Privacy Policy

A legal disclaimer
 

Not only do we at De Kade Boutique try to provide you with our finest products, we also try to be completely transparent about how we (might) use – or in legal terms: “Process” – your Personal data (in other words the information you provide us) e.g. for the Purpose of being able to send you our kick ass products once ordered or in case you want to provide us with information on your own accord - e.g. if you want to find out about your – soon to arrive – order.

In this pretty long document, we try to explain step by step how we deal with your privacy in the different contexts that we might have the pleasure to meet each other. Although we realise that this document might not be as exciting as a good book, we do suggest to take the time to read it as we find it very important that our customers, visitors and other Data subjects involved know that their privacy is respected! (Estimated reading time: far too long, but not so long that you would say: screw it!)

​

1. Who are we and why this privacy policy?

We – De Kade Boutique (hereinafter “DE KADE B.V.”, “we” or “us”) – describe to you – our Data subjects (hereinafter “you”, the “customer” or “Data subject”) – in this Privacy policy how we deal with your privacy while collecting and further Processing your Personal data (see section 3 for the definition) in accordance with the General Data Protection Regulation (in short: the GDPR). With this Privacy policy, we intend to specifically inform you in detail about: us as the Controller of your Personal data, in which (different) capacities we might be in contact with each other (see also: the categories of Data subjects), information about the Processing of your Personal data, the Purposes we rely on while Processing your Personal data, the Legal basis on which the Processing of the Personal data is based on, the Retention periods that we apply while Processing your Personal data, the use of Cookies and tracking technologies on our website(s), if and under what conditions Data transfer takes place to other organisations/countries, what organisational and technical measures we have taken and the rights you can exercise in context of Processing your Personal data. This Privacy policy is not necessarily a comprehensive documentation of our complete data Process. We have attempted to incorporate the most relevant topics as careful and comprehensible as possible. It is however possible that, depending on the specific circumstances and/or the relationship between us, other Privacy policies, protocols, Processing agreements, disclaimers, general terms and conditions, conditions of participation and/or other documents may be applicable while we have a business relation.

​

If you cannot seem to find the desired information in this Privacy policy, please also take a look at the Privacy policy on our main website as we might have taken care of what you are looking for over there: www.coffeeshopdekade.nl.

​

The Controller - Who we are:

DE KADE B.V.
Address: Stadionkade 107, 1076 BN (Amsterdam) 
E-mail: [info@coffeeshopdekade.nl](mailto:info@coffeeshopdekade.nl
Tel: + 31 (0) 20 67 38 102
Chamber of Commerce: 60970677 (NL)
VAT(btw)-Number: NL854142368B01

 

Please note: In the case that a certain term is defined within the GDPR, any (undefined) term in this Privacy policy shall have the same meaning as defined in the GDPR itself. You may find the GDPR in any (European) language by clicking here.

​

This Privacy policy was last revised on the 1st of November, 2021. DE KADE B.V. reserves at all times the right to change or revise the current version of this Privacy policy. We advise you for that reason to revisit this page on a regular basis in order to stay updated with the latest version of our Privacy policy. If we find it necessary to make major changes to (parts of) this Privacy policy, we will make sure that a clear statement will follow on the homepage of our website: https://www.cofeeshopdekade.nl and/or will be communicated to you by e-mail (if you have registered your e-mail address with us) when it is required that the modified version of the Privacy policy is made directly available to you. If you in any case want to contact us about any (Personal) data (protection) related concern(s), then please do not hesitate to contact us with the contact details provided above!

​

2. Categories of concerned Data subjects

We, you and DE KADE B.V., might be involved with each other in different capacities. In these different capacities, we might Process (different sets of) your Personal data. To clarify whose Personal data we (might) Process, you’ll find the list below of the most common Data subjects we interact with (please be advised that this list is not intended to be complete):

• Potential, past and current online customers (interested in) purchasing our products;

• Business partners/contacts, affiliated partners and/or other affiliated parties involved (in particular (Third) parties involved in the business operations and/or creation, facilitation or realisation of our (online) services and/or products);

• (Web)users on our website or (via) online (social media) platforms (e.g. Facebook and Instagram);

• (Legal) representatives, proxies, contact persons, and/or employees involved in the (business) relationship between any of the above-mentioned categories of Data subjects and DE KADE B.V.;

• Employees of DE KADE B.V.;

• Other categories of Data subjects not specifically mentioned herein.

