Privacy at DNP

We take the privacy of your personal data and that of your employees very seriously. In this Privacy Policy, we explain as clearly as possible how we handle personal data.

To provide our services to you and your employees as effectively as possible, we request certain information from you via our website www.webshopgiftcard.nl. Below, we explain as fully and clearly as possible which personal data we request and how we use it.

We handle your data with care.

DNP Giftcard does everything it can to protect your data and the personal data of your employees. We therefore handle this data with care and comply with applicable laws and regulations, including the General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act. This means that we will, in any event:

Process personal data in accordance with the purpose for which it was provided. These purposes and the types of personal data concerned are described in this Privacy Policy.
Limit the processing of personal data to the minimum amount of data necessary for the purposes for which it is processed.
Ask for your explicit consent where this is required for the processing of your personal data or that of your employees.
Take appropriate technical and organisational measures to ensure the security of your personal data.
Only disclose personal data to other parties where this is necessary to fulfil the purposes for which the data was provided.
Be aware of your rights regarding your personal data, inform you of these rights and respect them.

DNP Giftcard is responsible for the processing of your personal data. If, after reading this Privacy Policy, or more generally, you have any questions or would like to contact us, you can do so via our contact page.

Who is responsible for processing your data?

DNP Giftcard BV, located at Professor Eykmanweg 9, 5144 ND Waalwijk, the Netherlands.

What data do we process?

Contact details, such as your name, email address, work or home address, telephone number, the message you leave with us, including any personal data you include in that message.
Cookies, including anonymous Google Analytics information.
Login code and password.
The name of the organisation you work for or represent, as well as your job title or position.
Information required to calculate or record invoices, make payments and collect outstanding amounts, including billing and delivery addresses and, where applicable, credit card and/or bank details, but only when you purchase services or products from us.
Information relating to the type of browser, operating system or device you use to visit our website.
The IP address from which you access our website and/or webshop.
Recordings of telephone conversations you have with our customer service or sales department.
Any other information you may provide to us.

How do we use this information and on what basis?

We process the personal data listed above for the following reasons:

For service purposes: to follow up on your message and keep you informed about the next steps.
For relationship management, marketing, customer administration and service purposes, including keeping you informed about the latest news from DNP Group and relevant services, carrying out marketing activities and measuring responses to those activities, managing our CRM system and improving the performance of our website.
To carry out sales-promoting activities.
To maintain adequate customer records and manage outstanding receivables.
For internal control and business security purposes.

The use of your personal data is necessary for:

The performance of agreements with our customers.
Compliance with our legal obligations.
Pursuing our legitimate interest in continuing to provide our services to customers as efficiently as possible.
Pursuing our legitimate interest in continuing to provide our services to visitors to our website as efficiently as possible, enabling optimal use of our website and managing our business relationships.
Pursuing your legitimate interest in receiving the correct information.
DNP Group's legitimate interest in protecting its property.

DNP Giftcard uses the contact details of existing customers to send service-related emails and commercial information, such as newsletters and invitations to events. You can unsubscribe from emails containing commercial information or adjust your preferences at any time by using the unsubscribe option included in each message or by emailing klantenservice@dnp-groep.nl.

DNP Giftcard only uses the contact details of business relations other than customers to send commercial information, such as newsletters and invitations to events, if you have given your prior consent. You can withdraw your consent at any time by using the unsubscribe option included in each message or by emailing klantenservice@dnp-groep.nl. We may ask you again after three years to consent to the use of your contact details.

Who do we share this information with?

DNP Giftcard provides personal data to partners that perform specific parts of our agreement. These partners include our printing company, fulfilment partner, IT partner, design studio and customer service and sales partner. All these partners have expressly agreed to comply with this Privacy Policy. Other than with these partners, DNP Giftcard will not disclose personal data to third parties without your prior consent, unless DNP Giftcard is required to do so by law or by a court order. We also do not use your data to track which advertisements may be of interest to you or to tailor advertisements to your interests.

DNP Giftcard uses various systems to process your personal data. The suppliers of these systems may therefore also process your personal data. For more information about these suppliers, please contact us at klantenservice@dnp-groep.nl.

Third parties, such as our accountant, may also gain access to your personal data in connection with assignments carried out on behalf of DNP Giftcard and/or supervisory responsibilities they perform in relation to DNP Giftcard. DNP Giftcard has entered into agreements with all parties that have access to your personal data to ensure sufficient safeguards for the careful processing of your personal data. This is in accordance with the law, DNP Giftcard's internal privacy policy and this Privacy Policy.

