Privacy statement PackagingDirect B.V.

Article 1 – Definitions

1.1.
The following definitions are used in this privacy statement:

a)
PackagingDirect: the user of this privacy statement: the private limited liability company PackagingDirect.nl B.V., located at Schumanpark 67, (7336 AS) in Apeldoorn, registered with the Dutch Chamber of Commerce under registration number 52953890;

b)
Data Subject: the natural person who (on behalf of a company) has entered into an agreement with PackagingDirect, or the natural person who (on behalf of a company) has contacted PackagingDirect regarding the creation and/or execution of the agreement, or the natural person who (on behalf of a company) has created an account on the website or visits the website;

c)
Agreement: the agreement between PackagingDirect and the Data Subject under which the Data Subject uses the service offered by PackagingDirect through various websites;

d)
Website: the website www.packagingdirect.nl and the corresponding mobile application managed by PackagingDirect, where the Data Subject can create an account;

e)
Personal Data: data that can be used to identify a natural person.

Article 2 – Personal Data

2.1.
For PackagingDirect, careful handling of personal data is of great importance. PackagingDirect processes personal data in accordance with applicable laws and regulations.

2.2.
PackagingDirect handles personal data with care and treats it confidentially.

2.3.
PackagingDirect collects personal data from the Data Subject when the Data Subject has provided this personal data via the website, or when the Data Subject visits the website or contacts PackagingDirect by phone or email.

2.4.
PackagingDirect collects and processes the following personal data:

• First and last name;

• Address;

• Postal code and city;

• Phone number;

• Email address;

• Bank account number.

The personal data processed by PackagingDirect depends on whether or not the Data Subject has placed an order with PackagingDirect.

2.5.
PackagingDirect does not process special categories of personal data.

2.6.
The website and/or service does not intend to collect data about individuals under 16 years of age unless they have permission from a parent or guardian. However, PackagingDirect cannot verify whether a Data Subject is over 16 years old. PackagingDirect advises parents to be involved in their children's online activities to prevent data about children being collected without parental consent. If the Data Subject believes PackagingDirect has collected personal data about a minor without permission, they must contact PackagingDirect using the contact details provided in Article 11.1. PackagingDirect will then stop processing and delete the personal data.

Article 3 – Legal Basis and Purposes of Processing

3.1.
The legal basis for processing personal data is the execution of the agreement or, at the request of the Data Subject, taking pre-contractual measures.

3.2.
PackagingDirect collects and processes personal data for the following purposes:

• Handling a question and/or comment from the Data Subject;

• Providing a quote;

• Establishing the agreement;

• Contacting the Data Subject regarding the execution of the agreement;

• Creating and maintaining an account for the Data Subject on the website;

• Sending newsletters to the Data Subject if they have given consent (see Article 4);

• Processing payments for orders placed via the website;

• Meeting administrative obligations;

• Improving the website and PackagingDirect's services.

3.3.
Providing the Data Subject’s name, address, phone number, and email address is a contractual obligation. Without this information, no agreement can be established.

3.4.
PackagingDirect will not retain personal data longer than necessary to achieve the purposes outlined in Article 3.2.

3.5.
PackagingDirect only processes personal data that is strictly necessary for the purposes at hand and strives for minimal data processing.

3.6.
PackagingDirect will not process personal data for purposes other than those described above.

Article 4 – Newsletters

4.1.
Newsletters are only sent to the Data Subject if they have explicitly and unequivocally given consent to PackagingDirect. The Data Subject can unsubscribe from newsletters at any time (see Article 5).

4.2.
PackagingDirect will not contact the Data Subject for direct marketing purposes without prior consent.

Article 5 – Unsubscribing from Newsletters

5.1.
The Data Subject can unsubscribe from newsletters in the following ways:

• By clicking the unsubscribe link included in the newsletter email;

• By contacting PackagingDirect (see Article 11.1 for contact details).

5.2.
Every newsletter sent to the Data Subject contains an unsubscribe link.

Article 6 – Deleting Personal Data

6.1.
PackagingDirect will delete personal data without undue delay in the following cases:

• The personal data is no longer necessary for the purposes for which it was processed;

• The Data Subject objects to the processing of their personal data, and the objection is valid;

• The personal data is incorrect or outdated.

6.2.
PackagingDirect is not required to delete personal data if one of the legal exceptions to the "right to be forgotten" applies.

Article 7 – Sharing Personal Data with Third Parties

7.1.
PackagingDirect will only share the Data Subject’s personal data with third parties if:

• The Data Subject has given explicit prior consent;

• A legal basis allows the sharing of personal data with a third party;

• It is necessary for the execution of the agreement;

• The data is shared with a processor engaged by PackagingDirect for the purposes outlined in this privacy statement, and PackagingDirect has a contract with this processor ensuring adequate safeguards for technical and organizational measures.

