1. Who we are
We are Liquor Zaar B.V., registered in the Netherlands with company number 73352616 and registered office at Ceresstraat 13, 4811 CA Breda, Holland.
2. The information we collect and how we use it
Information from your online interactions
We collect the following information from your interactions with the Website:
- How you access the Website and the devices that you use to access our Website. This includes collecting unique online identifiers such as IP address and your login data, browser type and version, time zone settings and location data, browser plug-in types and versions, operating system and platform;
Information that you share with us
When you submit personal data to us, inter alia, through data entry fields on our website, we collect the following personal data from you:
- your first name;
- your last name;
- your email address;
- your phone number;
- your (billing and shipping) address;
- your date of birth;
- your gender;
- any email communications, including attachments, which you send to us;
- where you are purchasing products through the Website, your payment information including cardholder name billing address; bank account and payment card details and information about the transactions such as the products or services purchased;
- your profile data, including your username and password for registering an account, purchases or orders made by you, your interests and preferences such as your marketing preferences or subscription for our newsletters;
3. How we store and use your personal data
We store and use your personal data for the following reasons:
- it is necessary in order for us to fulfil a contract that we have with you;
- it is required in our legitimate interests;
- it is required in order for us to comply with our legal obligations; or
- it is permitted because you have provided your consent to us.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, you may not be able to use our services.
Necessary for us to fulfil our contract with you
We collect, store and use your personal data including your name, (e-mail) address, login details and payment information and information about how you use and access the Website because it is necessary in order to provide our services through our website as requested by you and under our Terms and Conditions of use. This includes:
- making the Website and our services available to you;
- providing the Website and any services that you request;
- administering the Website and our services;
- where you are purchasing products through the Website, process your payment (including but not limited to using third party service providers to process such payment); and
Our legitimate interest
Sometimes, our use of your personal data is for purposes which are ancillary to the provision of the Website and our services. In those circumstances, we believe we have a legitimate interest in handling your personal data, and believe that the benefits of this storage and use of your personal data outweighs (potential) impact on you and not unduly prejudice your rights or freedoms. The relevant circumstances are:
- detecting and preventing fraud;
- keeping the Website and our services, products and IT systems secure;
- ensuring that our own processes, procedures and systems are as efficient as possible;
- analysing and enhancing the information that we collect;
- determining the effectiveness of our promotional campaigns and advertising;
- using IP addresses and device identifiers to identify the location of users and block any unauthorised users;
- dealing with your enquiries and requests (for example if you were to call customer services to ask for help and assistance then we would need to process your contact details);
- suggesting similar products to you that you may be interested in and to understand which products appeal to our customers; and
If we rely on our (or another person's) legitimate interests for using your personal data, we will undertake a balancing test to ensure that our (or the other person's) legitimate interests are not outweighed by your interests or fundamental rights and freedoms which require protection of the personal data.
For legal reasons
We will use your personal data in order to comply with our legal obligations, including if we are asked by regulatory bodies or law enforcement agencies to share your personal data with them.
When you have provided consent to us
Where you have given us consent, we may contact you by e-mail and/or text message with products and services which we think may be of interest to you.
If we rely on your consent for us to use your personal data in a particular way, but you later change your mind, you may withdraw your consent at any time through your online account or by contacting us at email@example.com, and we will stop doing so.
4. How we share your personal data who we share it with
We may disclose personal data under the following circumstances:
Third-party service providers: When we share information with third-party service companies to facilitate or to provide certain services on our behalf. This may include:
- IT infrastructure companies that facilitate our provision of the Website to you such as providers of our platform;
- Third parties who provide first level customer support on our behalf;
- IT support service providers;
- Payment service providers who will process your payments on our behalf; and
These companies are authorised to use your personal data only as necessary to provide these services to us. We require these service providers to respect the security of your data and to treat it in accordance with the law. To the extent necessary, we will enter into a data processing agreement with these service providers.
- Vendors who offer their products on the Website: We may provide your personal data to the vendors from whom you purchase products on the Website. These vendors need your personal data in order to process and deliver your product.
- Compliance with laws and legal proceedings: When we respond to court orders, legal process or to establish or exercise our legal rights or defend against legal claims, or as otherwise required by law.
- Merger or acquisition: When we need to transfer personal data about you if we are acquired by or merged with another company. If we are involved in a merger, acquisition, or sale of all or a portion of its our assets, you will be notified afterwards via e-mail and/or a prominent notice on our Website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.
5. International transfers
When transferring personal data outside the EEA, we will:
- include the standard contractual data protection clauses approved by the European Commission for transferring personal data outside the EEA into our contracts with those third parties (these are the clauses approved under Article 46.2 of the General Data Protection Regulation ("GDPR");
- ensure that the country in which your personal data will be handled has been deemed "adequate" by the European Commission under Article 45 of the GDPR; or
- (where appropriate when we are transferring your personal data to a recipient in the US) ensure that the recipient is part of the Privacy Shield which requires them to provide similar protection to any personal data shared between Europe and the US.
You can find out further information about the rules on data transfers outside the EEA, including the mechanisms that we rely upon, on the European Commission website here. You may request a copy of the mechanisms that we rely upon via firstname.lastname@example.org.
6. Cookies and similar technologies
Technologies such as cookies, beacons, tags and scripts are used by us and our partners, affiliates, or analytics or service providers. These technologies are used in analysing trends, administering the services, tracking users’ movements around the Website and to gather demographic information about our user base as a whole. We receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.
Whilst we take appropriate technical and organisational measures to safeguard the personal data that you provide to us, no transmission over the Internet can ever be guaranteed secure. Consequently, please note that we cannot guarantee the security of any personal data that you transfer over the Internet to us.
We are committed to protecting your personal data using appropriate technical and operational measures such as access controls that restrict and manage the ways in which your personal data is stored and handled.
8. Data Retention
We may delete your personal data (including any account that you set up to use on the Website) if you do not use the Website and our services in 10 years.
In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
9. Your rights
You have certain rights in relation to your personal data. If you would like further information in relation to these or would like to exercise any of them, please contact email@example.com at any time. You have the right to request that we:
- provide access to any personal data we hold about you;
- update any of your personal data which is out of date or incorrect;
- delete any personal data which we are holding about you;
- restrict the way that we process your personal data;
- prevent the processing of your personal data for direct-marketing purposes;
- provide your personal data to a third party provider of services;
- provide you with a copy of any personal data which we hold about you; or
- consider any valid objections which you have to our use of your personal data.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by applicable law). Please note, however, that certain personal data may be exempt from such requests in certain circumstances.
If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
We may collect and use your personal data for undertaking marketing by e-mail. We will send you certain marketing communications (including electronic marketing communications) if it is in our legitimate interests to do so for marketing and business development purposes.
However, we will always obtain your consent to direct marketing communications where we are required to do so by law and if we intend to disclose your personal data to any third party for such marketing.
If you wish to stop receiving marketing communications, you can click unsubscribe in any marketing e-mail from us, change your preferences through your online account or by contacting us at firstname.lastname@example.org.
11. Third party sites
13. Complaints, questions and suggestions
In the EU, you may also make a complaint to our supervisory body for data protection matters (the Dutch Data Protection Authority in the Netherlands (Autoriteit Persoonsgegevens)) or seek a remedy through local courts if you believe your rights have been breached.
You have the right to lodge a complaint with local data protection authorities in the EU if you believe we have not complied with applicable data protection laws. The local authority differs depending on the country.
We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.