Last Modified: October 26, 2023
Your privacy is of great importance to us. We adhere to privacy laws, which means that we:
- Store as little personal data as possible and only the data necessary for our purposes;
- Explicitly request your consent for processing your personal data if consent is required;
- Take the necessary security measures to protect your personal data;
- Respect your rights, such as the right to access, correct, or delete your personal data processed by us.
When you place an order with us, we use your personal data to handle it efficiently. We may provide your personal data to our delivery service to deliver your order. We also receive information about your payment from your bank or credit card company. We are legally obliged to do so. We retain customer data in compliance with the legal tax retention obligation.
To handle (part of) the payments in our webshop, we use Mollie’s platform. Mollie processes your name, address, place of residence, and your payment details, such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, for that purpose, share (anonymized) data with third parties. All the safeguards mentioned above regarding the protection of your personal data also apply to parts of Mollie’s services for which they engage third parties. Mollie does not retain your data longer than is permitted based on statutory terms.
Shipping and Logistics
When you place an order with us, it is our responsibility to have your package delivered to you. We use DHL’s services for making the deliveries. Therefore, we need to share your name, address, and place of residence details with DHL. DHL uses this information solely for the purpose of executing the agreement. In case DHL engages subcontractors, DHL also provides your data to these parties.
For certain parts of this website, you must register first. You need to provide information about yourself and enter security details. With this information, we create an account for you, which you can log into with your chosen username and password. We use your username and email address for this purpose. We store this information so you don’t have to enter it again, and so we can contact you more easily when necessary. You can adjust this information through your account whenever you wish. We keep this information until you terminate the account.
Through our forms, you can send us messages to ask questions, make requests, file complaints, make appointments, or for other purposes. For this, we use your name, email address, and phone number, and possibly additional data if included in the form. We need this information to be able to contact you. We retain this information indefinitely, but we can delete your data upon request.
Disclosure to Other Companies or Institutions
Security of personal data is of great importance to us. To protect your privacy, access to personal data is secured with a username and password. We use secure connections (Secure Sockets Layer or SSL) that shield all information between you and our website when you enter personal data.
Purpose of Data Processing
General Purpose of Processing
We use your data exclusively for our services. This means the purpose of processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you later – other than at your request – we will ask you for explicit consent. We do not share your data with third parties, except for accounting and other administrative obligations. These third parties are all bound to confidentiality based on the agreement between them and us or an oath or legal obligation.
Automatically Collected Data
Data automatically collected by our website is processed to further improve our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.
Cooperation in Tax and Criminal Investigations
In some cases, based on a legal obligation, Wright Tea may be obliged to share your data in connection with tax or criminal investigations by government authorities. In such a case, we are forced to share your data, but we will oppose it within the possibilities the law offers us.
We keep your data as long as you are a client with us. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also consider it a forget request. This also means that we keep your data for no more than two years after the last contact moment or transaction, unless there is a legal justification for this. Based on applicable administrative obligations, we are required to retain invoices with your (personal) data, so we will keep this data for as long as the applicable term runs. However, employees no longer have access to your client profile and documents we have created based on your order.
Under the applicable Dutch and European legislation, you, as the data subject, have certain rights regarding the personal data processed by or on behalf of us. We explain below what rights these are and how you can invoke these rights. In principle, to prevent abuse, we send copies and copies of your data only to your already known email address. In the event that you wish to receive the data at a different email address or, for example, by mail, we will ask you to identify yourself. We keep records of settled requests. In the event of a forget request, we administer anonymized data. You will receive all copies and copies of data in the machine-readable data format that we use within our systems. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data in the wrong way.
Right of Access
You always have the right to view the data we process (or have processed) that relate to your person or are traceable to you. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors holding this data, with the category under which we have stored this data.
Right to Rectification
You always have the right to have the data we process (or have processed) that relate to your person or are traceable to you be adjusted. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted to the email address known to us.
Right to Restriction of Processing
You always have the right to limit the data we process (or have processed) that relate to your person or are traceable to you. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us that the data will no longer be processed until you remove the restriction.
Right to Data Portability
You always have the right to have the data we process (or have processed) that relate to your person or are traceable to you performed by another party. You can make a request to that effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all data about you that we have processed or that have been processed on our behalf by other processors or third parties. Probably, in such a case, we can no longer provide our services because the secure linking of data files can then no longer be guaranteed.
Right to Object and Other Rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of Wright Tea. If you object, we will immediately stop the data processing pending the handling of your objection. If your objection is justified, we will provide you with copies and/or copies of data that we process and then stop the processing permanently. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe this is the case, please contact our contact person for privacy matters.
Filing a Complaint
If you believe that we are not helping you in the right way, you have the right to file a complaint with the supervisory authority. This authority is called the Dutch Data Protection Authority. We have appointed a data protection officer. This person is responsible for privacy within our organization. Our data protection officer is reachable by email and phone for all your questions and requests.
3012 CL Rotterdam