At Cordstrap, we are committed to protecting and respecting your privacy. As part of this fundamental obligation, we are dedicated to the appropriate protection and use of personal information (sometimes referred to as "personally identifiable information" or “personal data”) that is or has been collected by us.
This policy applies across the Cordstrap group. GDPR regulation applies to all individuals within the European Union (EU) and the European Economic Area (EEA).
Personal information: any information relating to an identified or identifiable natural person.
Data subject: a natural person whose personal data is processed by a controller or processor.
We collect certain personal information about our website visitors, customers and suppliers. The most common types of information we collect include:
We do not collect any Special Categories of Personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We use different methods to collect data from and about you including:
Except as set forth in this Privacy Statement or when specifically agreed by you, we will not disclose personal information we gather from you to third parties unless Cordstrap is required to share this information to complete your request or for legitimate business purposes and interests.
We may provide personal data to our affiliates, agents or distributors in the country where the relevant data subject or legal person is located. To the extent these parties are located outside the EU, Cordstrap has entered into EU standard contractual clauses with these parties to ensure that they offer an adequate level of protection of your data. Otherwise we do not sell, trade, or rent personal identifiable information to others.
We have appropriate Data Processing Agreement in place with any third party that we share data with, where that third party is a Data Processor as defined under GDPR.
We may further use third party service providers to help us operate our business or administer activities on our behalf, such as sending out newsletters or surveys.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
On the basis of fulfilling our contract with you or entering into a contract with you on your request, in order to:
On the basis of your consent, in order to:
When you provide or have provided your personal information to us we use this information for our legitimate business interests to carry out our work towards a sustainable business environment. Before doing this, we will consider and balance any potential impact on you and your rights under data protection and any other relevant laws. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Processing of personal data for marketing purposes is based on legitimate interest of Cordstrap in promoting its products and services to its existing and potential customer base. Though our customers are exclusively legal persons (as Cordstrap, being a business to business organization, does not supply products or services to individuals). This implies the use of personal data on contact persons within those legal persons, such as names and contact details. Given the fact that these marketing communications are directed at legal persons, that they are collected in the context of a request for a quote, enquiries or an actual sale of products and services, and that individuals which receive these communications are entitled to opt-out at any time (including when their data is collected and within each communication sent), we believe that our legitimate interest is not overridden by individuals’ rights, freedoms and interests. It is not mandatory for you to allow Cordstrap to use your Personal Data for these purposes, and you will suffer no consequence if you choose not to (aside from not being able to receive further marketing communications from Cordstrap).
Our head office is based in The Netherlands. As such, all personal data we collect is stored in our data center in The Netherlands. The Cloud solutions we use are hosted in The Netherlands adhering to lawful Data Processor Agreements.
The security of your Information is important to us. We use appropriate technical and organizational security measures to protect your information from misuse, unauthorized or unlawful access or disclosure, loss, alteration, damage or destruction. These measures include:
Physical safeguards: controlled access to our facilities, data center, cabinets and secure destruction of media containing your Information.
Technology safeguards: such safeguards include the use of anti-virus, anti-malware, secure access to sites and systems, encryption where necessary, two-factor authentication to information systems hosted in our data centers, firewalls, to safeguard the confidentiality and integrity of your Information.
Organizational safeguards: training and awareness about security and privacy, to make sure employees understand the importance and means by which they must protect personal information.
You have the right to make a request to access personal information we hold about you and to request corrections of any errors in that data. You can also close the account you have with us for any of our Sites at any time. Note that the personal information we gather is part of having an effective ongoing business relationship. In some cases, request to remove that information from our systems may effectively imply termination of that relationship.
To make an access or correction request, contact us using the contact details at the end of this policy.
Where we have your consent to do, we send you marketing communications about products and services that we feel may be of interest to you. You can ‘opt-out’ of such communications if you would prefer not to receive them in the future by using the facilities provided in the communication itself.
You also have choices about cookies, as described below. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject cookies some parts of our sites may not work properly in your case.
Our website, products and services are not directed to children and we do not knowingly collect personal information from them.
Personal data processed for service provision will be kept by Cordstrap for the period deemed strictly necessary to fulfil such purposes – in any case, as these Personal data are processed for the provision of the Services, we may continue to store this Personal data for a longer period, as may be necessary to protect our interests related to potential liability related to the provision of the services.
Personal data processed for marketing will be kept by Curvature until you opt-out or unsubscribe. Once this is done, Personal data will no longer be used for these purposes, although it may still be kept by Curvature, in particular as may be necessary to protect our interests related to potential liability related to this processing.
Personal data processed for Compliance will be kept by Cordstrap for the period required by the specific legal obligation or by the applicable law.
You have the right to request access to your Information and to rectify it, to object to data processing, to request the erasure of your Information, and to withdraw your consent. You can exercise your rights by sending an email to the address mentioned at the end of this policy.
Questions, concerns, comments, requests or complaints regarding this Privacy Statement and/or our use of your personal data can be addressed to:
5807 GA, Oostrum
P.O. Box 5155
5800 GD, Venray
0031 478 519000