Privacy Policy
Spolia Opima B.V. attaches great importance to protecting your privacy. We therefore process only the personal data that is necessary to provide and improve our services. We treat all information we receive about you and about your use of our services with the greatest possible care.
Your personal data is never sold or passed on to third parties for commercial purposes.
This privacy policy applies to the use of the website and to all services offered through it by Spolia Opima B.V.
This privacy policy takes effect on 30/07/2024. When a new version is published, all previous versions cease to be valid.
In this privacy policy we explain:
- which personal data we collect;
- the purposes for which we use this data;
- the circumstances in which we share data with third parties;
- how we store and protect your personal data;
- the rights you have in relation to your personal data.
If you have any questions about this privacy policy, you can contact our data protection contact at any time. The contact details can be found at the end of this privacy policy.
Processing of personal data
Below we explain how we process your personal data, where it is stored, which security measures we use and who has access to your data.
Shop system
Shopify
Our online shop was built using software from Shopify.
Personal data that you provide to us when placing an order or using our services is shared with Shopify insofar as this is necessary for the operation of our online shop.
Shopify only receives access to your data in order to provide technical services to us. Shopify does not use your personal data for its own purposes.
Under our agreement with Shopify, the company is required to take appropriate technical and organisational security measures. These include, among others:
- SSL encryption;
- secure storage of personal data;
- strict security and password standards.
Shopify is also certified as a provider for the secure processing of credit card data.
In addition, Shopify uses cookies to collect technical information about the use of the shop software. As a rule, no personal data is stored for its own purposes in doing so.
Shopify reserves the right to use anonymised or technical data within its own group of companies in order to develop its services further.
In doing so, Shopify observes the statutory retention periods that apply in each case.
As Shopify is an internationally active company, personal data may also be processed outside the European Union — in particular in the United States. In such cases, processing takes place exclusively on the basis of the applicable data protection rules and appropriate safeguards under the General Data Protection Regulation (GDPR).
Web hosting
Strato
We use the services of Strato to host our website and for our email services.
Strato processes personal data exclusively on our instructions and does not use this data for its own purposes.
Technical metadata about the use of the hosting services may be collected. As a rule, this information does not constitute personal data.
Strato has taken appropriate technical and organisational measures to prevent loss, misuse of, or unauthorised access to personal data.
Strato is also contractually bound to confidentiality.
Email and newsletter
Shopify Email
Our website uses Shopify Email to send order confirmations, service emails and, where applicable, newsletters.
All emails you receive through our online shop or our web forms are sent via the servers of Shopify Email.
Shopify Email uses your name and your email address solely to provide these services and not for its own purposes.
At the end of every automatically sent email there is an “unsubscribe” link. If you use this link, you will no longer receive newsletters or marketing emails from us. However, this may mean that certain functions or messages of our online shop become limited.
Your personal data is stored and protected securely by Shopify Email.
In addition, Shopify Email uses cookies and other technologies to determine whether emails are opened or read. This information is used solely to improve the service.
Shopify Email may use anonymised data to optimise its services and may share it with affiliated companies or service providers where appropriate.
Strato
We use the services of Strato for our general business email traffic.
Strato has taken appropriate technical and organisational measures to prevent misuse of, loss of, or unauthorised access to personal data as far as possible.
Strato has no access to the contents of our mailboxes.
We treat all email traffic as confidential.
Payment service providers
Klarna
We use the payment service provider Klarna to process payments.
For this purpose, Klarna processes the following personal data, among others:
- Name
- Billing and delivery address
- Place of residence
- Email address
- Payment details
- Bank details
- Credit card details (where required)
Klarna has taken appropriate technical and organisational measures to protect your personal data.
Klarna may use personal data to develop its services further and — where legally permitted — share anonymised data with third parties.
If you choose a payment method such as “pay on invoice” or payment in instalments, Klarna may pass on personal data and information about your financial situation to credit reference agencies in order to carry out a credit check.
All of Klarna’s data protection and security standards apply to this processing as well.
Klarna does not store personal data for longer than is legally permitted.
Shopify Payments
We also use Shopify Payments to process payments.
In doing so, Shopify Payments processes the following data, among others:
- Name
- Billing and delivery address
- Place of residence
- Payment information
- Bank details
- Credit card details (where required)
Shopify Payments has taken appropriate technical and organisational measures to protect your personal data.
Shopify Payments may use personal data to improve its services and — where legally permitted — share anonymised data with affiliated companies or service providers.
If a payment method is chosen that requires a credit check (for example purchase on invoice or financing), Shopify Payments may pass on personal data and information about your financial situation to credit reference agencies.
All of Shopify Payments’ data protection and security measures apply here as well.
Personal data is not stored for longer than is required under the applicable statutory provisions.
Reviews
WebwinkelKeur
We collect customer reviews through the WebwinkelKeur platform.
When you leave a review via WebwinkelKeur, you are asked to provide your name and email address. This data is passed on to us so that we can match your review to your order.
In certain cases, WebwinkelKeur may contact you to obtain additional information about your review.
When we invite you to leave a review, we pass on your name and email address to WebwinkelKeur solely for that purpose.
WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data.
WebwinkelKeur may engage external service providers to deliver its services. We have given our consent for this. The same data protection and security requirements apply to these service providers.
Shipping and logistics
PostNL
When you place an order in our online shop, it is our task to ship it to the delivery address you have provided.
We work with PostNL for delivery.
For this purpose we pass the following data on to PostNL:
- First and last name
- Delivery address
- Place of residence
- Where required for delivery, a telephone number or email address.
