Provision

Explanation

1. 1.Your personal data are processed by Gunco bv Pittsburghstraat 1 3047BL, Rotterdam, with corporate registration number 24083966 (hereinafter: "mateco" “we”, “us”, “our”). You can contact us via e-mail at    privacy@mateco.nl.

This is the entity responsible for the processing of your personal data as covered in this Privacy Policy.

1. 2.Any notion starting with a capital shall be defined by explicit reference in this Privacy Policy. Where possible given the context, singular words shall be interpreted as also including the plural and vice versa.

To make sure we have the same understanding of what is written here, it is important that certain notions are interpreted in the same way by you and by us.

1. 3.Where reference is made to certain laws or regulations, such reference shall also include any change, replacement or annulment of said laws or regulations, including any related executive decisions.

Laws tend to change from time to time, and we want to make sure that this Privacy Policy remains in line with any such changes.

1. 4.We reserve the right to modify, change or amend the Privacy Policy at our own discretion and from time to time. Such modification, change or amendment shall be communicated via the Website.

As any company, changes in laws, market circumstances, interests etc. may require us to change our Privacy Policy from time to time to ensure that it remains accurate.

.

Provision

Explanation

1. 1.Whenever you use our Website, Webshops and Social Media Channels, we collect:
   • technical information associated with the device you use, such as your IP address, browser type, geographical location and operating system;
   • information concerning your browsing behavior, such as how long you visit, what links you click on, what pages you visit and how many times you visit a page.

Here we explain which types of personal data we collect in any case whenever you visit our Website, Webshops and Social Media Channels.

1. 2.When you fill out the contact form on our Website, or contact us via e-mail, telephone, fax or Social Media Channels, we collect:
   • the basic identity information you provide us with, such as name, e-mail address, postal address, telephone number, the company you work for, your function;
   • the content of your communication and the technical details of the communication itself (with whom you correspond at our end, date and time, etc.);
   • publicly available information of your profile on Social Media Channels;
   • any other personal data you choose to provide to us.

Here we explain which types of personal data we collect when you actively seek to contact us or want us to contact you.

1. 3.When you place an order on one of our Webshops, as customer or supplier, we collect:
   • the basic identity information we require to process your order, such as your name, company, function, postal address and telephone number;
   • details pertaining to the order itself.

Here we explain which types of personal data we collect when you make an order on one of our Webshops. We have Webshops for customers as well as suppliers, so for both these categories we will collect personal data.

1. 4.All of the personal data listed above, we receive directly from you. It may happen that we receive additional information about your preferences and surfing behavior from partners such as Google, Facebook, MailChimp, LinkedIn, TYPO3, YouTube and AddThis/Oracle. If you require more information about the personal data these parties process about you and make available to others, you are kindly requested to consult their respective privacy policies:

·                Google: www.Google.com/intl/en/policies/privacy/

·                MailChimp:mailchimp.com/legal/

·                LinkedIn:www.linkedin.com/legal/privacy-policy

·                TYPO3: typo3.org/privacy-policy/

·                Facebook: www.facebook.com/about/privacy

·                YouTube: www.google.de/intl/de/policies/privacy

We would like to make it clear that most of the personal data we process, we receive directly from you. However, from time to time we may receive personal data from third parties, who we have listed in this clause. We have no control over what these parties do with your personal data, which is why we refer you to their privacy policies.

Provision

Explanation

1. 1.We process your personal data to provide you in a personalized and efficient way with the information, products and services you request via the Website, e-mail, telephone, fax, Social Media Channels and Webshops.

We first and foremost collect and process your personal data to provide you with the things you request by contacting us or by surfing to our Website and Social Media Channels.

1. 2.We process your personal data for marketing purposes, i.e. to provide you with targeted communications, promotions, offerings and other advertisements of us and selected partners.

Unless you are an existing customer who has already purchased similar goods or services from us and who we wish to target with our own marketing material, We will only send you communications,  promotions, offerings, newsletters and other advertisements via e-mail or other person-to-person electronic communications channels if you have explicitly consented to receiving such communications, promotions, offerings, newsletters and other advertisements.

We want to use your personal data for marketing purposes. This means that we collect information regarding your preferences and interests and use this information to make our marketing material more relevant to you.

When we want to send you marketing material via e-mail, WhatsApp, LinkedIn InMail, Facebook Messenger or other person-to-person electronic communications channels, we will in principle first seek your prior approval with receiving our marketing via such channels.

You can always change your preferences regarding receiving our marketing material, by going to our Preference Center (see below, clause 7.5).

1. 3.We process your personal data to comply with legal obligations or to comply with any reasonable request from competent law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities.

Your personal data may be transferred upon our own initiative to the police or the judicial authorities as evidence or if there are justified suspicions of an unlawful act or crime committed by you through your registration with or use of the Website, Webshops, our Social Media Channels or other communication with us.

