Privacy policy

About our privacy policy
HB Care BV greatly values your privacy. We only process data we need to improve or provide our services and treat all data we have collected about you and your use of our services with care. We will never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the associated services of HB Care BV. These conditions take effect on June 6, 2018. The validity of all previous conditions will expire once a new version is published. This privacy policy describes what data we collect about you, what these data are used for, and with whom and under what conditions these data may be shared with third parties. We also explain how we store your data and how we protect them against misuse, as well as what rights you have with respect to the personal data you have provided to us.
You can contact us if you have any questions about our privacy policy using the contact details at the end of this policy.

About the data processing
You can read how we process your data, where we store these data, what security technology we use, and who can access the data.

Webshop software
Our webshop has been developed by and/or with software provided by Magento. Personal data you have provided to use for our services will be shared with this party. Magento has access to your data to offer us (technical) support. They will never use your data for any other purpose. Magento is required to take suitable security measures based on the agreement we have concluded with them. These security measures include the use of SSL encryption, a strong password policy, and secure data storage. Magento reserves the right to share data collected within its own group and affiliated partners to further improve its services. Magento observes the statutory retention periods for (personal) data.

Webhosting and e-mail
HB Care BV purchases webhosting and e-mail services from Byte and Mailhouse Rock. Byte and Mailhouse Rock process the personal data on our behalf and do not use your data for their own purposes. These parties may collect metadata on the use of the services. These are not personal data. Byte and Mailhouse Rock have taken appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. Byte and Mailhouse Rock are bound to confidentiality by an agreement.
Our website uses Mailchimp and Barilliance, third parties that handle the e-mail traffic from our website and send out our newsletters. All confirmation e-mails you receive from our website and webforms are sent using the Mailchimp and Barilliance servers. Mailchimp and Barilliance will never use your name and e-mail address for their own purposes. You can find an ‘unsubscribe’ link at the bottom of each automated e-mail sent through our website. You will no longer receive e-mails from our website if your click this link. Your personal data are stored in a secure manner by Mailchimp and Barilliance. Mailchimp and Barilliance use cookies and other Internet technologies that indicate whether e-mails are opened and read. Mailchimp and Barilliance reserve the right to use your data to improve their services and to share data with third parties for this purpose.

Handling payments
We use the platform provided by Ingenico to handle (part of) the payments made to our webshop. Ingenico processes your name, address and residence data and your payment details such as your bank account or credit card number. Ingenico has taken appropriate technical and organisational measures to protect your personal data. Ingenico reserves the right to use your data to further improve its services and share (anonymised) data with third parties to this end. In case of a request for a deferred payment (credit facility), Ingenico will share personal data and information about your financial position with credit rating agencies. All the above securities for the protection of your personal data also apply to those parts of the services provided third parties hired by Ingenico. Ingenico will not keep your data longer than allowed by statutory retention periods.

Reviews
We collect reviews using the Feedback Company platform. When you leave a review through Feedback Company, you are required to submit your name, place of residence and e-mail address. Feedback Company shares this information with us to enable us to link your review to your order. Feedback Company also publishes your name and place of residence on its own website. In some cases, Feedback Company may contact you for a clarification of your review. We share your name and e-mail address with Feedback Company if we invite you to leave a review. The only use these data to invite you to leave a review. Feedback Company has taken appropriate technical and organisational measures to protect your personal data. Feedback Company reserves the right to hire third parties for its services. We have given Feedback Company permission for this. All the above securities for the protection of your personal data also apply to those parts of the services provided by third parties hired by Feedback Company.

Shipping and logistics
When you place an order with us, it is our duty to deliver your package. We make use of the services provided by Post.nl for these deliveries. We must provide your name, address and residence details with Post.nl for this purpose. Post.nl will only use these data to implement the agreement. If Post.nl makes use of subcontractors, it will also provide your data to these parties.

Invoicing and accounting
We use the services of Exact and Manuels administratie en advieskantoor for administrative and accounting purposes. We share your name, address and residence details concerning your order. We only use these data to process sales invoices. Your personal data are forwarded and stored in a secure manner. Exact and Manuels administratie en advieskantoor are required to observe the secrecy of these data and will handle them confidentially. Exact and Manuels administratie en advieskantoor do not use your personal data for any other purposes than those described above.

External sales channels

Bol.com
We sell (part of) our products through the Bol.com platform. If you place an order through this platform, Bol.com will share your order and personal data with us. We use these data to process your order. We will treat your data confidentially and have taken suitable technical and organisational measures to protect your data against loss and unauthorised use.

Beslist.nl
We sell (part of) our products through the Beslist.nl platform. If you place an order through this platform, Beslist.nl will share your order and personal data with us. We use these data to process your order. We will treat your data confidentially and have taken suitable technical and organisational measures to protect your data against loss and unauthorised use.

Amazon
We sell (part of) our products through the Amazon platform. If you place an order through this platform, Amazon will share your order and personal data with us. We use these data to process your order. We will treat your data confidentially and have taken suitable technical and organisational measures to protect your data against loss and unauthorised use.