​

3. The collection and Processing of Personal data

Let’s start with defining what is meant by Personal data. In this Privacy policy “Personal data” is defined as: “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular, but not limited to, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”. Or simply said: every piece of information that alone, or in combination with other information, could eventually identify a (specific) person.

​

We will only collect and Process Personal data that we effectively need for our (pre-)specified Purposes for Processing as laid out in section 4 of this Privacy policy. We also periodically review the Personal data that we obtained from you and delete anything we do not need, use (anymore) or have no (longer a) Purpose and/or Legal basis for.

​

We furthermore primarily Process Personal data – according to our Purposes – acquired (directly) from our customers, business partners/contacts, affiliated partners and/or other affiliated parties, as well as from other categories of Data subjects as mentioned under section 2 in the context of our business relationship(s) with them and/or collected from them as web users when operating our website(s), (social media) platforms, and/or other (online) applications.

​

If you at this point wonder what is meant with Process or a synonym of that, then please be informed of the following: “’Processing’ means any operation or set of operations which is performed on Personal data or on sets of Personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”. Or simply said: any use of Personal data of (EU) Data subjects.

​

Please be advised of the following: our (digital) services, the purchasing of products, website(s) and/or other online (social media) platforms do not intend to collect the Personal data of (website) visitors under the age of 16 or visitors in the age range of 16-18 years. In the unusual case that we do need to Process data of a minor, we then only do so with the explicit legal Consent of the parent(s) or guardian(s). Unfortunately, we can never confirm (with certainty) the age and/or technically prohibit a minor visiting the website(s) and/or social media platforms as they are (also) accessible to minors. For that reason, we recommend that you are involved in the online activities of your minors so that it can be prevented that they disperse their Personal data without your Consent. If you believe that we have erroneously Processed the Personal data of a minor, then please contact us (section 1) so that we can inspect this immediately and, if necessary, correct it accordingly.

Please also note that if you provide us with Personal data of other individuals (e.g. from contacts, colleagues, acquaintances, friends, family members and/or other individuals), please make sure that the respective individual(s) is (or are) aware of this Privacy policy and only provide us with their Personal data if you have their permission to do so and provided such Personal data is accurate and truthful.

​

There are various methods by which you can provide us with and/or by which we collect/Process Personal data from you. For your information, in this Privacy policy we only refer to the most common ways in which Personal data is collected/Processed by DE KADE B.V. The categories of Data subjects mentioned in section 2 may provide us with their Personal data while:

• Visiting our store in Amsterdam;

• Visiting and/or browsing through our website(s);

• Purchasing our products/entering an agreement (online);

• Filling in the dedicated (web)forms;

• Registering to our (digital) services/newsletter;

• Communicating by means of e-mail, telephone, (certified) postal mail and/or similar communication methods;

• Responding to our (general) messages and/or sending (private) messages via social media platforms (such as Facebook or Instagram);

• Voluntarily providing us with your Personal data via any of the above or similar methods;

• Other contacting/receiving/Processing methods (of Personal data) not taken into consideration herein.

​

Insofar it is above-mentioned methods of data collection/Processing. DE KADE B.V. may for example also obtain Personal data from publicly accessible sources (e.g. commercial registers, debt registers, press, internet and social media) and/or may Process such information from business partners/contacts, affiliated partners, other associated parties and/or otherwise involved (Third) parties (e.g. legal representatives, necessary and permitted to us, we may also obtain Personal data from you in addition to the expert/specialists, authorities and ICT service providers) while engaging with and/or performing the agreement between us, under the condition that we have a (specific) pre-designated Purpose and a Legal basis for the Processing of such Personal data. However, generally we will not Process such information from most of our Data subjects – e.g. (web) visitors and/or our customers. In case we do (need to) Process such information, we will then make sure to inform you properly beforehand.