7.2.
The Data Subject may withdraw their consent to share personal data with third parties at any time.

Article 8 – Right to Access, Data Portability, Rectification, and Deletion

8.1.
Upon request, PackagingDirect will grant the Data Subject access to all personal data held about them and provide a free copy of this data in a format that allows the Data Subject to transfer the data to a third party.

8.2.
PackagingDirect offers the Data Subject the opportunity to have any incorrect data corrected or deleted free of charge.

8.3.
Requests for access, modification, or deletion of data can be submitted to PackagingDirect in writing or via email. See Article 11.1 for PackagingDirect's contact details. PackagingDirect will respond to such requests as quickly as possible and, in any case, within four weeks.

Article 9 – Objection

9.1.
The Data Subject may object to the processing of their personal data by PackagingDirect if they have a valid reason related to their specific situation. Upon receiving the objection, PackagingDirect will cease processing the personal data unless it demonstrates compelling legitimate grounds for processing that outweigh the interests of the Data Subject.

Article 10 – Right to Restriction

10.1.
If the Data Subject has submitted a request for modification, supplementation, or deletion of their personal data or has filed an objection to the processing of their personal data, and the handling, processing, or execution of the request or objection takes time, the Data Subject may request PackagingDirect to restrict the processing of their personal data.

Article 11 – Contact

11.1.
For questions about how PackagingDirect processes personal data, withdrawing consent for processing, requesting access to the personal data processed by PackagingDirect, requesting a copy of personal data, or requesting modification or deletion of personal data, limiting the processing of personal data, or filing an objection to the processing of personal data, the Data Subject can contact PackagingDirect using the details below:

PackagingDirect.nl B.V.

Contact details NL:
Schumanpark 67,
7336 AS Apeldoorn
Email: [email protected]
Phone: +31 (0) 55 767 6100

Contact details BE:
Koralenhoeve 15C
2160 Wommelgem
Phone: +31 (0) 55 767 6100

11.2.
If PackagingDirect modifies, supplements, or deletes the personal data, or ceases or limits the processing of personal data or processes a withdrawn consent, PackagingDirect will inform the Data Subject.

Article 12 – Security Measures

12.1.
To prevent unauthorized access to personal data, loss, theft, and misuse of personal data, PackagingDirect has implemented various security measures, including protection against unauthorized access, modification, unlawful and unintended destruction, and accidental loss of personal data.

12.2.
Data provided via the website is encrypted. PackagingDirect uses an HTTPS connection.

Article 13 – Privacy Policies of Third Parties

13.1.
This privacy statement does not apply to third-party websites, such as online stores, linked to the website. PackagingDirect accepts no responsibility or liability for how these websites handle personal data. For more information on how these third parties handle personal data, consult their privacy statements.

Article 14 – Changes

14.1.
PackagingDirect reserves the right to make unilateral changes to this privacy statement. The latest version of PackagingDirect's privacy statement will be available on the website.

Article 15 – Data Breach

15.1.
If a security incident occurs at PackagingDirect that results in a data breach involving sensitive personal data or a situation with serious adverse effects on the protection of personal data, PackagingDirect will report this to the Dutch Data Protection Authority within 72 hours of discovering the breach, if possible, and act in accordance with the Authority's Data Breach Notification Guidelines.

15.2.
If a data breach at PackagingDirect has adverse effects on the privacy of the Data Subject, PackagingDirect will notify the Data Subject without delay.

Article 16 – Cookies

16.1.
PackagingDirect uses functional cookies.

16.2.
A cookie is a small text file stored in the browser of the Data Subject's device during their first visit to the website.

16.3.
PackagingDirect only places tracking cookies if the Data Subject has given prior consent before visiting the website. Before such consent is given, only functional cookies that do not affect the Data Subject's privacy will be placed.

16.4.
The Data Subject can opt out of cookies by configuring their internet browser to prevent cookies from being stored. Additionally, the Data Subject can delete previously stored cookies via their browser settings. For more information about enabling and disabling cookies and deleting them, refer to the browser's instructions or help function. Functional cookies are essential for the website's proper functioning. Deleting functional cookies may affect the website's functionality and PackagingDirect's ability to provide its services.

Article 17 – Complaints

17.1.
If the Data Subject believes that PackagingDirect's processing of personal data does not comply with this privacy statement or applicable laws and regulations, they may file a complaint with the Dutch Data Protection Authority.

© PackagingDirect BV – 2018/05