Privacy Policy

https://www.carinterface.nl

About our privacy policy

Car Interface cares deeply about your privacy. We therefore only process data that we need for (the
improvement of) our services and handle the information we have collected about you and your use of our
services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services accessed through it provided by Car
Interface. The effective date for the validity of these terms is 21/12/2018; with the publication of a
new version, the validity of all previous versions expires. This privacy policy describes what data about you
is collected by us, what this data is used for, and with whom and under what conditions this
data may be shared with third parties. We also explain to you how we store your data,
how we protect your data against misuse, and what rights you have regarding the
personal data you provide to us.

If you have any questions about our privacy policy, you can contact our privacy contact person;
you will find the contact details at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we store it (or have it stored), which
security techniques we use, and for whom the data is visible.

Webshop software

Opencart
Our webshop was developed using software from Opencart; we host our webshop on a dedicated server under our own management.
We have taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of
data as much as possible. These security measures consist, at a minimum, of the application of
SSL encryption and a strong password policy. Backups are made regularly to prevent data loss.

Web hosting

TransIP
We procure web hosting services from TransIP. TransIP does not process personal data on our behalf and does not use your data for its own purposes.
However, this party may collect metadata about the use of the services. This is not personal data. TransIP has
taken appropriate technical and organizational measures to prevent loss and unauthorized use of your
personal data. TransIP is obliged to maintain confidentiality under the agreement.

Office365 and Gmail
We use the services of Microsoft Office365 and Google Gmail for our regular business email traffic. These parties have
taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our
data as much as possible. Microsoft and Gmail do not have
access to our mailbox, and we treat all our email traffic
confidentially.

Payment processors

MultiSafepay B.V.
To handle (part of) the payments in our webshop, we use the MultiSafepay platform.
MultiSafepay processes your name, address, and residence details and your payment details such as your bank account or
credit card number. MultiSafepay has taken appropriate technical and organizational measures to protect your
personal data. MultiSafepay reserves the right to use your data to further improve the
service and, in that context, share (anonymized) data with third parties.
In the case of an application for deferred payment (credit facility), MultiSafepay shares personal data and
information regarding your financial position with credit rating agencies. All the safeguards mentioned above
regarding the protection of your personal data also apply to the parts of
MultiSafepay's services for which they engage third parties. MultiSafepay does not store your data longer than permitted
under legal terms.

Reviews

WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you
are required to provide a name and email address. WebwinkelKeur shares this data with us so that we can
link the review to your order. WebwinkelKeur also publishes your name on its own website. In
some cases, WebwinkelKeur may contact you to provide an explanation of your review. In the
event that we invite you to leave a review, we share your name and email address with WebwinkelKeur. They
use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has
taken appropriate technical and organizational measures to protect your personal data.
WebwinkelKeur reserves the right to engage third parties for the purpose of providing the service;
we have given WebwinkelKeur permission for this. All the safeguards mentioned above
regarding the protection of your personal data also apply to the parts of the
service for which WebwinkelKeur engages third parties.

Shipping and logistics

PostNL, DHL, DPD, GLS
When you place an order with us, it is our task to deliver your package. We use the services
of PostNL, DHL, DPD, and GLS to carry out these deliveries. For this purpose, it is necessary for us to share your name, address, and residency details with them.
They use this data exclusively for the execution of the agreement. Should these parties engage subcontractors,
your data will also be made available to those parties.

Invoicing and accounting

e-Boekhouden
We use the services of e-Boekhouden to keep track of our administration and accounting. We share your name, address, and residence details and details regarding your order. This
data is used for the administration of sales invoices. Your personal data is sent and stored in a protected
manner. e-Boekhouden is obliged to maintain confidentiality and will treat your data confidentially.
e-Boekhouden does not use your personal data for purposes other than those described above.

Purpose of data processing

General purpose of the processing

We use your data exclusively for the benefit of our services. That is to say, the purpose of the
processing is always directly related to the assignment you provide. We do not use your data for
(targeted) marketing. If you share data with us and we use this data to—other than at your request—
contact you at a later time, we will ask you for explicit permission for this. Your data will
not be shared with third parties, other than to meet accounting and other administrative obligations.
These third parties are all held to confidentiality under the agreement between them and us or an oath
or legal obligation.

