Privacy Policy and cookie protection

Privacy and cookie statement
Lumenxl.com, a website of LumenXL B.V., cares about your privacy. We therefore only process data that we need for improvement of our services and treat the information we have collected about you and your use of our services with care. We will never make your data available to third parties for commercial purposes. This privacy policy applies to the use of the website and the services of LumenXL B.V. The effective date for the validity of these conditions is 10/01/2020, by publishing a new version the validity of all previous versions expires. This privacy policy describes which information about you is collected by us, what this information is used for and with whom and under what conditions this information may be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse and what rights you have with respect to the personal data you have provided to us.

If you have any questions about our privacy policy you can contact our contact person for privacy matters. You can find the contact details at the end of our privacy policy.

Below you can read which data we process and how we process your data, where we store it (or have it stored), what security techniques we use and to whom the data is accessible.

What data do we process?
When you use our website, certain information, such as personal data, is collected by us through various channels. When you place an order with us, we ask you for some personal data to complete your order. We process the following data:
 
name;
gender;
e-mail address;
Telephone number;
address;
password;
company name and VAT number;
payment details.

The above data is necessary to create an account and process your order.

In addition, we process:
Any personal data that you send us in an email, contact form or chat message;
Possible personal data that you mention in a review of our webshop.

Recipients of data

Belco
We use the services of Belco for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent abuse, loss and corruption of your and our data as much as possible. Belco has no access to our mailbox and we treat all our email traffic as confidential.
 
DHL
If you place an order with us it is our job to deliver your package to you. We use the services of DHL for carrying out the deliveries. It is therefore necessary for us to share your name, address and place of residence with DHL. DHL will only use this data for the execution of the contract. In case DHL uses subcontractors, DHL will also share your data with these parties.
 
Exact
For our administration and bookkeeping we use the services of Exact.
We share your name, address and details regarding your order. These details are used for the administration of sales invoices. Your personal data is transmitted and stored securely. Exact is committed to maintaining the confidentiality of your personal data. Exact will not use your personal data for any purpose other than those described above.
 
Google
Through our website, cookies are placed by the U.S. company Google, as part of the "Analytics" service. We use this service to track and get reports about how visitors use the website. This processor may be obliged under applicable laws and regulations to provide access to these data. We collect information about your surfing behavior and share this data with Google. Google can interpret this information in conjunction with other data sets and thus track your movements on the Internet. Google will use this information for the purpose of serving you targeted ads (Adwords) and other Google services and products. Your personal information is used for the personalization of ads and cookies can be used for personalized and non-personalized ads. Click here (https://policies.google.com/technologies/partner-sites) for more information about Google's use of data, its privacy policy and terms of service. More information about personalized ads can be found in Google's Personalized Ads ad policy (https://support.google.com/adspolicy/answer/143465) . We are allowed by law to store cookies on your device when they are strictly necessary for the use of the website. For other cookies we need your permission. You can change or withdraw your consent at any time. You can make a request to that effect to our contact person for privacy matters. You can find this information at the bottom of this page. 

 

LightSpeed
Our web store is developed with software from Lightspeed. Personal data that you provide to us for our services are shared with this party. Lightspeed has access to your data to provide us with (technical) support. They will never use your data for another purpose. Based on the agreement we have with them, Lightspeed is required to take appropriate security measures. These security measures consist of the use of SSL encryption and a strong password policy. Lightspeed uses cookies to collect technical information regarding your use of the software. No personal data are collected and/or stored. Lightspeed reserves the right to share collected data within its own group in order to further improve its services.

We send our newsletters and transactional emails using our web store software 'Lightspeed'. All confirmation emails you receive from our website and web forms are sent through Lightspeed's servers. Lightspeed will never use your name and email address for its own purposes. At the bottom of every email automatically sent from our website, you'll see the 'unsubscribe' link. If you click this link, you will no longer receive emails from our website. This can seriously reduce the functionality of our website! Your personal data is securely sent, stored and accessed by Lightspeed. Lightspeed uses cookies and other Internet technologies that provide insight into whether emails are opened and read. Lightspeed also processes information about you as a recipient and the subject line of emails to improve the quality of the service. These data are stored for 30 days. Lightspeed reserves the right to use your data to further improve its services and, as part of this, to share information with third parties.

