky Label. This data is used to manage sales invoices. Your personal data is securely transmitted and stored. Rocky Label is obligated to confidentiality and will handle your data confidentially. Rocky Label will not use your data for purposes other than those described above.
External Sales Channels
Purpose of Data Processing
We use your data exclusively for the purpose of providing our services. This means that the purpose of data processing is always directly related to the task you provide. We do not use your data for targeted marketing. If you share data with us and we use it to contact you at a later time for reasons other than your request, we will explicitly ask for your consent. Your data will not be shared with third parties, except to fulfill accounting and other administrative obligations. These third parties are all obligated to confidentiality under the agreement with us or a legal obligation.
Automatically Collected Data
Data that is automatically collected by our website is processed to improve our services. This data (such as your IP address, web browser, and operating system) is not personal data.
Cooperation in Fiscal and Criminal Investigations
In some cases, Rocky Label may be required by law to share your data for fiscal or criminal investigations by the government. In such cases, we are obligated to share your data, but we will resist this to the extent possible within the boundaries of the law.
Retention Periods
We retain your data as long as you remain a client. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will treat it as a request to forget. Due to applicable administrative obligations, we are required to retain invoices containing your (personal) data, and we will keep these data for as long as the applicable retention period allows. However, employees no longer have access to your customer profile and documents created in connection with your request.
Your Rights
Under applicable Dutch and European law, you have certain rights regarding the personal data processed by or on behalf of us. Below, we explain these rights and how you can exercise them. In principle, we only send copies and excerpts of your data to the email address we already have on file for you to prevent misuse. If you wish to receive the data at a different email address or by post, we will ask you to verify your identity. We maintain a record of processed requests, and in the case of a request to forget, we will store anonymized data. All copies and excerpts of data are provided in the machine-readable format used in our systems. You have the right to file a complaint with the Dutch Data Protection Authority if you believe that we are using your personal data incorrectly.
Right of Access
You always have the right to view the data we (or on our behalf) process that relates to you or can be traced back to you. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you, to the email address we have on file, a copy of all the data we have stored about you, along with an overview of the processors who have access to these data, specifying the category under which we have stored them.
Right to Rectification
You always have the right to have the data we (or on our behalf) process that relates to you or can be traced back to you corrected. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data has been corrected.
Right to Restriction of Processing
You always have the right to restrict the processing of data we (or on our behalf) process that relates to you or can be traced back to you. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data will no longer be processed until the restriction is lifted.
Right to Data Portability
You always have the right to have the data we (or on our behalf) process that relates to you or can be traced back to you transmitted to another party. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or excerpts of all the data we have processed or have processed on our behalf, in a machine-readable format. It is likely that we will no longer be able to continue providing our services if this is the case, as the secure connection of data files will no longer be guaranteed.
Right to Object and Other Rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of Rocky Label. If you object, we will immediately stop processing your data while awaiting the resolution of your objection. If your objection is upheld, we will provide you with copies and/or excerpts of your data and permanently stop processing it. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe this is the case, please contact our privacy officer.
Cookies
Cookies from Third Parties
If third-party software solutions use cookies, this will be stated in this privacy policy.
Changes to the Privacy Policy
We reserve the right to modify our privacy policy at any time. However, you can always find the most recent version on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you via email.
Contact Details for Rocky Label
Email Address: info@rockylabel.com
Privacy Officer: Raquel Boerboom