Privacy declaration

PRIVACY AND COOKIE STATEMENT SPA SOURCE

This privacy and cookie statement describes how Spabron processes personal data. Your privacy is of great importance to Spabron. We therefore adhere to privacy legislation, the General Data Protection Regulation (GDPR). This means that your data is safe with us and that we always use and secure it properly. In this privacy statement we explain what we do with this personal data.

Personal data that we process
Spabron processes your personal data because you provide it to us via our website or personal customer contact. We process the following personal data:
● First and last name
● Phone number
● address details
● Email address
● Other personal data that you actively provide, for example in the contact form or another comments field, in correspondence and by telephone
● technical measurement data from the equipment such as location data, IP address, identifiers in cookies and your surfing behavior/activities on our website
For what purpose and on what basis do we process personal data ? Spabron processes your personal data exclusively for the purposes for which you provided it. This could be:
● sending a newsletter containing special offers, promotions and information.
If you no longer wish to receive this, you can always unsubscribe.
● answer your questions or handle complaints by e-mail or telephone.
● if there is a legal obligation, such as data that we need for our financial administration/tax return.
● to analyze and improve the use of the website and for social media to ensure that you see relevant information and advertisements.
We never use your data without permission for purposes other than those for which it was provided.
The principles on which we process your personal data are:
Necessary condition for the execution of the agreement.
We need your name, telephone number and email address when placing an order, because we cannot complete the order without this information. We also need your e-mail address or telephone number to keep you informed about your order. We also need your name and telephone number or e-mail address to respond to questions or complaints.

Permission.
To send a newsletter we need your name and email address. However , you must have given Spabron explicit permission for this (and therefore have registered for it), otherwise we will not send it to you. You can also withdraw this consent at any time.

Sharing personal data with third parties
Spabron will not provide your personal data to other companies or agencies, except if this is necessary for the implementation of the purposes described above and then only to the extent that the data is necessary for this. Spabron remains responsible for data processing. Furthermore, we will not provide the information you provide to other parties, unless this is legally required or permitted.
The software system that Spabron uses to send our newsletters is Mailchimp. Only your name and email address will be provided to them. We have concluded a processing agreement with Mailchimp. In this processing agreement we have made agreements to ensure the security of your personal data. In addition, our employees who process personal data all have a duty of confidentiality.
Our employees and third parties engaged by us are obliged to respect the confidentiality of your data.
Situations may arise, for strategic or other business reasons, as a result of which Spabron decides to sell or transfer all or part of its business. Spabron may transfer information collected and stored, including personal information, to the party or parties involved in the transaction as part of that transaction. In that case, the confidentiality of your personal data will be discussed.

Automated decision making
Spabron does not make decisions based on automated processing on matters that could have (significant) consequences for people. This concerns decisions that are taken by computer programs or systems, without a human being involved (for example a Spabron employee).

Minors
If a user is under 16 years of age, consent from his or her parent or guardian is required to provide the personal data.
Security and storage Spabron protects your personal information using appropriate technical and organizational measures to minimize the risk of unauthorized and unlawful access, loss, disclosure, use, modification and destruction of your data. The following applies:
- only the necessary persons have access to the data and these persons are obliged to keep it confidential,
- employees have been informed about the importance of protecting personal data, Privacy and cookie statement (version 1.0) 2
- access to the data is protected, which means that we use a username and password on our computers,
- we regularly test and check our security measures and these are updated if necessary,
- all activities on our website take place via a secure (SSL) connection, so that data sent via the website cannot simply be intercepted.
- The database in which your data is stored is on servers located in the Netherlands.

Retention period
Spabron does not store your data for longer than is necessary for the purposes for which it obtained it. Exceptions are data that we must keep for a longer period because the law requires us to do so. For example, the legal retention period for the administration for the tax authorities is 7 years.
The following retention periods apply:
If you have registered for the newsletter, we will store your data as long as you remain registered. If you unsubscribe from the newsletter, we will delete your data within four weeks. If we have your data during a contact moment via the contact form, we will delete your data from our database after your comment has been answered or processed. We store the personal data provided for a reservation for 7 years. Then they are removed.
Rights regarding your data
We offer all visitors the following options:
- to view, change, restrict or delete any personal information provided to us.
- to object to the processing of your personal data (or part thereof) by us or by one of our processors.
- to have us transfer the data you provide to yourself or directly to another party on your behalf (the right of transfer/data portability).
- limit or withdraw the consent you have given to process personal data.
You can do all this by email or telephone. See the contact details at the bottom of this statement. We may ask you to identify yourself to check whether the request really came from you. We will then ask for a copy of your ID. Make sure that your passport photo, the strip with numbers at the bottom of the passport, the passport number and the citizen service number (BSN) are blacked out in this copy. This way you protect your privacy.
We will respond to your request as soon as possible, but in any case within four weeks.