​

Apart from the (requested) Personal data you directly provide to us or is provided at your own discretion, the categories of Personal data that DE KADE B.V. collects and Processes (either being requested or sourced as specified above) depends on the type of (business) relationship you have with us. Some of the following categories of Personal data might therefore not be applicable to your (business) relationship with us. For transparency, please find the following – non-exhaustive – list of categories of Personal data that we (might) Process during our (business) relationship for which we have a pre-designated Purpose and a Legal basis, as will be further explained in section 4 of this Privacy policy. We furthermore do not Process more (Personal) data than is necessary for the Purpose that we Process your Personal data for (e.g. we will only Process your e-mail address while subscribing for our newsletter and not ask you for your name, address or phone number as we do not need this information in order to be able to send you our amazing newsletter full of valuable information):

1. (First and last/business) name, e-mail address, (shipping/billing) address and phone number;

2. Bank account number (usually the last 4 digits), file/case references, order numbers/references (in case of an online order: IP address), and/or all other (Personal) data necessary or helpful in the performance of the agreement(s) between us;

3. Information/extracts from (public or restricted) registers (e.g. Chamber of Commerce);

4. Information in connection with your professional role and activities;

5. Personal data about you in correspondence and discussions with other (Third) parties;

6. Credit/debit rating information;

7. Information provided to us by individuals associated with you such as friends, family, consultants, legal representatives and/or in other ways involved (Third) parties (e.g. in the form of references, delivery address(es), powers of attorney, information regarding legal regulations such as anti-money laundering and export restrictions for Purposes such as concluding or executing agreements with you);

8. Information from or regarding distributors and other business partners for the Purpose of ordering or delivering products or services to you or by you;

9. Information about you Processed from social media or internet (insofar required in connection to e.g. job applications, media reviews, marketing/sales, personalisation of our (digital) services or products et cetera);

10. (General) statistical data in connection with your use of our website(s) (e.g. anonymised IP address(es), information regarding your device and settings, (our) Cookies, date and time of your visit, websites/pages and content retrieved, applications used, referring website, localisation data and/or other general statistical data about the use of our website and/or content);

11. Data received in connection with administrative or court proceedings (e.g. in the unlikely event that there is a conflict between us);

12. In some cases, in the context of our business relationship: company details, financial information, signature, Personal data in correspondence between you and other (Third) parties as well as all other (Personal) data necessary, Legally obligated and/or helpful during the (business) relationship between you and DE KADE B.V.;

13. Information about your appearance - in the form of images and/or videos of recorded situations - obtained via camera surveillance in order to protect our visitors/customers or employees and/or their/our properties as well to prevent mischief. Please also inform yourself about our Camera surveillance protocol;

14. (Identification) information like your date of birth and picture from an official legal document in order to confirm that you meet the legal age requirement to enter our store;

15. Any other (Personal) data necessary and/or relevant while conducting our business relationship with you (e.g. feedback, (e-mail) correspondence, information provided on your own initiative – e.g. socio-demographic data – et cetera);

16. In the context of a(n open) job application we might Process Personal data such as contact details, CV, grade lists, reference letters, diplomas, a motivation letter and/or other (job) specific information while assessing for potential employment. For screening Purposes, we may also Process online/publicly available information about you such as your social media profiles.

​

4. The most common Purposes, Legal basis and Retention period(s) for the Processing of your Personal data

We primarily use your Personal data for the Purpose of concluding and executing agreements with our customers and business partners, in particular in connection to: carrying out our services/delivering our products in accordance with our agreement(s), providing our services and content as well as expanding, developing and/or investing into new services, products and/or business opportunities. We might also use your Personal data for the Purpose of providing (information on) our other (potentially interesting) service(s) and/or products to you and for the procurement of services/products from our business partners/contacts, affiliated partners and/or other affiliated parties involved, as well as to comply with our domestic and foreign Legal obligations. It is also possible that you are involved in our data Processing in the capacity of any of the other categories of Data subjects, as stated in section 2. To provide you a clear overview, below you will find the most common Purposes that we (might) invoke while Processing your (or other individuals) Personal data. In this paragraph, we explain on which Legal basis the Processing of your Personal data relies and which Retention period we apply for the Personal data we Process. Please note however that this list is not exhaustive; we may also Process your Personal data in the case that we have a Purpose that is compatible with an ‘original’ Purpose as mentioned under section 4.

​

• Entering into and executing agreements (online) in regard to our services and products and/or creating an online account:

Your Personal data (section 3: A, B & H) may be Processed by us for entering into and executing (online) agreements with you in the context of purchasing and delivering our products, (online) services and might be used further for amongst other things: maintaining contact with you about and in regard to our (online) agreement, the order status, for invoicing/payment Purposes, for (online) account management (and other administrative matters) and for maintaining our (online) business relationships with you. We also allow our customers to create an online account on our website(s). While creating an online account, we (may) Process (certain) Personal data (section 3: A) to allow for an easy and optimised order Process. When logged-in, customers do not have to fill in their Personal data (again) to be able to conclude the agreement/order products with/from us.

