Privacy Statement
Medicooler Privacy Statement
Introduction
Medicooler takes your privacy very seriously and will process and use information about you (the data subject) in a secure manner. In this Privacy Statement, we explain which data we process and for what purpose. You can also read in this Privacy Statement about your rights with regard to our processing of your personal data. We recommend that you read this Privacy Statement carefully. If you have any questions, you can always contact info@medicooler.nl.
Who is medicooler?
Medicooler is the sole proprietorship Medicooler, with its office in (1054AR) Amsterdam at Bosboom toussaintstraat 6-1, registered in the trade register of the Chamber of Commerce under number 75448475.
When Medicooler processes your personal data, Medicooler is the controller.
Reviews
WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares this data with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to ask for an explanation of your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the purpose of providing its services; we have given WebwinkelKeur permission to do so. All the safeguards mentioned above with regard to the protection of your personal data also apply to the parts of the services for which WebwinkelKeur engages third parties.
HOW DOES MEDICOOLER USE YOUR DATA?
Below you will find an overview of the purposes for which Medicooler processes personal data about you. For each purpose, it is stated which data Medicooler uses for that specific purpose, what the legal basis is for processing that data and how long the data is retained by Medicooler. To keep things clear, we have grouped everything by type of data flow.
SERVICES, CUSTOMER MANAGEMENT AND FINANCIAL ADMINISTRATION
| Purpose: | Financial administration |
|---|---|
| Data: | Billing address, Bank details (Bank name/IBAN/BIC), Outstanding balance |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Invoicing |
| Data: | Billing address, Bank details (Bank name/IBAN/BIC), Outstanding balance |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Order management |
| Data: | Name and address details, Delivery address, Email address, Telephone number, Payment details, Account number, Order number, Content of the complaint, Customer number |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Handling complaints about the product |
| Data: | Name and address details, Delivery address, Email address, Telephone number, Payment details, Account number, Order number, Content of the complaint, Customer number |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | CRM |
| Data: | Name, Username, Email address, Order history, Social media account |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
Marketing
| Purpose: | Direct marketing |
|---|---|
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Affiliate marketing |
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Newsletter |
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Retargeting |
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Social media marketing |
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Loyalty programme |
| Data: | Name, Email address, Click behaviour, Browsing behaviour, Interest in a product, Social media account, Order history |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
Website
| Purpose: | Website analytics |
|---|---|
| Data: | Browsing behaviour |
| Legal basis: | Legitimate interest |
| Interest concerned: | Commercial interest |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Providing an account |
| Data: | Name, Address, Email address, Username, Password, User ID, Content of the message |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Posting messages or reviews |
| Data: | Name, Address, Email address, Username, Password, User ID, Content of the message |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
| Purpose: | Chat function |
| Data: | Name, Address, Email address, Username, Password, User ID, Content of the message |
| Legal basis: | Performance of the agreement |
| Retention period: | As long as necessary for this purpose |
HOW DOES MEDICOOLER OBTAIN YOUR PERSONAL DATA?
Medicooler holds data about you because you have provided that data to us.
WHAT ARE YOUR RIGHTS?
Under the European General Data Protection Regulation, you have a number of rights with regard to your data and its processing:
ACCESS
You can always view your own (personal) data and change it if necessary in your account. If you would like to see the personal data that Medicooler holds about you, you can submit a request for access.
RECTIFICATION
If you would like to make changes to the personal data you have seen following a request for access and which you cannot change yourself in your account, you can submit a request to Medicooler. You can request that Medicooler change, correct, supplement, delete or restrict access to your data.
RESTRICTION OF PROCESSING
Under certain conditions, you also have the right to ask Medicooler to restrict the processing of your personal data.
RIGHT TO OBJECT
If a particular processing operation takes place on the basis of the ‘legitimate interest’ of Medicooler or a third party, you have the right to object to that processing.
DATA PORTABILITY
You have the right to obtain your personal data from Medicooler. Medicooler will provide this in a structured and commonly used format that can easily be opened in other common digital systems. In this way, you can also transfer your data to another provider.
WITHDRAWING CONSENT
In all cases where the legal basis for a particular data processing operation is your consent, you have the right to withdraw that consent. This has no consequences for the past, but it does mean that we may no longer process that data. As a result, Medicooler may no longer be able to provide certain services to you.
RESPONSE BY MEDICOOLER
A request can be sent to info@medicooler.nl. Medicooler will comply with your request as soon as possible and in any case no later than one (1) month after Medicooler has received such a request. If Medicooler rejects your request, we will state in our reply why the request has been rejected.
RECIPIENTS OF THE PERSONAL DATA
The data may be passed on to:
- Parties involved in the performance or fulfilment of an agreement between you and Medicooler
Medicooler may be obliged to provide your data to a third party, for example on the basis of a legal obligation.
TRANSFER TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
For technical and operational reasons, for example, it may be necessary for your (personal) data to be transferred to companies affiliated with Medicooler outside the European Economic Area. Because the privacy protection regulations there may not offer the same protection as within the European Economic Area, Medicooler will use the Privacy Shield or the EU Model Clauses to protect your privacy as much as possible. Where this is not possible, Medicooler will ask for your consent to transfer your (personal) data to countries without an adequate level of protection. You can withdraw this consent at any time.
WHAT ARE COOKIES AND HOW DOES MEDICOOLER USE THEM?
Cookies are small pieces of (text) information that are sent to your browser when you visit the Medicooler website and then stored on the hard drive or in the memory of your computer, tablet, mobile phone or other device (hereinafter: “Device”). The cookies placed via the Medicooler website cannot damage your Device or the files stored on it. When we talk about ‘cookies’, we mean not only these small pieces of (text) information, but also similar techniques used to collect information, such as device fingerprinting.
CAN THIS PRIVACY STATEMENT BE CHANGED?
This Privacy Statement may be changed. We therefore advise you to check the Privacy Statement regularly for any changes.
WHERE CAN YOU GO WITH COMPLAINTS AND QUESTIONS?
If you have any further questions about this Privacy Statement and the way in which Medicooler uses your data, you can send an email to info@medicooler.nl. If you have a complaint about the way in which Medicooler processes your data, you can also send an email to info@medicooler.nl. You can also always contact the competent national supervisory authority for privacy protection. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).