Privacy

In this privacy policy, Wallsupply B.V. (hereinafter: Wallsupply) informs you of the manner in which it handles personal data. This document outlines which (personal) data is collected and processed by Wallsupply in order to (optimally) deliver its services and products.

1. Controller and contact details Wallsupply is the controller of the personal data as described in this privacy policy. Wallsupply is established in Kerkrade (6466 NC) at Wenckebachstraat 2-A and can be reached by email at [email protected].
2. Scope This privacy policy applies to all data that Wallsupply collects and processes in the context of the services it provides, with the exception of persons who are employed by Wallsupply in any capacity, applicants and external advisors. A person whose personal data is processed as referred to in this privacy statement is hereinafter referred to as "data subject".
3. Personal data collected by Wallsupply Wallsupply collects and processes the following (personal) data that is provided by a data subject, directly or indirectly, after consent has been granted:

• Contact details, meaning name and address details, including the email address of a data subject, which are required for the execution of the assignment given to Wallsupply, or which have been entered in contact forms or other web forms, or which have been provided during introductory meetings, events, etc., such as details shown on business cards;
• Other (personal) data, namely the gender of a data subject, the IP address of a tablet, PC or smartphone, the unique identifiers of cookies placed on these devices, the duration of a visit to the website, data illustrating the manner in which, where and with what frequency the website is used, registration date, model of a smartphone, PC or tablet on which the website is visited, the associated operating system, the duration of the visit to the website, direct or indirect personal data obtained from public registers such as the Trade Register of the Chamber of Commerce, and personal data available on public social media platforms or public professional websites;
• Browsing behaviour, in the sense that purchases made by a data subject can be tracked by Wallsupply, as well as data relating to the first visit, previous visit and current visit, the pages viewed and the manner in which the website is navigated.
• Location data of a data subject, in the sense that it can be tracked where a data subject on the website is located (geographically) via the IP address.

Wallsupply may also process special and/or sensitive personal data. It will only do so after explicit consent has been obtained from the data subject for the processing of such special and/or sensitive personal data, whereby it will also always be indicated which specific special and/or sensitive personal data is involved and for what purpose Wallsupply processes this data in a specific case.

Wallsupply does not intend to collect data from persons under the age of 16, unless these persons have obtained permission from their legal representative. Wallsupply cannot verify whether a visitor is over 16. Wallsupply therefore advises parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If a person suspects that Wallsupply has collected personal data from a person under the age of 16 without the consent of a legal representative, contact can be made via [email protected].

The Wallsupply website contains hyperlinks to websites of other parties and social media buttons. Wallsupply is not responsible for the content of those websites or the services of the relevant social media platforms. Nor is Wallsupply responsible for the privacy policy and the use of cookies on those websites and social media platforms.

4. Purposes of the use of the data mentioned in paragraph "3" Wallsupply uses personal data for various purposes, namely:

• The execution of an agreement in which the data subject has commissioned Wallsupply to provide services by (one of) our employees. If the data subject is a customer of Wallsupply, then Wallsupply has received data from the data subject, such as the name, company name, telephone number, address, Chamber of Commerce number, email address and bank account number. Wallsupply uses the data subject's data exclusively for its own administration and for the execution of the assignment given.
• Compliance with legal obligations.
• Maintaining contact with the data subject. Contact details are kept in the customer system and may be used for, among other things, sending newsletters, updates, and forwarding information that has been requested.
• Improving and securing our website.
• Producing user statistics. The user statistics of the website enable Wallsupply to gain an understanding of, among other things, the number of visitors, the duration of the visit, which parts of the website are viewed and click behaviour. These are generic reports, without information about individual persons. Wallsupply uses the information obtained to improve the website.

5. Duration of data storage The data as shown in paragraph 3 of this privacy statement will not be retained for longer than strictly necessary to achieve the purposes for which the personal data is collected. Wallsupply applies the following retention periods:

• For personal data retained in the context of the execution of the assignment given to Wallsupply: 7 years.
• For personal data retained in the context of maintaining contact with data subjects after completion of the assignment: 7 years.
• For personal data retained for the purpose of producing user statistics and improving and securing our website: 7 years.

Personal data that we administer on the basis of Article 52 of the General Tax Act (Algemene wet inzake rijksbelastingen) must be retained by us for seven years.