Mollie
For handling (part of) the payments in our store we use the platform of Mollie. Mollie processes your name, address and city details and your payment information such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and in this context, to share (anonymized) data with third parties. All of the above guarantees regarding the protection of your personal data also apply to those parts of Mollie's services for which it engages third parties. Mollie will not retain your data any longer than is legally permitted.
 
Google reviews
We collect reviews via Google. If you leave a review through Google you are required to provide your name and email address. Google shares this information with us, so we can link the review to your order. Google also publishes your name on their website. In some cases Google may contact you to explain your review. Google has taken appropriate technical and organizational measures to protect your personal information. Google reserves the right to use third parties for the provision of services. For this we have given Google permission. All the above guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties. 

Purpose of data processing

General purpose of processing
We use your data exclusively for the purpose of providing our services. This means that the purpose of the processing is always directly related to the task you provide. If you share your data with us and we use this data - other than at your request - to contact you at a later date, we will ask you for your explicit permission.
 
Automatically Collected Information
Data that is automatically collected by our website is processed with the aim of further improving our services. These data (e.g. your IP address, web browser and operating system) are not personal data.
 
Cooperation with tax and criminal investigations
In certain cases LumenXL B.V. can be forced by a legal obligation to share your data in connection with fiscal or criminal investigations by the authorities. In such a case we are forced to share your data, but we will oppose this within the possibilities that the law offers us.
 
Retention periods
We will retain your data for as long as you are a client of ours. This means that we will keep your client profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also consider this to be a request for forgetting. Pursuant to applicable administrative obligations, we must store invoices containing your (personal) data. We will therefore keep this information for as long as the applicable term lasts. However, employees no longer have access to your client profile and documents that we have produced as a result of your instructions.
 
Your rights
Based on the applicable Dutch and European legislation, you as the person concerned have certain rights with regard to the personal data that is processed by or on behalf of us. Below we explain what these rights are and how you can exercise them. In order to prevent misuse, we will only send copies of your data to your email address, which is already known to us. In the event that you wish to receive the data at another email address or, for example, by post, we will ask you to identify yourself. We keep a record of completed requests. In the case of a forgetful request, we administer anonymous data. You will receive all copies and data in the machine-readable format that we use within our systems. At all times you have the right to submit a complaint to the Personal Data Authority if you suspect that we are using your personal data in an incorrect manner.
 
Right of inspection
You always have the right to inspect the data that we process, or have processed, and which relate to you personally or can be traced back to you. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the e-mail address provided with a list of the processors holding this data, stating the category under which we have stored it.
 
Right to rectification
You always have the right to have the data that we process, or have processed, and which relate to you as a person or can be traced back to you, corrected. You can make a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the e-mail address provided by us that the data has been modified.

 

Right to restriction of processing
You always have the right to limit the data we process that relate to you as a person or can be traced back to you. You can make a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the e-mail address provided that the data will no longer be processed until you revoke the restriction.
 
Right of portability
You always have the right to have the data we process, which relates to you as a person or which can be traced back to you, carried out by another party. You can make a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all the data about you that we have processed or that have been processed by other processors or third parties on our behalf at the e-mail address provided to us. In all likelihood, we will not be able to continue to provide services in such a case, as the secure interconnection of data files can no longer be guaranteed.
 
Right to object and other rights
When the occasion arises, you have the right to object to the processing of your personal data by or on behalf of LumenXL B.V. If you object, we will immediately stop the data processing in anticipation of the processing of your objection. If your objection is well-founded, we will provide you with copies and/or copies of the data we process (or have processed) and then permanently stop processing it. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our contact person for privacy matters.
 
Cookies
In the event that third-party software solutions use cookies, this is stated in this privacy statement. 
 
Changes in the privacy policy
We reserve the right to change our privacy policy at all times. On this page you will always find the most recent version. If the new privacy policy affects the way we already process data relating to you, we will inform you by email.


Contact details
LumenXL b.v.
Ingenieur Hanlostraat, 15 7547RD Enschede The Netherlands
T (085) 779 1906
Contact person for privacy matters: J. Hoogeveen