From time to time we may be legally required to transfer your personal data to governmental authorities.

1. 4.We may be required to collect and transfer your personal data to the financial institution or payment service provider to allow your financial institution and the payment service provider to comply with their legal obligations, such as obligations under applicable anti-money laundering and counter-terrorism financing legislation. 

When we offer online payment systems to pay in our Webshops, our payment service provider or financial institution may require personal data to do legally obligatory checks. Hence, we must collect and transfer such data to the payment service provider or financial institution.

1. 5.We process your personal data to perform statistical analyses so that we may improve our Website, Webshops, products and services or develop new products and services.

This provision is self-explanatory.

1. 6.We may process your personal data for informing any third party in the context of a possible merger with, acquisition of/by or demerger by that third party, even if that third party is located outside the EU.

This provision is self-explanatory.

1. 7.We may process your personal data for the preservation of the legitimate interests of us, its partners or a third party if and when your registration with or use of the Website, Webshops, Social Media Channels or other communication channels can be considered (a) a violation of any applicable terms of use or the intellectual property rights or any other right of a third party, (b) a threat to the security or integrity of the Website, Webshops, Social Media Channels or other communication channels, (c) a danger to the Website, Webshops, Social Media Channels or other communication channels or any of us or its subcontractors’ underlying systems due to viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) in any way hateful, obscene, discriminating, racist, slanderous, spiteful, hurtful or in some other way inappropriate or illegal.

Here we reserve the right to process your personal data if you use our Website, Webshops, Social Media Channels or other communication channels in any way that may harm us or someone else or is illegal.

Provision

Explanation

1. 1.For processing your personal data under the conditions outlined in this Privacy Policy, we as the responsible party ask for your  consent.

The law requires us to state precisely which legal basis we use to process your personal data, considering the purposes we have listed in the previous article.

We ask first and foremost your consent with its processing of your personal data when you fill out our contact form or order something from our Website. When you contact us directly via telephone, fax, e-mail or Social Media Channels, you also implicitly consent to our processing of your personal data.

1. 2.The processing of your personal data for the purpose of fulfilling an order you have placed via one of our Webshops is necessary for performing the agreement between you and us.

When you request information or when you purchase something via the Webshops, personal data must be processed in order to ensure that we can fulfill our agreement with you.

1. 3.The processing of your personal data for the purposes outlined in clauses 3.3and 3.4is necessary to allow us to comply with our legal obligations.

Sometimes the law obliges us to process your personal data.

1. 4.The processing of your personal data for the purposes outlined in clauses 3.1 is necessary for the purpose of our legitimate interests, which are:
   • continuous improvements to our Website, Webshops, Social Media Channels, products and services to ensure that you have the best experience possible;
   • keeping our Website, Webshops, Social Media Channels, products and services safe from misuse and illegal activity;
   • marketing and promotion of our products, services, brands an overall successful commercialization of our products and services.

We may also process your personal data for our own legitimate interests, which are mainly concerned with successfully conducting our business as any other company would do.

Provision

Explanation

1. 1.We do not send your personal data in an identifiable manner to any third party without your explicit permission to do so. You understand, however, that if you use our Social Media Channels, your personal data is also processed by the social media providers. If you purchase anything via our Webshops, a financial institution or payment service provider may also receive your personal data in order to provide their services.

We do not share your personal data with third parties unless you consent to it or unless we have anonymized your personal data. You understand however that when you use Facebook for instance to communicate, Facebook also processes your personal data. Likewise, if you make or receive payments, your bank or payment service provider will process your personal data.

1. 2.We rely on third party processors to provide you the Website and Webshops as well as to process your personal data on our behalf. These third party processors are only allowed to process your personal data on behalf of us upon explicit written instruction of us. We warrant that all third party processors are selected with due care and are obliged to observe the safety and integrity of your personal data.

Our Website and Webshops may be developed, maintained or hosted by third parties. Similarly, we rely on the services of third parties such as cloud providers to process your personal data internally.

1. 3.We may share your personal data with other entities within our group of companies. However, we will ensure that all our group entities will take due care that all processing of your personal data is in line with what is set out in this Privacy Policy.

This clause is self-explanatory. We ensure that all our entities take due care when it comes to the processing of your personal data.

Provision

Explanation

1. 1.We process your personal data first and foremost within the EEA. However, in order to process your personal data for the purposes outlined in article 3above, we may also transfer your personal data to other entities within our group or to third parties who process on our behalf which are located outside the EEA. Each entity outside the EEA that processes your personal data shall be bound to observe adequate safeguards with regard to the processing of your personal data. Such safeguards will be the consequence of:
   • the recipient country having legislation in place which may be considered equivalent to the protection offered within the EEA; or
   • a contractual arrangement between us and that entity located outside the EEA. All those entities are parties to a contractual arrangement based on the EC’s Standard Contractual Clauses (controller-to-controller) (Commission Decision C(2004)5721.