PostNL uses this data solely to carry out the delivery.
If PostNL engages subcontractors, they may also receive access to the personal data required for delivery.
Invoicing and accounting
e-Boekhouden
We use the services of e-Boekhouden for our accounting and financial administration.
For this purpose we pass on the following data, among others:
- Name
- Billing address
- Place of residence
- Order details
- Invoice information
This data is used solely to manage our financial accounts and to issue invoices.
Your personal data is transmitted and stored securely.
e-Boekhouden is contractually bound to confidentiality and processes your personal data exclusively on our instructions.
Purpose of data processing
General purpose
We use your personal data solely to provide our services.
This means that every processing of your data relates directly to your order, your enquiry or your use of our online shop.
We do not use your personal data for direct marketing or other commercial purposes without your explicit consent.
Should we wish to use your data for a different purpose at a later point in time, we will ask for your explicit consent beforehand.
Your personal data is only shared with third parties where this is necessary to perform the contract, to comply with legal obligations, or for our accounting and administration.
All service providers we engage are bound to confidentiality by contract or by law.
Automatically collected data
Certain information is collected automatically when you visit our website.
This includes, for example:
- IP address
- Browser type
- Operating system
- Language settings
- Date and time of the visit
- Pages visited
This data is used solely for the technical optimisation, security and improvement of our website.
Where possible, this data is processed in anonymised form.
Legal obligations
In certain cases, Spolia Opima B.V. may be required by law to disclose personal data to the authorities.
This may be necessary, for example, in the context of:
- tax audits,
- court proceedings, or
- criminal investigations.
In such a case, we will only disclose personal data insofar as we are legally obliged to do so.
Retention periods
We store your personal data only for as long as is necessary to provide our services.
Your customer account will as a rule remain in place for as long as you use our services.
If you tell us that you no longer wish to use our services, or ask us to delete your personal data, we will treat this as a deletion request.
As a rule, personal data is stored for no longer than two years after the last contact or the last transaction, unless a statutory retention obligation applies.
Certain data, in particular invoices and tax records, must be retained for a longer period under statutory provisions.
Once the statutory retention periods have expired, this data is deleted or anonymised.
Your rights
Under the General Data Protection Regulation (GDPR) and the applicable Dutch data protection legislation, you have various rights in relation to the processing of your personal data.
Below we explain these rights and how you can exercise them.
To prevent misuse, we generally send copies of your personal data only to the email address we have on file for you.
If you would like to receive the data at a different email address or by post, we reserve the right to verify your identity.
We document all requests received. In the case of a deletion request, we store only anonymised administrative data about the request.
We provide copies of your personal data in a common, machine-readable format.
You also have the right to lodge a complaint with the competent data protection supervisory authority at any time if you believe that we are not processing your personal data properly.
Right of access
You have the right to know at any time which personal data we process about you.
On request, we will provide you with an overview of all the personal data we hold about you.
This overview also contains information about:
- the purposes of the processing;
- the categories of personal data;
- the recipients or categories of recipients;
- the storage period;
- the origin of the data, where it was not collected directly from you.
You will receive a response within 30 days of your request being received.
Right to rectification
You have the right at any time to have inaccurate or incomplete personal data corrected or completed.
Once the correction has been made successfully, you will receive written confirmation.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted.
For the duration of the restriction, your personal data will as a rule not be processed further, other than being stored.
You will receive a response within 30 days of your request being received.
Right to data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format.
On request, and where technically possible, we can transfer this data directly to another controller.
Please note that in certain cases such a transfer may mean that we can no longer provide our services properly.
Right to object
You have the right to object to the processing of your personal data at any time.
Once we receive your objection, we will suspend the processing of your personal data without delay until it has been assessed whether there are legitimate grounds for continuing the processing.
If your objection is justified, we will stop the processing permanently and — where legally permitted — delete your personal data or provide you with a copy.
Automated decision-making and profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — where that decision produces legal effects or similarly significantly affects you.
Spolia Opima B.V. does not take any such automated decisions to which this right would apply.
If you nevertheless believe that this is the case, you can contact our data protection officer at any time.
Cookies
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google LLC.
Google Analytics uses cookies to collect information about the use of our website. This information helps us to analyse our website, evaluate it statistically and improve it continuously.
The following data may be processed in the course of this, among others:
- Your IP address (shortened or anonymised where applicable)
- Browser type
- Operating system
- Pages visited
- Time spent on the site
- The source of your visit
- Device information
Google may pass this information on to third parties in accordance with the applicable statutory provisions, or have the data processed by third parties on Google’s behalf.
Google may also combine this data with information from other Google services in order to provide personalised advertising (Google Ads), among other things.
Further information about data processing by Google can be found in Google’s privacy policy.
Third-party cookies
Where services of external providers that use cookies are used on our website, this is explained accordingly in this privacy policy.
Changes to this privacy policy
We reserve the right to change or update this privacy policy at any time.
The current version is always available on this page.
Should material changes affect the processing of personal data already collected about you, we will inform you by email or by other appropriate means, where this is legally required.
Contact details
Spolia Opima B.V.
Zuiddijk 15
1461 EB Zuidoostbeemster
The Netherlands
Telephone: +31 (0)85 212 9075
Email: info@bacchusbrew.eu
Website: https://bacchusbrew.eu
Data protection contact
If you have questions about this privacy policy or about the processing of your personal data, you can contact our data protection contact:
Thomas Luyckx
Email: info@bacchusbrew.eu