Privacy Policy

Impora Privacy Policy

https://thehappybed.nl/

About our privacy policy

Impora really cares about your privacy. That's why we only process data we need for (improving) our services and handle the info we collect about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services made available on it by Impora. The effective date for these terms is 29/03/2023. When a new version is published, all previous versions become invalid. This privacy policy explains what data we collect about you, what we use it for, and with whom and under what conditions we might share it with third parties. We also explain how we store your data, how we protect it from misuse, and what rights you have regarding the personal data you give us.

If you have any questions about our privacy policy, you can contact our privacy contact person. You'll find their contact details at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we (let others) store it, what security techniques we use, and who can see your info.

Online store software

Email and mailing lists

Shopify

We send our newsletters and transactional emails using our online store software 'Shopify'. All confirmation emails you get from our website and web forms are sent through Shopify's servers. Shopify will never use your name and email address for their own purposes. At the bottom of every email sent automatically from our website, you'll see the 'unsubscribe' link. If you click on it, you won't get any more emails from our website. This might seriously affect how our website works! Your personal data is sent, stored, and accessed securely by Shopify. Shopify uses

cookies and other internet technologies that show whether emails are opened and read. On top of that, Shopify processes info about you as the recipient and the subject line of emails to improve the quality of their service, and this data is kept for 30 days. Shopify reserves the right to use your data to further improve their services and, in that context, to share info with third parties.

Payment processors

External sales channels

Purpose of data processing

General purpose of processing

We only use your data to provide our services. That means the reason we process your info is always directly related to the job you give us. We don't use your data for (targeted) marketing. If you share info with us and we want to use it to contact you later for something else, we'll always ask for your permission first. We don't share your data with anyone else, except when we have to for accounting or other admin reasons. These third parties are all bound by confidentiality, either by contract with us, an oath, or a legal obligation.

Automatically collected data

Data that's automatically collected by our website is used to help us improve our services. This info (like your IP address, web browser, and operating system) isn't considered personal data.

Cooperating with tax and criminal investigations

In some cases, Impora might be legally required to share your data for tax or criminal investigations by the government. If that happens, we're forced to share your info, but we'll push back as much as the law allows.

Retention periods

We keep your data as long as you're our client. So that means we keep your customer profile until you

indicates that you no longer want to use our services. If you let us know, we'll also treat this as a request to be forgotten. This means we won't keep your data for more than two years after our last contact or transaction, unless there's a legal reason to do so. Because of administrative requirements, we have to keep invoices with your (personal) data for as long as the law says. But our staff won't have access to your client profile or any documents we made for you anymore.

Your rights

Under current Dutch and European law, you as the data subject have certain rights regarding the personal data that is processed by or on behalf of us. We'll explain below what these rights are and how you can use them. To prevent abuse, we usually only send copies of your data to the email address we already have for you. If you want to receive the data at a different email address or by post, we'll ask you to prove your identity. We keep a record of handled requests, and in the case of a request to be forgotten, we keep anonymized data. All copies of your data will be sent in the machine-readable format we use in our systems. You always have the right to file a complaint with the Dutch Data Protection Authority if you think we're misusing your personal data.

Right of access

You always have the right to access any data we (have) process that relates to you or can be traced back to you. You can send a request for this to our privacy contact person. You'll get a response to your request within 30 days. If your request is approved, we'll send you a copy of all your data to the email address we have on file, along with a list of the processors who have your data, and the category under which we've stored it.

Right to rectification

You always have the right to have any data we (have) process that relates to you or can be traced back to you corrected. You can send a request for this to our privacy contact person. You'll get a response to your request within 30 days. If your request is approved, we'll send you a confirmation to the email address we have on file, letting you know your data has been updated.

Right to restrict processing

You always have the right to restrict the processing of any data we (have) process that relates to you or can be traced back to you. You can send a request for this to our privacy contact person. You'll get a response to your request within 30 days. If your request is approved, we'll send you a confirmation to the email address we have on file, letting you know that your data won't be processed anymore until you lift the restriction.

Right to data portability

You always have the right to have the data we (have others) process about you or that can be traced back to you, transferred to another party. You can make this request to our privacy contact person. You'll get a response within 30 days. If your request is approved, we'll send you copies of all the data we have about you, or that has been processed for us by other processors or third parties, to the email address we have on file. Most likely, we won't be able to continue our services in that case, since we can't guarantee the safe linking of data files anymore.

Right to object and other rights

In some cases, you have the right to object to the processing of your personal data by or on behalf of Impora. If you object, we'll immediately stop processing your data while your objection is being handled. If your objection is justified, we'll give you copies of any data we (have others) process about you and then stop processing it for good. You also have the right not to be subject to automated individual decision making or profiling. We don't process your data in a way that this right applies. If you think we do, please contact our privacy contact person.