Privacy

Privacy en het gebruik van cookies

We, Rebel Nature, are the owner of the www.rebelraw.nl website (hereinafter referred to as the “Website“). We are committed to protecting your privacy and security. This Privacy policy describes how we deal with the personal data that we process via our website or application managed by us and the services offered thereon (hereinafter referred to as the “Services“).

By visiting our website or providing your personal data, you are accepting and consenting to the provisions of this Privacy policy. All personal data collected and processed by us is handled in strict compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR“).

1. Controller

The controller of the processing of the personal data is: Rebel Nature, located in (1022AG) Amsterdam at Zamenhofstraat 150, the Netherlands and registered at the Chamber of Commerce in the Netherlands with the number 63229242. If you have any questions or remarks, please contact our customer experience department (info@rebelraw.nl).

2. What kind of personal data do we collect on our website?

2.1 Registration or information requests through our website

When you register yourself in order to buy products or when you wish to receive information from our company, you can fill in a form on our website or send us an e-mail with your request for information.

In the form on our website we ask you to provide the following (personal) data, including special personal data, if necessary, for providing our services:

First and last name
E-mail address

If you send us an email with your request for information, we process the personal data and information provided in your email.We may combine the information you have provided with other information we have collected about you, both online and offline, including, for example your purchase history, your address, and/or purchase date.

2.2 Automatically generated data

When using our Website, your IP address can be registered or cookies or other technologies can be used. A cookie is a small file that is sent along with pages of a website and stored by your browser on the hard disk of your computer. For example, cookie-related techniques are the use of fingerprints and scripts. With this data, sometimes personal data is stored or consulted. On the basis of this information you can be recognised on a later visit.

3. For which purpose and on which basis do we process the personal data?

We process personal data received from you, as laid out in article 2.1 (Registration or information requests through our website), for the following purposes:
1. to fulfil our obligations with respect to the agreement for the sale of goods (for example for shipping and invoicing the ordered goods) or requested services, including invoicing;
2. to contact you (by phone or by e-mail), to provide our services, and to answer your questions or remarks and/or provide you with the requested information or advice;
3. to secure your account and order information;
4. to secure our business goals:

for data analysis, for example to improve the efficiency of the Services;
for audits, to check whether our internal processes function as intended and to comply with legal or contractual requirements;
for fraud and security checks, for example for cyber attacks or attempts at detecting and preventing identity theft;
to supplement, improve or change our website or our products and services;
to determine the effectiveness of our promotional campaigns, so that we can adapt them to the needs and interests of our users.

We will carry out the above listed activities to manage our contractual relationship with you, to fulfil a legal obligation, and/or because of our legitimate interests.

to analyse personal data (e.g. purchase history, shipping country and/or city, language) in order to provide personalised offers of our Services:
- to understand you better so that we can personalise our interactions with you and provide you with information and/or offers that are tailored to your interests;
- to better understand your preferences so that we can deliver content through the Services that we believe will be relevant and interesting to you.

We will provide personalised offers of our Services with your permission or because of our legitimate interests.

to comply with various legal obligations, including tax obligations.
We will only make personal data available to third parties that are involved in the execution of the user’s order. These third parties process personal data according to our instructions and under our responsibility. This is recorded and a processor agreement is concluded with these parties. We do not pass on your personal data to other third parties unless we are legally obliged to do so.

We use the automatically generated information, as laid out in article 2.2 (Automatically generated data), and your company data and personal data, as laid in out in article 2.1 (Registration or information requests through our website), to conduct analyses for internal research and statistical, strategic purpose, all in an aggregated form (“aggregated information”). This aggregated information does not identify you nor the company. We use the aggregated information to optimise our Website, Services and products and learn more about the use of our Website and products so we can improve them.

