Privacy and Cookie Policy — Koning Bamboe

At Koning Bamboe, we believe it is important that you know which personal data we process, why we process it and with whom we may share it. In this Privacy and Cookie Policy, we explain this as clearly and transparently as possible.

This policy applies to the Koning Bamboe website, our online store, orders, customer service and the other services we provide.

1. Who are we?

Koning Bamboe is responsible for the processing of personal data as described in this Privacy Policy.

Koning Bamboe
Chamber of Commerce (KvK): 72734523
Phone: 085-0608853
Email: [email protected]

2. What personal data do we process?

Depending on how you use our online store, we may process the following personal data:

• first and last name;
• billing and delivery address;
• email address;
• telephone number;
• order and purchase information;
• payment and transaction information where necessary to process your payment;
• information you provide when contacting us;
• IP address and technical information about your device and browser;
• information about how you use our website, where this is permitted under applicable privacy and cookie regulations;
• cookie and similar identification information, depending on your cookie preferences.

We do not ask you to provide special categories of personal data, such as medical information, unless this is necessary in a specific situation and there is a valid legal basis for doing so. Please therefore avoid sharing sensitive personal information with us unless it is necessary.

3. How do we obtain your personal data?

Most personal data is provided directly by you. For example, when you place an order, create an account, contact us, subscribe to communications or use our website. Certain information may also be collected automatically when you visit our website, such as technical information and information processed through cookies or similar technologies.

4. Why do we process your personal data?

We only process personal data for clearly defined purposes. Depending on the situation, these purposes may include:

• processing and fulfilling your order;
• processing and verifying payments;
• shipping and tracking orders;
• providing order and delivery information;
• responding to questions and handling complaints;
• maintaining our administration and accounting;
• complying with legal and administrative obligations;
• securing and maintaining our online store;
• analysing and improving our website and services, where there is a valid legal basis to do so;
• sending marketing communications where there is a valid consent or other legal basis;
• preventing and investigating fraud, misuse and other unlawful activities.

5. What is the legal basis for processing your data?

Every processing of personal data must have a valid legal basis. Depending on the purpose, we may process your data on the basis of one or more of the following legal grounds under the GDPR:

• Performance of a contract: for example, to process and deliver an order.
• Legal obligation: for example, to comply with tax, accounting or other legal requirements.
• Legitimate interest: for example, to secure our systems, prevent fraud and improve our services, while balancing these interests against your privacy rights.
• Consent: for example, where prior consent is required for certain cookies or marketing activities.

Where we process personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Orders and payments

When you place an order, we process the information necessary to perform the contract. This may include your name, delivery address, billing information, email address, telephone number and order details.

We use external payment providers, including Mollie, to process payments. Depending on the payment method selected, Mollie or the relevant payment provider may process additional information to authorise, complete, secure and verify the payment. We do not automatically receive or store all full payment details, such as complete card details; this depends on the payment method and how the payment provider processes the transaction.

7. Shipping and delivery

To deliver your order, we share the information necessary for delivery with the carrier used for your order. Depending on the selected shipping method, this may include PostNL, GLS or DPD.

The information provided may include your name, delivery address, email address, telephone number, shipping information and details required to track or deliver the shipment. The carrier uses this information to perform the delivery service, including delivery, communication about the shipment and customer service relating to the delivery.

8. Online store, hosting and IT services

Our online store operates on the Lightspeed eCom (C-Series) platform. Lightspeed processes personal data where necessary to provide and support the online store and related services, such as processing customer and order information, technical support, security and hosting.

Lightspeed also works with various subprocessors and service providers. The parties involved may depend on the services and features enabled in our online store. Lightspeed publishes an up-to-date list of its subprocessors.

9. With whom may we share your data?

We do not sell your personal data. Where necessary to provide our services, personal data may be shared with external parties that support us. Depending on the situation, these may include:

• Lightspeed: for operating and technically supporting our online store;
• Mollie: for processing and securing payments;
• PostNL, GLS and DPD: for processing and delivering orders;
• accounting and administrative service providers: where necessary for our administration and legal obligations;
• IT and security service providers: where necessary for hosting, maintenance, security or technical support;
• government authorities or other authorised parties: where we are legally required to provide information.