6. Legal basis for processing As controller, Wallsupply may only process personal data if this can be based on one of the exhaustively listed legal bases in the General Data Protection Regulation (GDPR). The two legal bases on which Wallsupply relies are:
7. Consent If Wallsupply has asked a data subject for consent to process their personal data and the data subject has granted this consent, they also always have the right to withdraw this consent.
8. Legitimate interest Wallsupply may process personal data if it has a legitimate interest in doing so and does not thereby make a disproportionate infringement on the privacy of a data subject. The legitimate interest of Wallsupply in processing and analysing the personal data of a data subject follows from what is included in paragraph 4 of this privacy policy.
9. Agreement Wallsupply processes personal data if and insofar as this is necessary for the performance of an agreement concluded with the data subject.
10. Security Wallsupply exercises the necessary care when collecting and processing personal data. Wallsupply B.V. will endeavour to implement appropriate technical and organisational security measures that are necessary to guarantee the availability, integrity and confidentiality of personal data and to protect it against loss or any form of unlawful processing. These measures will, taking into account the state of the art and the costs of implementation, guarantee an appropriate level of security, given the risks that the processing and the nature of the personal data to be protected entail.
11. Processors and third parties Wallsupply may engage service providers (processors) for the processing of a data subject's personal data, who process personal data exclusively on behalf of Wallsupply. Wallsupply concludes a data processing agreement with these processors that meets the requirements set by the General Data Protection Regulation (GDPR).

Wallsupply, for example, commissions service providers that offer SaaS solutions (software as a service) or provide hosting services. It also commissions ICT service providers that support it in keeping the Webshop secure and stable. These are examples of parties that qualify as processors within the meaning of the General Data Protection Regulation (GDPR).

Furthermore, it may be necessary to share your personal data with third parties. This may in certain cases be necessary for the execution of the assignment given to Wallsupply. Personal data may also be provided to third parties in the event of a reorganisation or merger of our company or the sale of (part of) our company.

9. Transfer outside the European Economic Area (EEA) It may be necessary to transfer your personal data to parties established outside the European Economic Area (EEA). This may, depending on the circumstances of the case, be necessary for the execution of the assignment given. For sending online newsletters and mailings and processing data entered in the web forms on our website, we may make use of service providers (processors) established outside the European Economic Area (EEA).

Under the General Data Protection Regulation (GDPR), personal data may only be transferred to parties outside the EEA if an adequate level of protection of the personal data is guaranteed or if a specific derogation applies. Wallsupply ensures that the necessary additional protection is guaranteed.

Wallsupply shares personal data, among others, with parties established in the United Kingdom. More specifically, Wallsupply uses the online platform Robert Dyas for sales in the United Kingdom. Transfer of your personal data to these parties is permitted without additional legal and technical measures. The European Commission has established an adequacy decision for the United Kingdom, meaning that personal data enjoys a comparable level of protection there as within the EEA. Organisations in the United Kingdom are equally free to share personal data with organisations in the EEA. Where applicable, we also process personal data in accordance with the UK GDPR.

We may transfer personal data to a party outside the EEA if this is necessary for the performance of the service agreement.

10. If a data subject has questions about the processing and analysis of their personal data A data subject may exercise certain statutory rights with regard to their personal data. For example, a data subject has the right of access, rectification and erasure of personal data at all times. A data subject may (after consent has been granted) object to the use of their data or request that this use be restricted. A data subject may contact Wallsupply with these questions.

At any time, a data subject may request Wallsupply to provide additional information about the collection of personal data and to have it reviewed or deleted by sending an email to [email protected].

11. Complaints If a data subject has complaints about the manner in which their personal data is handled, contact can be made with Wallsupply by sending an email to [email protected]. Wallsupply is happy to assist you in finding a solution. If that does not prove possible, a data subject may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
12. Changes Developments move quickly and as a result, the personal data we request from a data subject and the manner in which we use their personal data may sometimes change. Regulations may also change. In that case, Wallsupply will update this privacy statement. Wallsupply therefore invites data subjects to check this privacy statement regularly in order to stay informed of the latest developments. In the event of significant changes, Wallsupply will also draw data subjects' attention to this via its website.