PRIVACY SINOZ

Privacy STK Cosmetica B.V.
This privacy policy describes how STK Cosmetica B.V. (trading as SINOZ), a Dutch private limited liability company settled in Zaandam (the Netherlands) on address Pieter Ghijsenlaan, collects and processes your personal data.

About our privacy policy
Everyone is equally special and important, including your privacy. This is why STK Cosmetica B.V. (hereafter referred to as SINOZ) cares much about your privacy. From 25 May 2018 the General Data Protection Regulation is in force due to which privacy rules and laws have changed. These changes include amongst others an easier access to editing your properties with regards to your personal data, a clearer privacy policy and an increase in your rights with regards to personal data.

We only process data which we need to improve our services and we process the information we possess about you and your usage of our services with care. We never provide your personal data to third parties for commercial purposes. This privacy policy applies to the usage of our website and the services provided on this website. The starting date of this privacy policy is 25 May 2018 and by publishing the new version of our privacy policy all previous versions lose their validity.

This privacy policy sets out which data we collect about you, for which means this data is used and with whom and under which conditions this data can be shared with third parties. We also explain how we store your data, how we prevent abuse of your data and which rights you have with regards to the personal data you provided SINOZ. If you have questions about our privacy policy, please contact our privacy officer (see contact options at the end of the privacy policy).

About data processing
In this paragraph you can read how we process your data, where we save these data (or have these data saved), which security techniques we use and for whom your personal data is accessible.

Web shop software
Our web shop has been developed with the software of Personal data provided for our services are not shared with this party.

Email traffic
Our website uses Klaviyo, a third party that processes the email traffic from our website and distributes our newsletters. All confirmation emails that you receive from our website and web forms are sent via Klaviyo's servers. Klaviyo will never use your name and email address for its own purposes. A link to unsubscribe from our emails is included at the bottom of every automatically generated email sent via our website. Please note that this may severely impair the functioning of our website. Your personal data is stored securely by Klaviyo. Klaviyo uses cookies and other internet technologies that provide insight into whether emails have been opened or read. Klaviyo reserves the right to use your data to further improve its services and to share information with third parties for this purpose.

Payment processors
To process (part of) the payments made in our online store, we use the platform of Mollie B.V. (based in Amsterdam, the Netherlands). Mollie processes your name, address, and payment details (such as your bank account number or credit card number). Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to improve its services and to share (anonymous) data with third parties. All aforementioned security measures regarding your personal data also apply to services for which Mollie uses third parties. Mollie does not store your data longer than legally permitted.

Reviews
We want security for our customers. This is why we strive to convert online reviews and feedback into better services and products. To achieve this, we collect reviews via Google. If you write a review via Google, you must provide your name, place of residence, and email address. Your name on your personalized Google page and the information under “About me” is visible to others. Furthermore, the information contained in other reviews on Google Maps and published photos is visible to third parties. Anonymous reviews cannot be written. Google shares the information contained in your review with SINOZ so that we can link your review to your order. Google publishes your name and place of residence on its website. In some cases, Google may contact you to further explain your review. When we invite you to write a review, we will share your name and email address with Google. Google uses this data solely to invite you to write reviews. Google has taken appropriate technical and organizational measures to protect your personal data. Google reserves the right to use third parties for its services; we have granted our permission for this. All aforementioned security measures regarding your personal data also apply to services for which Google uses third parties.

Remarks:
1. Google uses automatic spam detection methods to delete reviews that are most probably spam.

1. Google has a zero-tolerance policy for falsified reviews. Google reserves the right to remove any review that Google considers falsified or that does not comply with Google’s review policy.
2. Reviews and opinions are shared voluntarily. Anyone who shares reviews is not paid for this by Google.

Customer Service and newsletter
Through our website, we offer the possibility to ask questions by phone or email through Customer Service. For this purpose, certain personal data are requested to process your question. You choose which data you provide. The data you send us are stored for as long as necessary to fully answer and process your request.

We offer a newsletter intended to inform anyone interested about SINOZ in general and/or about our services and products. Every newsletter contains a link that allows you to unsubscribe. With explicit opt-in consent, you can receive the newsletter by email.

Publication
We do not publish your personal data.