Wish
We sell (part of) our products through the Wish platform. If you place an order through this platform, Wish will share your order and personal data with us. We use these data to process your order. We will treat your data confidentially and have taken suitable technical and organisational measures to protect your data against loss and unauthorised use.

Purpose of the processing

General purpose of the processing
We only use your data to provide our services. This means that the purpose of the processing always directly relates to your order. We do not use your data for (targeted) marketing. We will ask for you for explicit permission if you share data with us and we use these to contact your at a later point, except if this takes place based on your request. Your data will not be shared with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality based on the agreements concluded between them and us or an oath or legal obligation.

Automatically collected data
Data that are collected automatically by our website are processed to improve our services. These data (e.g. your IP address, web browser and operating system) are not personal data.

Cooperation with tax and criminal investigations
HB Care BV can in specific circumstances be required to share your data for tax or criminal investigations by the authorities based on a statutory obligation. In this case, we will be forced to share your data but object against it within the limits offered by law.

Retention periods
We will keep your data as long as you are a client of us. This means that we will keep your client profile until you indicate that you no longer wish to use our services. We will consider this as a request to be forgotten. We must keep invoices with your personal data for the applicable period based on administrative obligations. Employees will no longer have access to your client profile and documents that have been created for your order.

Your rights
You, as a data subject, have certain rights related to the personal data that are processed by us or on our behalf based on applicable Dutch and European legislation. We will explain these rights and how to rely on them below.
We will by default only sent copies of your data to your e-mail address already in our possession to prevent misuse. We will ask for proof of your identity if you wish to receive the data on another e-mail address or, for example, by mail. We keep a record of handled requests and will only process anonymised data in case of a request to be forgotten. All copies of data will be provided in a machine-readable data format as used by our systems.
You will always have the right to submit a complaint with the Dutch Personal Data Authority if you suspect that we make improper use of your personal data.

Right to access
You will always have the right to access the data we process (or have processed) that concern your person or relate to you. You can submit a corresponding request by letter or e-mail (using the contact details below). You will receive a response to your request within 30 days. If we accept your request, we will send a copy of all data with an overview of the processors that hold these data to the e-mail address in our possession, stating the category under which we have stored these data.

Right of correction
You will always have the right to correct the data we process (or have processed) that concern your person or relate to you. You can submit a corresponding request.
You will receive a response to your request within 30 days. If your request is accepted, we will send you a confirmation that the data have been corrected to the e-mail address in our possession.

Right to limit the processing
You will always have the right to limit the processing of the data that concern your person or relate to you. You can submit a corresponding request. You will receive a response to your request within 30 days. If your request is accepted, we will send you a confirmation that the data will no longer be processed until the limitation will be lifted to the e-mail address in our possession.

Right to portability
You will always have the right to transfer the data we process (or have processed) that concern your person or relate to you to another party. You can submit a corresponding request. You will receive a response to your request within 30 days. If your request is accepted, we will send you copies of all data we have processed or that have been processed on our behalf by other processors or third parties to the e-mail address in our possession. We will probably no longer be able to continue to provide the services because the safe linking of data will no longer be able to be guaranteed.

Right of objection and other rights
You have the right to object to the processing of your personal data by or on behalf of HB Care BV in certain circumstances. If you object, we will immediately cease the processing of the data pending the handling of your objection. If your objection is founded, we will provide you with all copies of all processed data and cease the processing.
You also have the right not to be the subject of automated individual decision-making or profiling. We do not process your data in a manner based on which this right applies. Please contact us if you feel that this is the case.

Cookies by third parties
The use of cookies by software solutions provided by third parties is set out in the cookie statement.

Vouchers of Sovendus GmbH
To select a voucher offer that may be currently of interest to you, we send the hash value of your e-mail address and your IP address in a pseudonymised and encrypted form to Sovendus GmbH, Moltkestr. 11,76133 Karlsruhe, Germany (Sovendus) (Art. 6(1)(f) GDPR). The pseudonymised hash value of the e-mail address is used to determine whether there is an objection against advertisements by Sovendus (opt-out) (Art. 21(3), Art. 6(1)(c) GDPR). The IP address will only be used by Sovendus to secure the data and usually anonymised after seven days (Art. 6(1)(f) GDPR). We will also send the following data to Sovendus in a pseudonymised form for administrative purposes: order number, order amount and currency, session ID, voucher code and time stamp (Art. 6(1)(f) GDPR). If you are interested in a voucher offer from Sovendus and no op-out has been registered for your e-mail address in the Sovendus system, we will transfer your title, name and e-mail address to Sovendus in an anonymised form to prepare the voucher after single click on the displayed Sovendus banner (Article 6(1)(f) GDPR).
More information about the processing of your data by Sovendus can be found in the online data protection guidelines available on https://www.sovendus.com/en/privacy_policy/.

Changes to this privacy policy
We reserve the right to change our privacy policy at all times. You will always find the latest version on this page. If the new privacy policy affects the way in which we process already collected data, we will inform you by e-mail.

Contact details 
HB Care BV
Aalsbergen 9
6942 SE, Didam Netherlands
info@hbcare.co.uk
Tel: +44 203 318 62 03

Cookie statement