We send your personal data to countries outside the EEA, because we share certain systems with other entities in our group of companies or because we use a foreign service provider. We make sure, however, that your personal data are safe when we send your personal data to countries outside the EEA.

1. 2.We may transfer anonymized and/or aggregated data to organizations outside of the EEA. Should such transfer take place, we will ensure that there are safeguards in place to ensure the safety and integrity of your data as well as all rights with respect to personal data you might enjoy under applicable mandatory law.

We may anonymize your data or combine it with data of others thereby making it impossible to identify you. Such anonymous or aggregated information may also be transferred to countries outside the EEA.

Provision

Explanation

1. 1.We do our utmost best to process only those personal data which are necessary to achieve the purposes listed under article 3.

We will not process more personal data about you than we need for the purposes we have communicated to you.

1. 2.Your personal data are only processed for as long as needed to achieve the purposes listed under article 3 of this Privacy Policy or up until such time where you withdraw your consent for processing them. Note that withdrawal of consent may imply that you can no longer use the whole or part of the Website, Webshops, Social Media Channels and other communication channels. We will de-identify your personal data when they are no longer necessary for the purposes outlined in article 3 , unless there is:
   • an overriding interest of us, your financial institution, the payment service provider, or any other third party in keeping your personal data identifiable;
   • a legal or regulatory obligation or a judicial or administrative order that prevents us from de-identifying them. 

Here we explain how long we will keep your personal data in a way that allows us to identify you.

1. 3.An essential aspect of our marketing efforts pertains to making our marketing materials more relevant to you. This means that we build a profile of you based on relevant characteristics as outlined in article 2and then use this profile to provide you with communications, promotions, offerings, newsletters and other advertisements about products and services that may interest you. Targeted marketing shall be done based on the information we collect (as obtained through the ways explained before).

This clause states that we make profiles about you based on preferences, surfing behavior and purchases so that we may better target our marketing activities.

1. 4.We will take the appropriate technical and organizational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss, tampering or destruction. Access by personnel of us or its third party processors will only be on a need-to-know basis and subject to strict confidentiality obligations. You understand, however, that safety and security are best efforts obligations only which can never be guaranteed.

We are committed to keeping your personal data safe.

Provision

Explanation

1. 1.You have the right to request access to all personal data we process pertaining to you. We reserve the right to charge an administrative fee for multiple subsequent requests for access that are clearly submitted for causing nuisance or harm to us.

In this article we explain which rights you have vis-à-vis the processing of your personal data. The rights themselves are self-explanatory.

1. 2.You have the right to ask that any personal data pertaining to you that are inaccurate, are corrected free of charge. If a request for correction is submitted, such request shall be accompanied of proof of the flawed nature of the data for which correction is asked.

1. 3.You have the right to withdraw your earlier given consent for processing your personal data, in which case clause 8.4  will apply.

1. 4.You have the right to request that personal data pertaining to you be deleted if they are no longer required in light of the purposes outlined in article 3  or if you withdraw your consent for processing them. However, you need to keep in mind that a request for deletion will be evaluated by us against:
   •  overriding interests of us, your financial institution, the payment service provider or any other third party;
   • legal or regulatory obligations or administrative or judicial orders which may contradict such deletion.

Instead of deletion you can also ask that we limit the processing of your personal data if and when (a) you contest the accuracy of that data, (b) the processing is illegitimate or (c) the data are no longer needed for the purposes listed under article 3  but you need them to defend yourself in judicial proceedings.

1. 5.You have the right to oppose the processing of personal data if you are able to prove that there are serious and justified reasons connected with his particular circumstances that warrant such opposition. However, if the intended processing qualifies as direct marketing, you have the right to oppose such processing free of charge and without justification.

1. 6.You have the right to receive from us in a structured, commonly used and machine-readable format all personal data you have provided to us.

1. 7.If you wish to submit a request to exercise one or more of the rights listed above, you can send an e-mail to privacy@mateco.nl An e-mail requesting to exercise a right shall not be construed as consent with the processing of your personal data beyond what is required for handling your request. Such request should clearly state which right you wish to exercise and the reasons for it if such is required. It should also be dated and signed, and accompanied by a digitally scanned copy of your valid identity card proving your identity. If you use the contact form, we may ask you for your signed confirmation and proof of identity.

We will promptly inform you of having received this request. If the request proves valid, we shall honour it as soon as reasonably possible and at the latest thirty (30) days after having received the request.

If you have any complaint regarding the processing of your personal data by us you may always contact us via the e-mail address listed in this clause 8.7. If you remain unsatisfied with our response, you are free to file a complaint with the competent data protection authority, i.e. the Netherlands DATA PROTECTION AUTHORITY For more information, visit Autoriteit Persoonsgegevens.