Privacy Policy

Van der Geest Optiek (‘we‘, ‘us‘, ‘our‘), is the owner of the website www. vandergeestoptik.com (the ‘Website‘). We are committed to protecting the privacy of our customers and online users (“you“, “your“, “your“, ‘you‘, ‘your‘). This Privacy Policy describes how we handle the personal data that we process through our Website, through our store and through the services offered on the above platforms (the “Services“). Thus, this Privacy Policy applies to your use of our Website and Services, along with your use of our store.

By visiting our Website or providing us with your personal data, you accept and agree to the terms of this Privacy Policy. All personal data processed by us will be handled in strict compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (the “AVG“).

1. Controller

The controller with regard to all personal data that we process is Van der Geest Optiek, established at Generaal Cronjéstraat 15, 2021JA, Haarlem, registered with the Chamber of Commerce in the Netherlands under number 34070312.

If you have any questions, please contact us by sending an email to (roy@vandergeestoptiek.com).

2. Collected personal data

2.1 We process information from visitors to our store and users of our Website, including when you wish to receive information from us, make an appointment via the form on our Website or by e-mail with your request for information. We process personal data on the basis of: (i) consent (pursuant to Article 6(1)(a) GDPR), (ii) the contract (pursuant to Article 6(1)(b) GDPR), (iii) compliance with a legal obligation (pursuant to Art. 6(1)(c) GDPR) and (iv) legitimate interests (pursuant to Art. 6(1)(f) GDPR).

In the form on our Website, we may ask you to provide one or more of the following personal data:

a) first and last name;
b) phone number;
c) email address; You can contact us at any time by email (roy@vandergeestoptiek.com) to request information. If you send us such an email, we may process the personal data and information you provide in your email.

We may combine the information you provide with other information we have processed about you, both online and in-store (including but not limited to your purchase history, your address, eyeglass prescription information, and/or date of purchase) , along with information we receive from public information sources and third parties (e.g. Google).

If you provide us with personal information about another person, you hereby represent that you are authorized to do so and that you allow us to use that information in accordance with this Privacy Policy.

2.2 When you use our Website, we may process and record your IP address. Your IP address is stored in a temporary log file. We may share information about your use of our Website with affiliates and partners, as further described in Sections 3.2 and 3.3 of this Privacy Policy.

In addition, like many other websites, we use cookies and other technologies to track which web pages are visited and how often. A cookie is a small file that is sent along with pages from a website and stored by your browser on the hard drive of your computer. An example of cookie-related techniques is the use of fingerprints and scripts such as Google Analytics. With the help of cookies, personal data can be stored or consulted, so that you can be recognized on a subsequent visit to the Website. For more detailed information about our use of cookies and similar technologies, please refer to our Cookie Policy.

3. Purpose of data processing

3.1 We process your personal data, as described in Article 2.1 of this Privacy Policy, for the following purposes:

a) to fulfill our obligations to provide you with our Services or products (by shipping and billing), or to fulfill other requests (such as online eye tests or contacting one of our store) (based on the contract (in accordance with Article 6(1)(b) AVG));

b) to contact you regarding follow-up services (such as transmitting the results of an online eye measurement), to answer your questions, to provide requested information, and/or to give advice (based on consent (pursuant to Art. 6(1)(a) AVG));

c) to request information (based on the contract (pursuant to Art. 6(1)(b) (AVG));

d) to secure our business objectives (based on legitimate interests (pursuant to Art. 6.1(f) AVG)), for:

• data analysis to improve the efficiency of the Services;
• audits to verify that our internal processes are functioning properly and to meet legal or contractual requirements;
• fraud and security checks, such as the detection and prevention of identity fraud or cyber attacks;
• completing, improving or making changes to our Website, products and Services
• identifying trends in the use of the Services, to understand which parts of our Services are of most interest to users; and
• determining the effectiveness of our promotional campaigns, so that we can tailor our campaigns to meet the needs and interests of our users.

e) to analyze personal data (e.g., purchase history, eyeglass prescription information, country and/or city for shipment, language) to provide personalized service offers (based on consent and legitimate interest (pursuant to Articles 6(1)(a) and (f) AVG), to:

• remind you that you need a new eye measurement, after 180 (three hundred and sixty) days from the time you had your last eye measurement;
• understand you better so we can personalize our interactions with you and provide you with information and/or offers tailored to your interests; and
• to better understand your preferences, so that we can deliver content through the Services that we believe will be relevant and interesting to you;

and

f) to comply with various legal obligations, including tax obligations (on the basis of meeting a legal obligation (pursuant to Art. 6(1)(c) (AVG));

3.2.In connection with marketing and promotional materials related to our products and Services, we may provide your personal data, as described in Article 2.1 of this Privacy Policy, to our partners, including our store in your area. You may therefore be contacted by our local store with such marketing and promotional materials. If you prefer to opt out of such communications, you may contact our by sending an email to (roy@vandergeestoptiek.com).