To file a complaint
If you have a complaint about the processing of your personal data, we ask you to contact us directly. Of course we are happy to help you. If you are nevertheless unable to reach an agreement with us, you also have the right under privacy legislation to file a complaint with the privacy supervisor, the Dutch Data Protection Authority. You can contact the Dutch Data Protection Authority for this.
More information about this can be found at https://www.autoriteitpersoonsgegevens.nl/ .

Data leak notification
A data breach is a security incident involving access to, destruction, modification or release of personal data without intention. In the event of a data breach, personal data must have been lost or unlawful processing of personal data cannot be ruled out. We are obliged to register all data leaks and report them to the personal data authority. Unless it is unlikely that the data breach poses a risk to the 'rights and freedoms of natural persons'. Then no notification is required. In the event of a data breach, we will also notify you.

Cookies
A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit the website. The information stored therein can be sent back to our server on a subsequent visit. These cookies are used to make the Spabron website function better and to monitor web visits, so that we can determine how many people have visited the website in a certain period. We only use this data in aggregated form and cannot trace it back to a PC or individual. These cookies do not damage your computer or infringe your privacy. When you visit our online store for the first time, we will show a message about cookies.
Uses of cookies
Spabron uses cookies and similar technologies for various purposes on its website. These cookies can be divided into several categories:
Necessary cookies. These help the website to function, without these cookies it cannot work properly. These cookies cannot therefore be disabled and are always placed, regardless of the choice made.
Analytical or statistical cookies.
Analytical cookies enable us to measure website visits. These statistics give us insight into how often our website is used, what information visitors are looking for and which pages are visited most often. By measuring this we can continue to improve our online store and adapt it to your wishes and therefore to your advantage. The purpose of these cookies is to increase your convenience. We cannot trace the statistics we collect to individuals. This data is therefore always used anonymously. Given their low impact, these cookies may be placed without permission. Examples of statistical cookies are the cookies that are placed for Google Analytics.
Marketing Cookies or tracking cookies.
Marketing (tracking) cookies are used to record the surfing behavior of visitors, both during and after their visit to a website. Thanks to marketing cookies, it is possible to receive personal offers via partner sites and on social media. YouTube and Facebook are two major parties that use marketing cookies. Your consent is required for the use of these cookies.
Social Media cookies.
Social media cookies make it possible to share the content of a website with others. By means of buttons it is possible to use the social media cookies of the social media parties. These cookies work using a code that comes from the social media parties themselves. Cookies are placed using that code. For the cookies that the social media parties place and the possible data they collect with them, we refer to the privacy statements that these parties provide on their own websites. Please note that these statements may change regularly. We have no influence on that.
Unclassified cookies. These are cookies that we are in the process of classifying, together with the providers of individual cookies.
Block or delete cookies
As indicated in the cookie banner, we use various types of cookies and we have asked your permission to place them. If you do not want us to place cookies on your computer, please let us know at the start.

If you have previously accepted our cookies, you will no longer see this message and you must delete our cookies. You can also choose to adjust your browser settings so that you receive a warning before cookies are placed.
Finally, you can block the placing of cookies via your browser. If you block all cookies, websites may not work as well. It is better to selectively disable only unwanted cookies. You can do this in your browser under the settings. This also immediately blocks cookies from other websites that you visit. Please note that you must adjust the settings separately for each browser and computer you use. How you can adjust the settings also varies per browser (consult your browser's help function if necessary). If you no longer want cookies, we can no longer guarantee that our website will work properly. Some functions of the site may be lost.

You can read more about this at:
https://www.consumentenbond.nl/internet-privacy/wat-zijn-cookies
https://www.consumentenbond.nl/internet-privacy/cookies-removal
You can also find information under the 'help' menu of your browser to set your cookie preferences.
When does this privacy and cookie statement come into effect?
This privacy and cookie statement came into effect on May 25, 2018 (version 1.0) and only applies to the processing of personal data by Spabron. We are not responsible for the privacy and cookie policies of other sites.
Changes to this privacy and cookie statement
We may change this privacy and cookie statement from time to time. It is therefore advisable to consult this privacy and cookie statement regularly so that you are aware of these changes. We will do our best to announce changes separately.
Our contact information

If you would like to contact us regarding this privacy statement, you can do so via the contact details below.
By telephone 0524 - 22 22 75
Email info@spabron.nl
Spa Bron Nederland BV , Verl. Hoogeveensevaart 32, 7861 TB Oosterhesselen