​

We Process the Personal data on the Legal basis of ‘Contractual necessity’ (“performance of a contract”). If we cannot invoke the Legal basis of Contractual necessity, we then may assert the Legal basis of our ‘Legitimate interest’, insofar we have one. We may also Process the Personal data because of our ‘Legal obligation’ or sometimes (e.g. when creating an account) ask for your ‘Consent’. The above-mentioned information is kept for as long as necessary to properly perform the agreement between us and/or delivering our products to you. We then afterwards delete or Anonymise your Personal data, unless we have a Legal obligation to keep (part of) it longer or have another Purpose and/or Legal basis for the continuance of Processing the Personal data. The financial/tax information regarding our business relationship is kept for as long as is necessary to comply with our Legal obligation to keep our (tax) administration (seven years minimum).

​

• Entering into and executing agreements (in store) in regard to our services and products:

Your Personal data (section 3: B & M) may be Processed by us for entering into and executing the agreements between you and DE KADE B.V. in context of purchasing our products and (might) be further used for e.g.: maintaining contact about and in regard to the agreement concluded between us, for invoicing/payment Purposes, for account management (and other administrative matters) as well as for maintaining our business relationships with you. We Process the Personal data on the Legal basis of ‘Contractual necessity’ (“performance of a contract”). If we cannot invoke the Legal basis of Contractual necessity, we may then assert the Legal basis of our ‘Legitimate interest’, insofar we have one. We may also Process the Personal data because of our ‘Legal obligation’ or sometimes also ask you for your explicit ‘Consent’. The above-mentioned information is kept for as long as is necessary to properly perform the agreement between us and/or delivering our products to you. We then afterwards delete or Anonymise your Personal data, unless we have a Legal obligation to keep (part of) it longer or have another Purpose and/or Legal basis for the continuance of Processing the Personal data. The financial/tax information in regard to our business relationship is kept for as long as is necessary to comply with our Legal obligation to keep our (tax) administration (seven years minimum).

​

• To contact – or reply – to you (after contacting us):

In case you ask us questions, make requests, fill in online (contact) forms or use the alternative messaging options on our online (social media) platforms/website(s), we in that case (may) Process your Personal data (depending on the information you provide us: see section 3: A - O). With the use of this Personal data we (try to) get back to you and - depending on the extent of your question, request or registration - address you promptly and accordingly.

We Process this information either under the Legal basis of ‘Contractual necessity’ (“performance of a contract”) or under the Legal basis of our ‘Legitimate interest’ to respond to you and/or to (eventually) conclude the contact with you in case we cannot invoke the Legal basis of Contractual necessity. In some cases, we might ask you for your explicit ‘Consent’. In any case we will keep your Personal data until we think you are satisfied with our response, unless another Purpose or Legal basis justifies a longer Retention period for the use of this Personal data. If you have registered to our services or purchased our products, we then will keep the registration information (Personal data) until the agreement with you has been executed, or longer insofar we can invoke another Purpose and/or Legal basis for the continuance of Processing the Personal data and/or as long is necessary to comply with our ‘Legal obligation’ to keep our (tax) administration (seven years minimum).

​

• For marketing, advertising and market/opinion research of our (digital) services and products:

While visiting us online (via our website(s)), your Personal data (see section 3: A, C, D, I, J & O) may be Processed for the marketing and advertising of our (digital) services and product(s) (content) or those of our (affiliated) business partners/contacts, affiliated partners and/or other affiliated parties, and provided that you have not objected to the use of your Personal data for this Purpose.

We primarily Process this information on the Legal basis of your ‘Consent’ or because it is in our ‘Legitimate interest’ (e.g. business continuity) to Process this Personal data. We keep this information as long as we have your Consent and/or may exert (any of) our Legitimate interests. In any case your Personal data for this Purpose will be deleted after three years, unless we have agreed upon differently or still have an active business relationship with each other.

