Privacy statement
This is a translation of our Dutch text. If the two differ, the Dutch version applies.
To get your order to your door we need a few details from you. Your name, your address, an email address to reach you at. We are careful with those: we ask for no more than is necessary, we do not sell anything on and we keep nothing longer than we must.
Below you can read what we keep, why, for how long, and what you can do yourself if you want to see something or have it removed.
Who is responsible
Next Door Vintage
Hengelosestraat 64
7572 BR Oldenzaal
The Netherlands
We are the data controller for the personal data processed through nextdoorvintage.nl. Privacy questions come straight to us at the email address above.
Which data we process
Only what you give us yourself or what comes along automatically when you use our shop:
- With an order: your name, delivery address, billing address, email address, telephone number if you fill it in, your order and your payment status
- With contact by email: everything you write to us, plus your email address
- With a visit to the website: your IP address and the time, in the server log. That is needed to make the shop work and to counter abuse; we do not use it to track you.
We do not see or store your payment details. Your card number or bank login never reaches us; that processing takes place entirely at the payment service.
We do not process special categories of personal data and we do not take decisions about you on the basis of automated processing or profiling.
Why we process them, and on what basis
| For what | Legal basis |
|---|---|
| Processing, packing and sending your order | Performance of the sales contract |
| Handling your payment and making refunds | Performance of the sales contract |
| Sending order confirmations, track and trace and service messages | Performance of the sales contract |
| Answering your questions and complaints | Performance of the contract, or our legitimate interest in good customer service |
| Our administration and tax returns | Legal obligation |
| Making the shop work, securing and improving it | Our legitimate interest in a working, secure shop |
| Remembering your basket and your saved pieces | Performance of the contract, or your own request to use that function |
We do not send marketing emails unless you have signed up for them yourself. If you do, your consent is the basis and you can unsubscribe again with one click at the bottom of every message.
How long we keep them
- Order and invoice data: 7 years after the end of the financial year. That is not a choice of ours; the Dutch tax authority obliges us to.
- Email correspondence: up to 2 years after the last contact, so that we can still look up an old question or complaint.
- Cookies: your basket 30 days, your saved pieces 1 year. We keep server logs for a few weeks, for faults and abuse.
After these periods have passed, we delete the data.
Who we share them with
We do not sell your data and we do not pass it on for advertising purposes. To handle an order we do need a few parties:
- Our payment service providers. They process your payment and see the data needed for that. If you choose to pay later through Klarna, Klarna is the data controller for that payment itself and applies its own privacy statement.
- PostNL and DHL, to deliver your parcel. They receive your name, address and, if you have filled them in, your email address or telephone number for the delivery notification.
- Our mail provider, because your message has to live somewhere.
With the parties that process on our instructions, data processing agreements are in place, so that they treat your data just as carefully as we do.
Beyond that we only share something if the law obliges us to.
Transfers outside Europe
Most of these parties process your data within the European Economic Area. Where that is not the case, for instance because a supplier has servers or support outside the EEA, the transfer takes place on the basis of an adequacy decision of the European Commission or of the standard contractual clauses adopted by the Commission. If you would like to know how that works for a particular party, do mail us.
If you buy from us through Discogs, Whoppah or Catawiki
Then your order runs through that platform and that platform processes your data under its own privacy statement. From them we receive only what we need to send your parcel and handle the order. From that moment on, this statement applies to that data.
Cookies
As long as you are only looking around, we place no cookie at all. No statistics, no advertising, no measurement scripts from others. That is why you will not see a cookie notice here either: there is nothing to allow.
If you go on to do something, two cookies are needed. No more than that:
| Cookie | For what | How long |
|---|---|---|
mandje | Remembers what is in your basket. It only appears when you add the first piece. | 30 days |
bezoeker | Remembers which pieces you have saved with the heart, so that your favourites list is still there when you come back. It only appears with the first heart. | 1 year |
Both are a random number, nothing more. There is no name in them, no email address and nothing
from which we could work out who you are. They are HttpOnly, so no script can read
them, and they do not travel to other websites.
For these two we do not have to ask permission: they are strictly necessary cookies for something you set in motion yourself. That is the exception the law makes for them.
You can always delete or block them yourself through your browser settings. You will then lose your basket and your saved pieces; ordering will no longer work after that.
How we secure your data
Our shop runs entirely over a secure connection, recognisable by the padlock in your browser. Access to the management of the shop is protected with a strong password. We store no payment data and we keep our software up to date.
Do you think something has gone wrong with your data, or have you discovered a vulnerability in our shop? Mail us at info@nextdoorvintage.nl. We will pick it up and let you know what we do about it.
What you can ask for
It is your data, so you may do the following with it:
- see which data we hold about you
- have what is incorrect corrected
- have deleted what we are not legally obliged to keep
- have the processing restricted, for instance while a dispute is running
- object to processing based on a legitimate interest
- take your data with you in a common file format, where the processing is based on your consent or on the contract
- withdraw your consent, without that affecting what has already been processed before then
Send your request to info@nextdoorvintage.nl. You will have an answer within a month. If your question is complex, we may extend that period by two months; we will tell you so within that first month.
To prevent us giving data to the wrong person, we may ask you to send your request from the email address you ordered with, or ask for additional confirmation.
Not satisfied?
If you cannot resolve it with us, you have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Postbus 93374
2509 AJ The
Hague
The Netherlands
autoriteitpersoonsgegevens.nl
We would of course rather hear it ourselves first, because usually it is solved with an email.
Changes
If something changes about our shop or about the parties we work with, we will amend this statement. The current version is always on this page.