Shipping and logistics
DHL and PostNL

If you order goods from SINOZ, we ensure that they are delivered to you. For this purpose, we use the services of DHL and PostNL. It is necessary to provide DHL or PostNL with your name, address, and place of residence. DHL and PostNL use this data to execute the agreement. If DHL or PostNL uses third parties, they will also provide your personal data to these parties.

External sales channels
SINOZ does not use external sales channels.

Purpose of data processing

General purpose of processing
We use your data solely to provide our services. This means that the purpose of processing the data is always directly linked to any order you place with SINOZ. We do not use your personal data for marketing purposes. If you share personal data with us and we use this data - without a prior request from you - to contact you at a later time, we will ask for your explicit consent. Your personal data are not shared with third parties, except to comply with accounting and other administrative obligations. These third parties are all obliged to keep your personal data confidential based on an agreement between them and SINOZ, an oath, or a legal obligation.

Automatically collected data
Data that are automatically collected by our website are used to improve our services. This data (e.g., our IP address, web browser, or operating system) is not personal data.

Corporation in tax and criminal research
SINOZ may be legally required to share your personal data for tax or criminal investigations conducted by the government. In that case, we are required to provide your personal data, but we will use the legal means available to us to object to this.

Retention period
We retain your personal data for as long as you are our customer. This means we save your customer profile until you inform us that you no longer wish to use our services. If you submit such a request, we will treat it as a request to be forgotten. Due to administrative obligations, we must store invoices containing personal data for the applicable retention period (e.g. seven years in the case of tax retention obligations). Staff members, however, have no access to your customer profile or to documents we acquired following your previous order.

Your rights
Under Dutch and European law, as a data subject, you have certain rights regarding personal data processed by SINOZ or on behalf of SINOZ. In this paragraph, we explain which rights you have and how you can exercise them. In principle, we send copies of your personal data to the email address registered in our system to prevent abuse. If you wish to receive your personal data at another email address or by regular mail, we will ask you to identify yourself. We keep records of processed requests. In the case of a request to be forgotten, we store anonymous data. All copies of personal data are sent in a machine-readable data format that we use in our systems. You always have the right to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are using your personal data improperly.

You also have the right to be forgotten. Your account and all personal data linked to it will consequently be permanently erased or anonymized, within the scope permitted by law.

Withdrawal of prior permission
When you have granted us permission to process your personal data, you can always withdraw this permission.

Right of access
You always have the right to inspect the personal data we process (or have others process on our behalf) or data that can be linked to you. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is approved, we will send a copy of all personal data to the email address registered in our system, along with an overview of the data processors that store the data. We will note the categories under which we store the personal data.

Right of rectification
You always have the right to have your personal data that we process (or have others process), or data that can be traced back to you, corrected. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is approved, we will send a confirmation to the email address registered in our system stating that the data has been corrected.

Right to restrict processing
You always have the right to restrict the processing of your personal data that we process (or have others process), or of data that can be traced back to you. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is approved, we will send a confirmation to the email address registered in our system stating that we will no longer process your data until you withdraw your restriction.

Right to data portability
You always have the right to have another party carry out the processing of your personal data that we process (or have others process), or of data that can be traced back to you. You can submit such a request to our privacy officer. You will receive a response to your request within 30 days. If your request is approved, we will send a copy to the email address registered in our system of all personal data, together with an overview of the data processors that store the data. Most likely, we will not be able to continue providing our services in this case, since we can then no longer guarantee secure linking of data files.

Right to object and other rights
If you do not agree to the processing of certain personal data - for instance, the automatic processing of personal data (profiling) for direct marketing purposes - you can always object to this. If you submit an objection, we will immediately suspend the data processing while awaiting its review. If your objection is upheld, we will send a copy to the email address registered in our system of all personal data, together with an overview of the data processors that store the data. We will also permanently suspend the data processing. You additionally have the right not to be subject to automated individual decision-making or profiling. We do not process your personal data in a way that makes this right applicable. If you nevertheless believe that this right applies, please contact our privacy officer.

Changes to the privacy policy
We reserve the right to change our privacy policy. However, you will always find the most recent version on this page. If a new privacy policy affects how we previously collected personal data about you, you will be informed by email.

Contact details

STK Cosmetica B.V.	Trading as: SiNOZ
Address: Pieter Ghijsenlaan 29	1506 PW Zaandam
Chamber of Commerce registration number: 71134182	VAT number: NL860714779B01
	Email address: info@SINOZ.eu