Providing, optimising and developing our website(s), (digital) content, services and products:When you use our website(s) and/or (digital) services, we (may) obtain general visitor data (see section 3: J). We use this data for statistical analyses (e.g. visit and click behaviour) of our website(s). With the use of this data we try to evaluate our systems, security, stability and comfortable use of the website(s), to ensure a smooth and reliable connection setup, as well as for optimising the functionality of the website(s). We try to Pseudonymise or Anonymise this data as much as possible and do not provide any of this data to other (Third) parties who could use it for their own Purposes, unless explicitly specified in this Privacy policy. In some cases, we or affiliated business partners/contacts, affiliated partners and/or other affiliated parties involved may also Process Personal data through the use of Cookies while using our website(s). When that is the case, we will explicitly inform you. See section 5 for more information on the use of our Cookies and/or similar technologies.

We use this Personal data on the Legal basis of your ‘Consent’ or our ‘Legitimate interest’ while monitoring and improving our website(s) and/or (digital) services and products. Anonymous data (which no longer contains any Personal data) is kept as long as is relevant to us. Personal data collected via our website(s) is (or are) kept until you withdraw your Consent or we no longer have a use for this data. In any case your Personal data will be deleted after five years, unless we have agreed upon differently or have an active business relationship with you.

​

• Sending and providing our newsletter:

We send out a quarterly newsletter for which we provide the option to subscribe (see section 3: A). Once subscribed, you receive a periodical newsletter via e-mail with information, news and developments in regard to our products, services/content as well as general news items. If you wish to cancel this subscription, you may do so at any time via the unsubscribe link provided in the e-mail(s) sent to you including the newsletter.

Your e-mail address will only be added to the list of subscribers after obtaining your ‘Consent’ while registering to our newsletter. We keep this information until you cancel the subscription or in a different way withdraw your Consent. In case you withdraw your Consent/unsubscribe, we then register your e-mail address on the blocking list to be certain you do not receive the newsletter again.

Protecting the safety of our customers and that of our employees, property, and products through the use of camera surveillance when visiting our store:To protect the property and safety of our visitors/customers and employees, as well as to prevent/minimise theft, nuisance, destruction, vandalism, other criminal activities or to support private- or criminal proceedings, we use visible camera surveillance in some (generally accessible) areas as well as the front portal of our bathroom. We, of course, will make sure that you’ll be notified of the presence of camera surveillance as well as the position of the (individual) cameras by means of a sticker with the symbol of a camera. With the use of this camera surveillance, DE KADE B.V. (may) Process(es) Personal data (section 3: M) by means of video recordings for surveillance Purposes. In the rest of this paragraph, you can read what we do with the recordings, how long we keep them, what rights you have and how you can exercise them. In addition to this, we have a specific Camera surveillance protocol wherein we describe our (GDPR) approach in (more) detail in regard to the camera surveillance. Please don’t hesitate to ask us while visiting our store in Amsterdam if you wish to inform yourself more in detail about the camera surveillance.

We use the Personal data that we (might) Process via camera surveillance on the Legal basis of our ‘Legitimate interest’ for the Purpose to protect the safety and property of our visitors/customers, employees in and around our store as well as to prevent and/or minimise theft, nuisance, destruction, vandalism, other criminal activities or to support private- or criminal proceedings. The impact on the privacy of the Data subject(s) through our use of camera surveillance is limited to that which is necessary to protect the visitors/customers, employees and (their) property of DE KADE B.V., as well as the objects and persons who at that moment are in any way entrusted to the security of DE KADE B.V. and e.g. to be able to make a substantiated report of incidents. In our considerations regarding camera surveillance, we have taken the interests of the persons whose data is being Processed as much as possible into account. For example, we do not place cameras in locations where people should generally be able to assume their privacy unharmed. For the safeguards put in place to limit the invasion of privacy of the Data subject(s), please see our Camera surveillance protocol.

Use and exchange of information obtained from our camera installationIn the (sole) event(s) of incident(s) or suspected criminal offense(s) of which DE KADE B.V., one of its employees or visitors/customers wishes to report to the investigative authorities, the Processed video material can be used to identify those involved. To this end, the images can be made available to the investigative authorities to support the report regarding a criminal offense. The camera material will not be shared with other (Third) parties, unless there is a(n) (Legal) obligation to do so, or if a Data subject uses their Right of access (on the Personal data pertaining exclusively to him/her). The persons involved in the Processing of the camera images have an explicit duty of confidentiality. DE KADE B.V. does not use facial recognition or other methods with which persons can be identified electronically. Additionally, no sound recordings are made or Processed during the camera surveillance.

