Privacy sensitive data or personal data is processed via our web store. PhoneSupply considers careful handling of personal data of great importance. Personal data is therefore carefully processed and secured by us.
In our processing, we comply with the requirements of privacy legislation. This means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this via this privacy statement;
- we limit our collection of personal data to only the personal data that is necessary for legitimate purposes;
- we first ask for your permission to process your personal data in cases where your permission is required;
- we take appropriate security measures to protect your personal data and also require the same from parties that process personal data on our behalf;
- we respect your right to provide your personal data for inspection, correction or deletion at your request.
PhoneSupply (Pieter Schotsmanstraat 42, 1931 AR Egmond aan Zee, Netherlands, Chamber of Commerce no. 34357566) is responsible for data processing. In this privacy statement we explain which personal data we collect and use and for what purpose. We recommend that you read it carefully.
Use of personal data
When you visit our web store, we obtain certain information from you. That can be personal data. We only store and use the personal data provided by you in the context of the service you have requested or of which it is clear when stated that they are provided to us for processing.
We use the following data for the purposes stated in this privacy statement:
- name and address details
- Phone number
- Billing address
- Email address
- Payment details
- IP address
With our customer account you can access a management environment where you can set, specify and change data yourself.
Purposes
- Handling order
In order to process the order correctly, we use your name and address details. - Handling payment transactions
In order to process the payment of the order correctly, we use your payment details. - Communication
In order to facilitate communication regarding your order and/or other questions, we use your personal data/contact details. - Performance of legal obligation
In order to comply with our legal obligation, we store your order history, including payment details, within the statutory period. - Marketing (if allowed)
In order to provide you with personal offers, we use your personal data/contact details. This information will only be used if you have given permission for this. - Fraud prevention
For the purpose of fraud prevention, if there is a legitimate interest, we use your IP address, address details and payment details.
If this is necessary for the proper processing of your order, we can also provide your personal data to third parties. You can read more about this in this privacy statement.
Advertising
After your permission, we can inform you about promotions, offers and campaigns of PhoneSupply on third-party websites and via e-mail marketing.
Contact us
You can contact us by e-mail, the contact form, the chat on our website and WhatsApp. You decide which details you provide. If you choose WhatsApp, WhatsApp (Meta) also processes your phone number and your messages under its own terms. We keep your messages for three years after your question has been handled.
Publication
We do not publish your customer data.
Provision to third parties
We do not sell your data. We only pass data on to parties we need in order to carry out your order or to run our webshop, and only the data they need for that purpose. These are the following types of parties:
- payment services, to process your payment (such as Mollie and Stripe);
- carriers and shipping services, to deliver your order (such as PostNL, DPD and UPS, via MyParcel and Sendcloud). They receive your name, address and, for delivery notifications, your e-mail address and phone number;
- our accounting software, for invoices and the statutory records;
- our hosting provider and e-mail provider, where the webshop and e-mail are technically hosted;
- translation and AI services, for customer service;
- Google, for statistics and advertising measurement (only with your consent) and for protecting forms;
- government registers, to verify VAT numbers.
We make agreements on security and confidentiality with parties that process personal data on our behalf. Payment services and carriers are themselves responsible for your data in their own services; their own privacy statements apply to that.
Translation and AI in customer service
We serve customers in many languages. Messages you send us are therefore translated automatically. We also use an AI assistant that helps to read your question and to draft a reply; a reply may also be drafted and sent automatically. For this, the content of your message and the details of the order your question is about are processed by our translation and AI suppliers. They may not use this data for their own purposes. You can always ask for your question to be handled by a member of staff. The legal basis is our legitimate interest in helping you quickly and in your own language.
Transfers outside the European Union
Some of our suppliers are American companies or process data in the United States (such as our hosting provider, Google, Microsoft and Stripe). Transfers take place on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission. If you order from a country outside the European Union, such as the United Kingdom or Switzerland, we pass your details on to the carrier in that country.
VAT number verification
If you enter a VAT number when ordering, we verify it with the official registers (VIES for EU numbers, HMRC for UK numbers, and the Swiss and Norwegian registers) to determine the correct VAT treatment of your order. For this we send the VAT number you entered to these services, and we store the outcome of the check with your order.
Protection of forms (reCAPTCHA)
To prevent abuse of our forms, we use Google reCAPTCHA on some forms. Google receives your IP address and information about your browser. The legal basis is our legitimate interest in protecting our webshop against spam and abuse.
Cookies
We place functional cookies that are necessary for the webshop to work, for example for your shopping cart, language and currency. We only place cookies for statistics and advertising measurement with your consent. You give or refuse that consent in the cookie notice on your first visit. Your choice is valid for twelve months; after that we ask again. You can change your choice at any time via the cookie settings at the bottom of the website. If you withdraw your consent, we delete the cookies concerned.
Google Analytics
We use Google Analytics to keep track of how visitors use our website. We have concluded a processor agreement with Google to make agreements about the handling of our data. Furthermore, we have not allowed Google to use the information obtained for other Google services. Finally, we anonymize the IP addresses.
Advertising measurement (Google Ads)
When you reach our website through a Google ad, the web address contains a Google click ID and sometimes campaign details (UTM parameters). Only if you consent to statistics, we store this data, together with the landing page and the referring website, in a cookie (lps_attr) for 90 days. If you place an order, we record this data with the order, so that we can see which ads lead to orders and what those orders generate. The click ID is deleted from our records after 100 days, the other origin data after 1 year. We may pass the click ID to Google Ads together with the order value, without name, address or email address, to measure and improve our advertising campaigns. The legal basis is your consent, which you can withdraw at any time via the cookie settings at the bottom of the website. Without consent we do not place this cookie and do not store any origin data with your order.
Security
We take security measures to limit misuse of and unauthorized access to personal data.
Retention periods
The personal data described above will be kept for as long as necessary to process your order(s), including warranty, unless there is a legal obligation that requires longer retention (such as the tax retention obligation).
Specifically, we apply the following periods. Orders and invoices are kept for ten years after the end of the financial year; after that we remove the personal data from the order. An account that has not been used for three years is deleted; the account holder receives an e-mail thirty days in advance and can keep the account by logging in. Data from an order that was not completed is deleted after one year.
Third-party websites
This privacy statement does not apply to third party websites. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We recommend that you read the privacy statement of these websites before using these websites.
Changes to this privacy statement
We reserve the right to make changes to this privacy statement. It is recommended that you consult this privacy statement regularly so that you are aware of these changes.
View and change your data
For questions about our privacy policy or questions about access to and changes to (or deletion of) your personal data, you can contact us at any time using the details below.
You can also send us a request to view, change or delete this data. You can also submit a request to request a data export for data that we use with your permission, or indicate with reasons that you want us to limit the processing of personal data.
To prevent misuse, we may ask you to identify yourself adequately. When it comes to accessing personal data linked to a cookie, you must enclose a copy of the cookie in question. You can find these in the settings of your internet browser. If the data is incorrect, you can request us to change the data or have it removed.
Personal Data Authority
Of course we are happy to help you if you have complaints about the processing of your personal data. Under the privacy legislation you also have the right to file a complaint with the Dutch Data Protection Authority against these processing of personal data. You can contact the Dutch Data Protection Authority for this.
Contact information
You can find our contact details on this page.