4. Use by minors

The Services are not intended for use by persons under the age of 16. If you are younger than 16 years old, you cannot make use of the Services and you must refrain from providing personal data. If your child has unexpectedly submitted personal information to us and you wish to request that the same personal data be removed, please contact us. In Chapter 8 (Your rights with respect to your personal data) of this Privacy policy you will find out how you can contact us.

5. How long do we store and process the personal data?

Rebel-Nature shall process the personal data for a period of two years after your last order, or for as long as legally required or necessary and allowed for the purpose(s) for which it was obtained. Immediately after these periods we will destroy the personal data and/or anonymise them.
The criteria used to determine our retention periods include: (i) the duration of our ongoing relationship with you and the Services we offer you; (ii) whether or not there is a legal obligation to which we are subject; and (iii) whether or not custody is advisable due to our legal position (such as applicable limitation period(s), a court case or investigations by a supervisor).

Notwithstanding article 5.1, Rebel-Nature may process the personal data for a longer period (i) if you ask Rebel-Nature to keep data for a new two-year period, (ii) in order to comply with statutory retention periods (for example laid down in tax legislation) or (iii) in order to prove that it complies with applicable statutory obligations (for example with respect to the GDPR or e-mail marketing legislation).

6. How do we protect the personal data?

We shall take appropriate technical and organisational measures to safeguard and protect the personal data against any accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access or against any other unlawful or unauthorised processing of such personal data. Taking into account the state of technology and the costs of execution, these measures guarantee an appropriate level of security given the risks that come with processing and the nature of the data to be processed. For example, we make use of a secure SSL connection during the order process and when completing the registration form.

7. With whom do we share the personal data?

Without prejudice to articles 3, 7.1 and 7.2, we don’t transfer any personal and/or personal data to any third party without your explicit permission, unless it is obliged to do so under applicable legislation or by order of the competent supervisory authority.

8. Your rights with respect to your personal data

You have the right to obtain our confirmation as to whether or not we process your personal data, on request. The personal details you provide when registering as a client with us can be viewed and altered at anytime by you, on your account on the Website. You are also entitled to send our customer experience department info@rebelraw.nla request to receive such information. Furthermore, you are entitled to send our customer experience department a request to access, receive, rectify or erase your personal data. We will process your request immediately and in accordance with the GDPR and we will send you a response without undue delay, at least within one month after the receipt of your written request.You are entitled to object, on grounds relating to your particular situation, to our processing of your personal data at any time. We shall no longer process the personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. We will send you a response without undue delay, at least within one month after the receipt of your written request.If you have any complaints about our processing of your personal data or your request, you can contact our customer experience department (info@rebelraw.nl). If that doesn’t solve your complaints, you can, of course, always contact the Dutch supervisory authority (www.autoriteitpersoonsgegevens.nl) or the competent court in the Netherlands.

9. Revisions of this statement

You have the right to obtain our confirmation as to whether or not we process your personal data, on request. The personal details you provide when registering as a client with us can be viewed and altered at anytime by you, on your account on the Website. You are also entitled to send our customer experience department info@rebelraw.nla request to receive such information. Furthermore, you are entitled to send our customer experience department a request to access, receive, rectify or erase your personal data. We will process your request immediately and in accordance with the GDPR and we will send you a response without undue delay, at least within one month after the receipt of your written request.You are entitled to object, on grounds relating to your particular situation, to our processing of your personal data at any time. We shall no longer process the personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. We will send you a response without undue delay, at least within one month after the receipt of your written request.If you have any complaints about our processing of your personal data or your request, you can contact our customer experience department (info@rebelraw.nl). If that doesn’t solve your complaints, you can, of course, always contact the Dutch supervisory authority (www.autoriteitpersoonsgegevens.nl) or the competent court in the Netherlands.

Please note that this statement might be revised, for example due to revisions in the applicable legislation. The revised statement will be published on our website. We recommend checking our website and the Privacy policy on a regular basis. The last revision of this policy was made in June 2019.

Amsterdam, The Netherlands, June 2019