Automatically collected data

Data automatically collected by our website is processed for the purpose of further improving our services.
This data (for example, your IP address, web browser, and operating system) is not
personal data.

Cooperation in fiscal and criminal investigations

In appropriate cases, Car Interface may be held under a legal obligation to share
your data in connection with fiscal or criminal investigations by the authorities. In such a case,
we are forced to share your data, but we will oppose this within the possibilities offered to us by the law.

Retention periods

We keep your data as long as you are a client of ours. This means that we keep your customer profile until you
indicate that you no longer wish to use our services. If you indicate this to us, we will also
regard this as a request to be forgotten. Based on applicable administrative obligations, we must keep invoices with
your (personal) data; we will therefore keep this data for as long as the applicable term runs.
However, employees no longer have access to your client profile and documents that we have produced
following your assignment.

Your rights

Based on current Dutch and European legislation, you as a data subject have certain rights with
regard to the personal data processed by or on our behalf. We explain below which
rights these are and how you can invoke these rights. In principle, to prevent misuse, we send
transcripts and copies of your data only to your email address already known to us. In the event that you
wish to receive the data at another email address or, for example, by post, we will ask you to
identify yourself. We keep an administration of handled requests; in the case of a request to be forgotten,
we administer anonymized data. You will receive all transcripts and copies of data in the
machine-readable data format that we use within our systems. You have the right at all times to lodge a
complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are using your personal data in a
wrong way.

Right of access

You always have the right to inspect the data that we (have) process and that relates to your person or
is traceable to it. You can make a request to that effect to our privacy contact person.
You will then receive a response to your request within 30 days. If your request is granted, we will send
to the email address known to us a copy of all data with an overview of the processors who have this
data under them, stating the category under which we have stored this data.

Right of rectification

You always have the right to have the data that we (have) process and that relates to your person or
is traceable to it adjusted. You can make a request to that effect to our privacy contact person.
You will then receive a response to your request within 30 days. If your request is granted,
we will send a confirmation to the email address known to us that the data has been adjusted.

Right to restriction of processing

You always have the right to restrict the data that we (have) process that relates to your person or is traceable
to it. You can make a request to that effect to our privacy contact person.
You will then receive a response to your request within 30 days. If your request is granted, we will send
to the email address known to us a confirmation that the data will no longer be processed until you lift the restriction.

Right to portability

You always have the right to have the data that we (have) process and that relates to your person or
is traceable to it carried out by another party. You can make a request to that effect to
our privacy contact person. You will then receive a response to your request within 30 days. If your request
is granted, we will send to the email address known to us transcripts or copies of all data about you that
we have processed or that has been processed by other processors or third parties on our behalf. In all
likelihood, in such a case we can no longer continue the service because the secure
linking of data files can then no longer be guaranteed.

Right of objection and other rights

In appropriate cases, you have the right to object to the processing of your personal data by
or on behalf of Car Interface. If you object, we will immediately cease data processing
pending the handling of your objection. If your objection is well-founded, we will make transcripts and/or copies of
data that we (have) process available to you and then permanently cease processing. You also have
the right not to be subjected to automated individual decision-making or profiling.
We do not process your data in such a way that this right applies. If you believe that this is the case,
please contact our privacy contact person.

Cookies

Google Analytics
Through our website, cookies are placed by the American company Google as part of the “Analytics” service.
We use this service to keep track of and get reports on how visitors use the website.
This processor may be obliged under applicable laws and regulations to provide insight into this data.
We have not allowed Google to use the obtained analytics information for other Google services.

Third-party cookies
In the event that third-party software solutions use cookies, this is stated in this
privacy statement.

Changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, you will always find the most
recent version on this page. If the new privacy policy has consequences for the way in which we process already collected data
regarding you, we will inform you of this by email.

Contact details

Car Interface
Hastelweg 260D
5652 CN Eindhoven
The Netherlands
T: +31 10 8889444
E: info@carinterface.nl