Security and storage of Personal data obtained from our camera installationThe camera images are stored (and Processed) only within the Netherlands. The security of the video images is ensured as set out in section 7 of this Privacy policy. Access to the video material is strictly regulated and may require additional verification compared to the exercise of your (other) rights as set out under section 11. The video material is kept for a maximum of two weeks, or in the event of an incident, for the duration until the incident has been resolved.

A mandatory ID-check while visiting our store in Amsterdam to make sure that all our customers are at least 18 or 21 years of age*:When you visit us in our store in Amsterdam, we, most of the times, have to perform an ID-check (and therefore Process your Personal data) for the sole (legal) Purpose of making sure that all our customers are at least 18 (or 21 before 17:00) years of age (section 3: N). We have the Legal obligation to check your age as we cannot allow minors to enter our premises. For this Purpose, we will ask you for an official legal document so that we can verify that all our customers are at least 18 (or 21 before 17:00) years of age. We will only Process your Personal data like date of birth and picture (to make sure it’s you) when confirming your age.

We Process the aforementioned Personal data from the legal document you show us on the Legal basis of our ‘Legal obligation’ and/or our ‘Legitimate interest’ to make sure that all our customers are at least 18 or 21 years of age. The in this context Processed Personal data is not kept or saved anywhere and will only be Processed for the aforementioned Purpose while visiting our store in Amsterdam. We furthermore try to know our customers personally so that we do not have to keep asking whether you’re old enough to visit us. It can, however, sometimes occur that we (might) ask you for your legal document for a second (or a third) time. In this context, please appreciate us asking more than once as a compliment; it just means you still look young!

 

*Between 08:00 and 17:00 all our customers/visitors must at least have reached the age of 21 years because of the neighbouring schools that surround our premises. After 17:00 all customers/visitors that have reached the age of 18 years are welcome to try our delicacies.

To respond to and/or go through a(n) (open) job application procedure:We may Process your Personal data (section 3: A, G, I & P) in case you send us an (open) job application. For this Purpose, we may Process Personal data such as your name, age, contact details, CV, grade lists, (optional) reference letters, (optional) diplomas, a motivation letter and/or other (job) specific information while assessing for potential employment. For screening Purposes, we may also (on the Legal basis of our Legitimate interests) Process online/publicly available information about you such as your social media profiles and use the outcomes for further assessment; this will (afterwards) always be discussed/communicated to you. The results of the screening itself will never be the (sole) reason for which we reject applicants. In some cases, we may refer to the help of external HR consultants in regard to your application; in these instances, we (may) share (some of) your Personal data with them.

The Legal basis on which we Process your Personal data in case of an (open) job application is either ‘Consent’, ‘Contractual necessity’ (“performance of a contract”) (insofar we enter into an agreement) or ‘Legitimate interest’ (to assess whether we are employing you). We do not keep your Personal data for the aforementioned Purposes longer than necessary. If the application process does not conclude to being employed by DE KADE B.V., we will not keep the data for longer than eight weeks after the procedure in case we might still approach you if another candidate doesn’t complete the procedure. In some cases, we may ask you to give us Consent to keep your Personal data for a longer period of time. In that case we will keep your data for the duration of maximum one year after the application Process has ended.

To enter into or execute agreements with suppliers, producers and other partners with whom DE KADE B.V. has or will do business:

Personal data (section 3: A, B & O) may be Processed by us while entering into and executing the agreements between you (the supplier, producer or other partner) and DE KADE B.V. in context of providing us services and or products and (might) be further used for e.g.: maintaining contact with you about and in regard to the agreement concluded between us, for invoicing/payment Purposes, for account management (and other administrative matters) as well as for maintaining our business relationships with you. We Process the Personal data for this specific Purpose on the Legal basis of ‘Contractual necessity’ (“performance of a contract”). If we cannot invoke the Legal basis of Contractual necessity, we then may assert the Legal basis of our ‘Legitimate interest’, insofar we have one. Sometimes we may also Process your Personal data based on our ‘Legal obligation’, or on your explicit ‘Consent’. The above-mentioned Personal data is kept for as long as is necessary to properly perform the agreement between us and/or receiving or providing our products or services from or to you. We then afterwards delete or Anonymise your Personal data unless we have a Legal obligation to keep (part of) it for a longer period of time or have another Purpose and/or Legal basis for the continuance of Processing the Personal data. The financial/tax information in regard to our business relationship is kept for as long as is necessary to comply with our Legal obligation to keep our (tax) administration (seven years minimum).

