Who is responsible for the processing of my personal data?
What are personal data?
Personal data are all data that are traceable to you as an individual. Just think of your name, phone number, address or email address. But also data such as your IP address or customer number are personal data. and other information that is unique to you, such as your Royal Things order history or surfing habits.
From who do we process personal data and how do we get this information?
We process the personal data of anyone who has had direct or indirect contact with Royal Things, such as (business) customers.
We get the data directly from you, when you visit our website, create an account and fill in certain details or when you contact us.
In some cases we receive your information from others. When someone sends a gift directly to you, we get your name and address information. We may also receive data from other parties, but only if you have given permission to provide certain information to us.
What data do we process from you, what do we use it for and how long will it be stored?
Data for processing your order
If you order something, we need certain information from you in order to be able to deliver your orders and keep you informed about your order. This information is also required for any returns or repairs.
We collect your name, email address, delivery address(es), payment details and your telephone number.
The data is required to complete the agreement you have concluded with us. Under the law we must keep the data related to your order for 7 years.
Data in your account
In your personal account we keep the following information: Your name, (delivery and home/office) address(es), telephone number, email address, payment details, gift certificates and gift cards.
In your account, we also store your order history including selected delivery options, including the digital articles and subscriptions you have closed.
In addition, we store the interests you have entered in your account, namely your wish list, email and personalization preferences.
It is our client’s promise to make our customers ‘ lives easier and more fun. That is why we store the data in your account as long as you are an active customer. If you have no longer logged in to us for 7 years, we will delete all your data. In addition, you can make a request at any time to have your data removed through our contact page.
Information about your contact with customer service
You can contact customer service 24/7. You can call, email or send us a message via social media, such as Facebook.
We can help you more quickly by saving your data next time. We keep the notes about the customer contact as long as you are an active customer with us.
When you send us a private message via Facebook, we will keep the messages for up to 6 months, or shorter if you delete the message yourself.
Data for an optimal shopping experience
First of all we make sure that our website works well so that you can shop optimally. To do so, when visiting Royal Things, we collect your IP address, information about your Internet browser, any language settings and information about the settings of the computer’s operating system or the mobile device you are visiting.
Data for marketing
Royal Things will keep your email address only if you give it to us. This email address is used to keep you informed about updates on our Website and for marketing purposes, such as information about new products. We will never disclose this email address to third parties, so no other parties will contact you. You can always opt out of our newsletter by clicking on the link in one of the newsletters you receive.
Information for contests and promotions
If you participate in an action or contest, we will ask you information, such as your name, address and/or email address. We need these to be able to perform the action and to announce the prize winner(s).
Data to prevent fraud
There is no one waiting for security incidents and fraud, neither do we. Therefore, we use personal information (including IP addresses and search, surfing and buying habits) to investigate, prevent and counteract unauthorized access and fraud.
If you’re using social media like Facebook, you can use ‘ like and Share ‘ buttons on Royal Things to share blogs that you like or find useful with your friends on your social media account. Royal Things does not get access to your social media account. We recommend that you carefully understand the privacy policies of the social media parties where you have an account so that you know how your data is used and how you can customize your settings.
With who will we share your data?
To be able to ship your order, we work together with various logistic partners, such as Sendcloud (DPD, Bpost and DHL). Our logistic partners receive your name, email address, telephone number and delivery address. They need this information to deliver your parcel to your chosen address.
Other external service providers
We also rely on other external service providers in order to help with different things. Sometimes they also need personal data. We only share the information necessary for the assignment that the external service provider carries out for us. We do not sell your data to these service providers or other third parties. And with all the external service providers we conclude agreements in which we agree on what they can do with the data.
The type of work that our external service providers perform for us are:
- Support in delivering our digital services such as hosting, maintenance and support of our websites and applications;
- Supporting our advertising and marketing campaigns;
- Providing financial services, such as payment services, debt collection agencies and credit reporting agencies.
Sometimes we have to pass on personal data to the government. This can occur first of all if certain public institutions need this information to carry out their tasks, such as the tax authorities. Also, the police or judicial authorities may need certain information in the event of fraud or abuse. Lastly, certain supervisors may be given access to personal data in the context of an investigation.
Where do we store your data?
We store your data within the European Economic Area (“EEA”). However, certain data that we collect may be transmitted to or stored at a destination outside the EEA, for example, because one of our external service providers is located there. When this happens, we ensure that this is done in a safe and lawful way.
How do we protect your data?
Royal Things takes many measures to secure your personal information. Both in the organisational and technical fields. We have a group of specialists working daily to secure our systems and search for vulnerabilities. Do we give your data to someone else? Then we demand that the other person handle your data just as carefully as we do. If you feel that this is not happening, please let us know through our contact pagina.
How do we deal with children’s data?
Our services are not aimed at children. This means that the use of Royal Things by customers under 18 years of age is only permitted with the explicit consent of a parent or guardian.
What rights can you exercise in relation to your data?
Right to Information
Right of Access
You have the right to request access to us at any time in the data we have available to you. You can request it through our contact page. We process requests within 30 days at the latest.
Right to correction
Right to raise objections
You have the right to object to the processing of your data if you disagree with the way in which we process your personal data. You can send this object via our contact page. We process requests within 30 days at the latest.
Right to dataportability
You have the right to receive data that you have provided to us under the agreement (s) you have concluded with us in a machine-readable format, so that you can keep this information in a database of you or another party. This relates to your name, address and residence data and order history. We offer you the possibility to request this data in a machine-readable format through our contact page.
Right to restriction
You have the right to request restriction of the processing of your data. This means that we may keep your data but not use it. This right arises in a number of cases. If you feel that this is the case, you can contact us through our contact page.
Right to be forgotten/request to delete account
You have the right to request us to remove any information we have about you. When you submit a request to delete your account, we will remove any data that is traceable to you except for the information we have to keep on the basis of the law. We offer you the possibility to submit a request through our contact page.
Right to lodge a complaint
You have the right to file a complaint about how we handle your data. If you have a complaint, we prefer to solve the issue together with you, please contact us through our contact page. Finally, you have the right to contact your personal data authority with your complaint.