Cema B.V. (hereinafter 'Cema') respects the privacy of anyone whose personal data are processed by Cema, including in particular visitors and users of the websites www.cema.nl (hereinafter referred to as 'the website'). Cema attaches great importance to the careful handling of personal data. Cema will process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).

Cema processes personal data that you yourself provide to Cema, such as in:

• Telephone or mail contact

• Entering into an agreement with Cema regarding the supply of products, or your request to enter into such an agreement

• Sending a message using the contact form or chat module on the website

• Subscribing to and receiving newsletters

The personal data you provide to Cema are processed for the purposes for which you have provided them and otherwise as described in this privacy policy.

If you provide Cema with personal data, e.g. for questions or complaints, they will only be used by Cema to deal with your request. If you have entered into an agreement with Cema, the personal data you provide will be used to carry out the agreement concerned.

In connection with the execution of an agreement concluded between you and Cema, the personal data you provide may be shared with third parties if and insofar as this is necessary in connection with the involvement of such third parties in the execution of the agreement concerned. For example, your name and address may be shared with a mail order company that delivers the products you have purchased to the delivery address agreed with you, or your payment details may be shared with an external payment provider if you pay for your order through the website.

If you have explicitly signed up to receive newsletters, Cema will only process your personal data to send you the requested newsletters. However, if you have previously entered into an agreement with Cema, Cema may send you commercial e-mail messages without prior consent, if these messages predominantly concern, or are relevant to, products previously purchased by you from Cema. You may opt out of receiving such messages by using the method indicated in the relevant message.

The aforementioned processing of personal data is permitted by law on the basis that you have given your implicit or explicit consent, or on the basis that the processing is necessary to carry out an agreement entered into between you and Cema or your request for such an agreement to be entered into. "Agreement" should be interpreted broadly in this context. Your possible subscription to receive newsletters is also considered an "agreement".

In addition, Cema processes personal data if and insofar as this is necessary on the basis of a statutory provision or court order, as well as on the so-called legal basis of "legitimate interests". Justified interests include for example detecting (attempted) illegal and/or criminal behaviour directed at Cema Webshop or third parties, for example in connection with the use of the website. Legitimate interests also include the processing (including storing) of your personal data by the hosting provider of Cema, to operate the website and email facilities of Cema, the operator of Cloud software used by Cema, such as OneDrive, for data storage and sharing your personal data with an accounting/bookkeeping firm to provide administration and bookkeeping services for Cema.

Cema stores your personal data within the European Economic Area ("EEA"). However, it may happen that certain personal data that Cema collects, are transferred to or stored outside the EEA because an external service provider of Cema is established there. If this is the case, Cema will ensure that the processing of your personal data outside the EEA takes place in a safe and lawful manner. Cema will therefore take the necessary steps to ensure that your personal data are sufficiently protected.

In all cases, only authorised Cema employees have access to your personal data and only to the extent necessary to carry out their duties. This also applies to third parties to whom Cema provides personal data as described above. Cema will under no circumstances sell your personal data. Those under Cema's responsibility, as well as third parties engaged by Cema, are obliged to respect the confidentiality of your personal data. To the extent that Cema outsources the processing of personal data to a third party, Cema will take the necessary steps to ensure that your personal data are adequately protected. Such steps include, if and to the extent required by law, entering into a processing agreement with such recipients to ensure that they take the same or similar technical and organisational measures as Cema, so that your personal data are adequately protected.
 

Cookies and similar techniques used by Cema:
Cema uses functional, analytical cookies, Social Media cookies, marketing cookies and similar techniques (such as Google Analytics, Facebook Pixel and Instagram Pixel that can automatically collect data when you visit the website). A cookie is a small text file that is stored in the browser of your device when you visit the website. Cema uses cookies with only technical functionality. These ensure that the website works properly and that, for example, your preferences are remembered. These cookies are also used to make sure the website works properly and to optimise it.

Cema also uses analytical cookies to collect data for research, in order to get a better understanding of the use of the website by its visitors. Analytical cookies help analyse how the website is used by collecting log data and visitor behaviour on the website in an anonymous form.

Cema also uses cookies to show relevant offers and advertisements through third party websites. Cema only uses information for showing relevant offers and advertisements if you have given your consent. Marketing cookies are used to collect this information. Cema may also link your personal data to any additional information Cema has received from you. Cema may also share your personal data with trusted third parties, e.g. advertisers and advertising networks, to provide you with personalised offers. These third parties may place their own cookies on your device to support CEMA Webshop with targeted advertising, tailored to your personal interests. These third parties will only collect your personal data insofar as you have given your permission for cookies to be placed for marketing purposes.

Social media cookies relate to buttons which serve to promote or share web pages on social media networks. These buttons work through pieces of code that originate from the social media networks themselves. Cookies are placed by this code.

The cookie policy on the website further describes the extent to which Cema uses cookies.

Your rights:
You have the right to request Cema to access, delete and rectify your personal data as well as to restrict the processing concerning you. You are also entitled to object to the processing and to data portability. This means that you can submit a request to Cema to send your personal data, which Cema processes, in a computer file to you or an organisation named by you.

Insofar as the processing of personal data is based on consent obtained from you, you have the right at all times to withdraw such consent, without affecting the lawfulness of the processing on the basis of consent before it was withdrawn.

You have the right to lodge a complaint with the Dutch Data Protection Authority or, if you live or are established in a country other than the Netherlands, with the supervisory authority there.

Retention of personal data:
Personal data are kept by Cema only for as long as is necessary in view of the purposes for which they were obtained. Cema implements appropriate technical and organisational measures to protect personal data against loss and against any form of unlawful processing. Taking into account the state of the art and the cost of implementation, these measures guarantee an appropriate security level in view of the risks involved in processing and the nature of the personal data to be protected. The measures shall also aim at preventing unnecessary processing of personal data.

Contact:
For questions about this privacy policy or questions or complaints about the processing of your personal data by Cema, please contact Cema.

Cema will be happy to help you if you have any questions or complaints about the processing of your personal data by Cema or if you wish to change or remove your personal data.

The contact details of Cema can be found on the website.

​