Additionally, in compliance with applicable law and were deemed appropriate, we may exert the Legal basis of ‘Legitimate interest’ to Process (part of) your or other individual’s (Personal) data for the following Purposes:

• Ensuring, providing and developing our products, services, website(s), apps and/or (content on) other (social media) platforms (Facebook and Instagram);
• To communicate information regarding our products, services, promotions, events and competitions which might interest you (during our active business relationship);
• For communication with other (Third) parties and administering of their requests (e.g. inquiries from legal representative(s));
• To maintain, explore and grow business/customer-relationships;
• To send information regarding changes to our terms and conditions for our services, Privacy policy (including the Cookie section) and/or other legal documents;
• Follow-up e-mails with other products customers may be interested in after having placed their order;
• For reviewing and optimising procedures regarding a “needs assessment” for the Purpose of direct customer approach as well as for customer acquisition (e.g. analysing activity from users on (our) Social media connected to our products, services or business as a whole);
• To carry out administration, marketing, planning, product and service development, and quality control;
• To create/send orders, tax invoices, receipts, record transactions, create files and/or to satisfy other administrative requirements;
• Asserting legal claims and (acquiring evidence in regard to our (or our (business)partner’s)) defence in legal disputes and official proceedings;
• Prevention and investigation of criminal- or contractual offences and other misconduct (e.g. through the use of: system/file logging, camera surveillance, conducting internal investigations, data analysis to eliminate fraud and/or loss prevention activities);
• Ensuring the operation of our IT-department, website(s), apps and other IT-related matters;
• Acquisition and sale of business divisions, companies or parts of companies and other corporate transactions and the Transfer of Personal data related thereto, as well as measures for business management and compliance with Legal and regulatory obligations and/or the internal regulations of DE KADE B.V.;
• Any other Purposes compatible with an ‘original’ Purpose as mentioned in the above list.

​

In the event that we require additional Personal data from you for a specific Purpose while we do not have or cannot invoke a compatible Purpose, or while we have not communicated the Processing of the specific Personal data beforehand, we in that case will contact you at the moment that we require the additional Personal data and will of course provide you with the necessary information so that you can decide whether you want to provide us with the additional data, insofar we do not hold this Personal data yet. We will in that case also explicitly request your Consent, insofar necessary, before initiating the Processing of this additional Personal data.

Insofar we have not provided an exact Retention period for Processing your Personal data for a particular Purpose, then the following norm applies for the Retention of your Personal data: we Process and retain your Personal data as long as is required for the performance of our Contractual necessity, our Legitimate interest and/or compliance with our Legal obligations, as well as for other Purposes we pursue while Processing. For example, we keep your Personal data for the duration of the entire business relationship (from the initiation, during the performance of the contract, for invoicing Purposes, up until it is terminated or) as well as beyond this duration in accordance with our Legitimate interest, your Consent, the period of limitations of (legal) actions and/or documentation/administration obligations, unless we have specifically made (a) different agreement(s). Personal data may furthermore be retained for the period during which claims can be asserted against our company, insofar as the Personal data serves a particular Purpose. Furthermore, your Personal data can be retained insofar our affiliated (business) partner’s or other affiliated parties’ Legitimate interests require further Retention (e.g. for evidence and documentation Purposes). As soon as your Personal data is no longer required for any of the above-mentioned Purposes under section 4 of this Privacy policy, this Personal data will be deleted or Anonymised to the greatest extent possible. In general, shorter Retention periods of no more than twelve months apply for operational data (e.g. system logs insofar they involve Personal data).

​

 

Please note: If you have given us your ‘Consent’ to Process your Personal data for certain Purposes (for example when registering to receive our newsletters), we will then only Process your Personal data within the scope of, and based on, this given Consent, unless we have another Legal basis (and/or Purpose), provided that we require one. Given Consent can be withdrawn at any time. This, however, does not affect the Personal data Processed prior to the withdrawal of your Consent. Please be advised that the withdrawal of (your) Consent may in some cases result in us not being able to provide/deliver certain services/products to you and/or us not being able to guarantee any longer the correct execution of an agreement between us. In case you want to withdraw your Consent (other than for Cookies), please send us an e-mail to info@coffeeshopdekade.nl telling us for which Purpose and/or Processing of your Personal data you wish to withdraw your Consent for.