3.3 We use the automatically generated data, as described in Section 2.2 of this Privacy Policy, and your business data and personal data, as described in Section 2.1 of this Privacy Policy, to perform aggregate analysis for internal research and statistical and strategic purposes. This aggregate information does not identify you or your company. We use the aggregate information to optimize our Website, Services and products and to learn more about the use of our Website and products so that we can improve them.

4. Retention of data

4.1. We will continue to process the personal data for a period of two (2) years after your last purchase, or for as long as legally required or necessary and permitted for the purpose(s) for which the data was obtained. Immediately after these periods, we will destroy and/or anonymize the personal data.

4.2. The following (non-exhaustive) list of criteria is used to determine our retention periods (i) the duration of our ongoing relationship with you and the Services we provide; (ii) our possible subjection to any legal obligation(s); and (iii) other legal requirements (such as applicable statute of limitations period(s), litigation, or internal or external investigations).

4.3. Notwithstanding Article 5.1 of this Privacy Policy, we may process personal data for a longer period (i) if you ask us to keep the personal data for another two (2) years; or (ii) to comply with legal retention periods (which is, for example, required by tax laws); or (iii) to demonstrate compliance with applicable legal obligations (arising from, for example, the AVG or marketing laws).

4.4. If you request the deletion of your personal information by contacting us through the process described in Article 8 of this Privacy Policy, all of your personal information processed through our Website will be deleted, as also required by applicable law. This does not apply if we are required by law, for the completion of the transaction for which the information was processed, or for internal use, to retain such information.

5. Data protection

All personal information we process is treated confidentially. Therefore, we will take appropriate technical and organizational measures to secure and protect the personal data against destruction, loss, alteration, unauthorized disclosure or access or against any other processing of such personal data, to the extent that the above is accidental or unlawful. These measures guarantee an appropriate level of security in view of the nature of the data and the risks associated with the processing of the data. For example, we use Security Socket Layer encryptions throughout the Website.

6. Retention of data

6.1.Without prejudice to Sections 3, 6.1 and 6.2 of this Privacy Policy, we do not disclose personal information or personal data to third parties without your express consent, unless we are required to do so by applicable law or by order of the competent supervisory authority.

6.2 We remind you, however, that we may transfer your personal data and the information to our store, as set forth in Section 3.2 of this Privacy Policy.

6.3.We may employ other data processing companies to process personal data solely on our behalf. Such data processors shall only have the right to process the data necessary for the performance of their services and activities and in accordance with our express written instructions. The processor guarantees that it has taken appropriate technical and organizational measures to ensure that the processing of personal data complies with the requirements of this Privacy Policy and the AVG. The processor also ensures the protection of the rights of all data subjects. The processing of personal data by a processor is always governed by a written data processing agreement between us and the processor. For additional information about these data processors, please contact us according to the process described in Article 7 of this Privacy Policy.

7. Your right

7.1. You have the right to receive, upon request, confirmation from us as to whether or not we are processing your personal data. You can at any time access and modify the personal data that you provide to us when registering a customer through your account on the Website. You also have the right to send us a request to receive such information, by sending an email to (roy@vandergeestoptiek.com). Furthermore, you have the right to send us a request to see, receive, transmit, correct, delete or completely withdraw your consent to the processing of your personal data. We will process your request promptly and in accordance with the AVG. We will also send you a response without undue delay, at least within one month of receiving your written request.

7.2 You have the right to object at any time to the processing of your personal data by us. Upon such objection, we will no longer process your personal data unless we demonstrate that 1) we have compelling legitimate grounds for the processing which override your interests, rights and freedoms; or 2) processing is necessary to establish, exercise or defend a legal claim(s). We will send you a response without undue delay, with a maximum of one month from receipt of your written request.

7.3 If you have any complaints about our data processing or about your previous requests, please contact us at roy@vandergeestoptiek.com. You also have the right to lodge a complaint with the relevant data protection authority. In the case of the Netherlands, this is the Authority for the Protection of Personal Data.

7.4. If you have any further questions or comments, please contact us at roy@vandergeestoptiek.com.

8. Third Party Websites

Our Website may contain hyperlinks leading to external websites maintained by third parties. We cannot accept any responsibility for the content of these websites and for the way these websites handle your data. Please ensure that you read the applicable Privacy Policy, if any, of the websites you visit.

9. Revisions to this Privacy Policy

Please note that this Privacy Policy may be revised from time to time. Any revised Privacy Policy will be posted on our Website, where the most current version is available at all times. We encourage you to check our Website and the Privacy Policy regularly. If we make a change to this Privacy Policy that would affect your privacy rights, we will either seek your consent to the change or continue to adhere to our previous Privacy Policy if it involves information we processed when it was in effect. The last revision took place in May 2021 in Haarlem, the Netherlands.