General purpose of processing
We use your data exclusively for the purpose of our services (described above). This means that the purpose of the processing is always directly related to the assignment you provide. For example:
- Registering an order for products and services;
- contact after a contact request;
- Preparing offers and agreements;
- Performance of the concluded agreement;
- Delivery of our products or services;
- billing and administrative purposes;
- Notifying you of changes in our products or services;
- Sending a newsletter; and/or
- Optimize, improve and secure the functioning of the web store and website.
We will not use your data for (targeted) marketing, unless we have obtained your permission to send the newsletter or other direct marketing. If you share data with us and we use this data - other than at your request - to contact you at a later date, we will ask you for your explicit permission. Your data will not be shared with third parties other than as described above or to meet our administrative and legal obligations. These third parties are all bound to secrecy and data protection on the basis of the (processor) agreement concluded between them and us, or an oath or legal obligation.
In certain cases, we may also be required by law to share your data in connection with governmental fiscal or criminal investigations. In such a case, we are compelled to share your data, but we will resist within the possibilities provided by law.
Legal Basis(s)
In principle, the processing of your personal data is necessary for the performance of the contract concluded with you. If the processing of the personal data is not necessary for the performance of the contract, we will ask your permission for the data processing. In certain cases, the processing may also be necessary in the context of a legal obligation incumbent on us or for the protection of a general legitimate interest. In the latter case, we will always weigh our interests against your privacy interests.
Retention period
We will not keep your data longer than necessary. Pursuant to applicable statutory requirements, we must retain invoices and (financial) administrative personal data for at least seven (7) years after the data was recorded, so we will retain this data for as long as the applicable term lasts.
Security of personal data
We take the protection of your data very seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. To secure your personal data we use security software such as a virus scanner and firewall, passwords for electronic systems, a secure internet connection, backups and the like. If your data is shared with third parties, we ensure that they are also bound to secrecy and data protection on the basis of (processor) agreements, an oath or legal obligation. If you have the impression that your data is not properly secured or there are indications of misuse, please contact our contact person for privacy matters.
Your rights
Under applicable Dutch and European law, you as a data subject have certain rights with respect to the personal data processed by or on behalf of us. Below we explain what these rights are and how you can invoke them. In principle, in order to prevent misuse, we will only send copies and replicas of your data to your - already known to us - e-mail address. In the event that you wish to receive the data at another e-mail address or, for example, by post, we will ask you to identify yourself. We keep a record of completed requests; in the case of a forgetful request, we administer anonymized data.
You will receive all copies and copies of data in a common electronic format or in writing, if requested. We will respond to your request(s) as soon as possible, but no later than 30 days. We attach great importance to the protection of your personal data, you may at any time submit the requests below to us and we will be happy to work with you to find a solution. You can make your request(s) to our contact person for privacy matters. However, if you suspect that we are using your personal data in an improper manner, you also have the right to a complaint submit to the Authority for the Protection of Personal Data.
Right of inspection
You have the right to inspect the data that we process (or have processed) and which relate to your person or can be traced back to that person. If your request is granted, we will send you a copy of all the registered data at the e-mail address we have on record, together with an overview of the processors who hold this data, stating the category under which we have stored it.
Right of Rectification
You have the right to have the data that we process, or have processed, and which relate to your person or can be traced back to that person, adjusted. If your request is granted, we will send you a confirmation at the e-mail address we have on record that the data have been amended.
Right to data erasure
You have the right to request that the data we process or have processed, which relate to or are traceable to your person, be deleted without unreasonable delay. If your request is granted, we undertake to delete all data collected about you. In doing so, however, we are obliged to observe certain legal retention periods that may prevent immediate deletion of this data. If these reasons affect the deletion, we will inform you accordingly.
Right to restriction of processing
You have the right to restrict the data we process (or have processed) that relates to you or can be traced back to you. If your request is granted, we will send you a confirmation at the e-mail address known to us that the data will no longer be processed until you lift the restriction.
Right to Transferability
You have the right to have the data that we process, or have processed, and which relate to your person or are traceable to it, carried out by another party. If your request is granted, we will send you copies or copies of all the data about you that we have processed or that have been processed on our behalf by other processors or third parties at the e-mail address we have on record. In all likelihood, we will not be able to continue providing services in such a case, as the secure interconnection of data files can then no longer be guaranteed.
Right to object and other rights
Finally, you have the right to withdraw your possible consent for data processing at any time and/or object to the processing of your personal data by or on behalf of GoHybrid. If you object, we will immediately cease processing your data pending the resolution of your objection. If your objection is well-founded, we will provide you with copies and/or copies of the data that we process, or have processed, and then permanently discontinue processing it. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that it does, please contact our contact person for privacy matters.