If we provide third parties with access to your data, we only do so if we are satisfied that those third parties will use the data solely in a manner and for a purpose related to the purpose for which we originally obtained the data, and only in accordance with this DNP Giftcard Privacy Policy.

In addition, all confidentiality obligations and security measures required by law will apply in order to prevent your personal data from being disclosed to other parties without proper justification. In doing so, we always consider how we can respect your right to privacy as fully as possible.

If we wish to transfer your data outside Europe, for example because a data centre or one of our suppliers is located there, we will only do so under the conditions required by law, for example by means of a contract to which the EU Model Clauses apply.

How long do we retain your data?

DNP Giftcard does not retain your personal data for longer than is necessary for the purpose for which it was stored. We apply certain retention periods, after which we delete the data:

If you have subscribed to a newsletter or given consent to receive personalised messages, we will retain that consent for 2 years. If at any time you decide that you no longer wish to receive the newsletter or personalised messages, we will also retain a record of the withdrawal of your consent.
If you are a customer, we will retain your data for the duration of the agreement you have entered into with us and for a further 12 months after that. If you have purchased from DNP Group, we will retain your data for 7 years due to statutory tax retention requirements.
If you are a prospective customer and have explicitly agreed that we may contact you, we will retain your data until you unsubscribe or until 12 months after the date on which you last had contact with us.
Inactive customer accounts will in any event be deleted after 7 years.
Tax regulations require us to retain our records containing your invoicing, payment and order details for 7 years.
Recorded telephone conversations are normally deleted after 30 days, unless we are legally required to retain a conversation for a longer period.
When sending individual shipments, personal data is processed by us for the purpose of entering into and carrying out the assignment as agreed with the customer. The data is used solely to perform the assignment relating to the Christmas gifts. The data is not used for any other purposes. Personal data is deleted from DNP Giftcard's systems after completion of the assignment.

In addition, DNP Giftcard may retain your data for longer than the periods stated above in certain cases if required to do so by law or if longer retention is genuinely necessary for the performance of our activities, for example to handle complaints, resolve disputes or prevent fraud and misuse.

How do we protect your personal data?

We take all reasonable and appropriate security measures to protect our visitors and participants against unlawful access to, alteration, disclosure or destruction of personal data. In doing so, we comply with applicable security standards.

If, despite these security measures, a security incident occurs that is likely to have adverse consequences for your privacy, we will inform you of the incident as quickly as possible. We will also inform you about the measures we have taken to limit its consequences and to prevent a recurrence in the future.

Where do we store your data?

As a general rule, the personal data we collect from you is always stored in the Netherlands.

In exceptional cases, data may be transferred to and stored outside the European Economic Area (EEA). In such cases, it may also be processed by staff outside the EEA who work for us or for one of our suppliers.

In that case, the data protection legislation of the relevant third country will have been approved by the European Commission, or other applicable safeguards will have been put in place. Further information is available from our privacy coordinator at klantenservice@dnp-groep.nl.

What rights do you have regarding your personal data?

You may object to the use of your personal data, for example if you believe that the use of your personal data is not necessary for the performance of our activities or for compliance with a legal obligation.
You have the right to access your personal data. This means that you can request information about which personal data we hold about you and the purposes for which that data is used.
If you believe that we hold incorrect personal data about you, you can ask us to correct it. You can also ask us to restrict the processing of your personal data, including for the period we need to assess your requests or objections.
You can ask us to delete your personal data from our systems.
You can ask us to ensure that your personal data is transferred to another party.

We will comply with your request unless we have a compelling legitimate interest in retaining the data that outweighs your privacy interests. If we have deleted the data, we may not be able, for technical reasons, to immediately remove all copies of the data from our systems and backup systems.

We may refuse to comply with the requests referred to above if they are made unreasonably frequently, require disproportionate technical effort, have disproportionate technical consequences for our systems or put the privacy of others at risk.

You can submit any of the above requests or objections by sending a letter containing your name, address, telephone number and a copy of a valid identity document to DNP Giftcard's privacy coordinator. The privacy coordinator can be contacted at klantenservice@dnp-groep.nl. Please make sure to make your Dutch citizen service number (BSN) illegible on the copy of your identity document before sending it to us.

Where can you find more information about how DNP Group handles your personal data?

If you have any questions or would like more information about the use of your personal data and your rights, you can contact DNP Group's privacy coordinator at klantenservice@dnp-groep.nl.

If you are not satisfied with the way DNP Group handles your questions, objections or complaints, you can submit a complaint to DNP Group by contacting klantenservice@dnp-groep.nl.

If, after that, you are still not satisfied with the way DNP Group has handled your complaint, you can submit a complaint about the use of your personal data to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-over-gebruik-persoonsgegevens?qa=klacht.