External parties only receive access to personal data to the extent necessary for their services or where we are legally required to provide it.

10. Are personal data transferred outside the EEA?

Some of our service providers may process or store personal data outside the European Economic Area (EEA). This may occur, for example, with international IT, hosting, security or payment service providers.

Where personal data is transferred outside the EEA, we ensure that a valid legal basis and, where required, appropriate safeguards are in place. Depending on the circumstances, this may include an adequacy decision by the European Commission or appropriate contractual safeguards, such as the Standard Contractual Clauses (SCCs) adopted by the European Commission.

11. How long do we keep your data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a statutory retention period applies.

• Order and customer information: for as long as necessary for the performance of the contract, customer service, administration and applicable legal obligations.
• Invoice and financial records: for the statutory retention period applicable to our records. Information forming part of our tax administration is generally retained for seven years.
• Customer service information: for as long as necessary to handle your question or complaint and, where relevant, for as long as required for administrative or legal purposes.
• Marketing information: until you unsubscribe or the information is no longer necessary for the relevant marketing purpose, depending on the applicable legal basis.
• Cookie and analytics data: according to the retention periods applicable to the relevant cookie, service or analytics tool.

12. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files that may be stored on your device when you visit our website.

We distinguish between the following categories:

• Necessary cookies: these are required for essential functions of the online store, such as the shopping cart, checkout process, security and remembering certain settings.
• Preference cookies: these may be used to remember certain preferences or settings during your visit.
• Analytics cookies: these may be used to understand how the website is used and to improve its performance and usability, where there is a valid legal basis.
• Marketing and tracking cookies: depending on the services used and your consent, these may be used to recognise visitors, measure marketing campaigns or enable personalised content or advertising.

Non-essential cookies are only placed or read where the required consent has been obtained. You can change your cookie preferences through the available cookie settings on our website. You can also manage or delete cookies through your browser settings.

13. Profiling and automated decision-making

We do not use personal data for automated decision-making that produces legal effects concerning you or otherwise significantly affects you. Any analytics or marketing functionality is not used to make such decisions about you.

14. How do we protect your data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Our online store uses secure connections and security measures provided by the Lightspeed platform. Access to personal data is restricted, where possible, to people and service providers who require the information to perform their duties.

15. Your privacy rights

Under the GDPR, you may, depending on the circumstances, have the following rights:

• the right to access your personal data;
• the right to have inaccurate or incomplete data corrected;
• the right to have your data deleted in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to object to certain processing activities, including direct marketing;
• the right to data portability where the legal requirements are met;
• the right to withdraw previously given consent.

You can submit a privacy request by emailing [email protected]. To ensure that personal data is provided to the correct person, we may ask you to verify your identity in an appropriate manner.

16. Complaints about our processing of personal data

If you have a complaint about how we handle your personal data, please contact us first at [email protected]. We will do our best to resolve your question or complaint.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe that we are processing your personal data in violation of applicable privacy legislation.

17. Data breaches and security incidents

We take measures to prevent security incidents and data breaches as far as reasonably possible. If a data breach nevertheless occurs, we will assess the incident in accordance with applicable laws and take appropriate measures, including notifying the Dutch Data Protection Authority and/or affected individuals where legally required.

18. Children's privacy

Our online store is not specifically aimed at children. We do not knowingly collect personal data from children where there is no valid legal basis for doing so. If you believe that we have nevertheless processed such information, please contact us at [email protected].

19. Links to third-party websites

Our website may contain links to third-party websites or services. These external websites have their own privacy and cookie policies. We are not responsible for how third parties process personal data after you leave our website. We recommend reviewing the privacy policy of these parties when using their services.

20. Changes to this Privacy Policy

We may update this Privacy and Cookie Policy from time to time, for example when our services, systems or applicable laws and regulations change. The most recent version will be published on this page. We recommend checking this page regularly.