Privacy policy of PlantedBox

Who is responsible for your data?

PlantedBox is responsible for processing your data as described in this privacy policy. My address details and VAT number are: Jufferstraat 13, 3806 Velm, Belgium, BE 0718 796 229 .

My contact details are: +32(0)477544114 – gilles@planted-box.com.

What personal data is processed ?

Among others, the following personal data is processed through the PlantedBox website:

• First and last name, as well as address information;
• Email address & IP address;
• Profile data and data via contact forms;
• Data about your activities on my website;
• Data about your browsing habits across different websites (AquascapingBlog);
• Internet browser and device type.

What sensitive data is processed?

PlantedBox does not process sensitive personal data in any way. Furthermore, the website does not intend to collect data about website visitors who are under 16 years of age, unless they have permission from parents or guardians.

Of course, I cannot verify whether a visitor is over 16. Therefore, I encourage parents to be involved in their children’s online activities to avoid collecting data about children without parental consent.

What are my ‘legal grounds’ for processing your data?

According to the privacy law that came into effect on May 25, 2018, I must say what “legal grounds” I have to process your personal data.

On the one hand, I process them for the execution of our agreement and contractual arrangements. Think for example of the purchase of a product on my webshop, your right to warranty, … This is the case for:

• Orders on the webshop;
• Delivery to your home or another address;
• Return of your products;
  Warranty & repair;
• Contacting me for customer service.

Without these details I can’t deliver the product you ordered or give you the service you’re entitled to.

On the other hand, there’s also the data I use under ‘legitimate interest’. This data I used by me to give you a personal and optimal service. Of course I always take your privacy into account. The “legitimate interest” applies to:

• Reviews & surveys for your satisfaction;
• Contacting me for customer service;
• Visits to the website;
• Your personal account on PlantedBox;
• Newsletters & emails;
• Fun promotions & deals;
• Social media.

In case of suspected fraud, I may also have a legal obligation to use your data. In other cases, you yourself have given permission to process your data. For example downloading an e-book or signing up for my newsletter.

Who has access to your data?

Only myself and third parties, and only when really necessary to provide a good service. Which parties are those? Delivery partners, IT service providers, payment partners and parties who collect the reviews on PlantedBox.

Sometimes I work together with advertising agencies to show you targeted ads, for example based on the interest you show in certain products. In case of fraud or suspicious situations, I am obliged to pass on data to the relevant government agency. In any case: your personal data will be passed on to these parties in order to improve the service to you or to provide a service on behalf of PlantedBox. I will never sell your information to third parties.

In some cases, third parties have obtained access to your personal data themselves, please consult the privacy policy of the party in question. Some cookie developers also gain access to the data collected through cookies on the PlantedBox website. You can find more information about this in my cookie policy.

Where is your data stored?

Your data will be stored in various databases within the European Union. If (in exceptional cases) your data is transferred to a country outside the EU, your data will remain protected. For some countries this has been officially established.

When your data is stored with an American party, then your data is protected according to the American Privacy Shield. In other cases I work with model contracts to protect your privacy.

How long will I keep your data?

No longer than necessary. Afterwards, your data will be completely deleted or anonymized for reporting and analysis (e.g. order values, products ordered, …).

Below you will find the retention periods depending on the situation:

• I’m obliged by the tax authorities to keep your invoice-, payment- and order information for 7 years. After this your data will be anonymized for analysis & reporting. For product warranties you must also keep a copy of your invoices.
• When you subscribe to a newsletter, an e-book or any email series I will keep your data for 5 years. This also applies to personalized messages for which you have given your permission. Of course you always have the right to “be forgotten” and have your data deleted on request.
• In case of fraud, your data will be kept for longer than 7 years.

What are your rights?

You always remain the owner of your own data. If you would like to see the information that has been collected and receive a copy, please send me an e-mail. Besides the right to protection of your data, you also have a number of other rights:

• Right to information & access to your personal data;
• Right to the correction of your personal data;
• Right to be “forgotten” and delete all your data;
• Right to object to the processing of your personal data.

Would you like to see all your personal data, have it removed from my system or have it corrected? Then please send me an e-mail.  To make sure that the request for inspection was made by you, I ask you to send a copy of your identity card together with the request. Please blur in this copy your passport photo, passport number and citizen service number (BSN). This is to protect your privacy.

Would you like to unsubscribe from my e-mails or change your e-mail preferences? You can do this easily through the newsletter or e-mail itself. At the bottom of each email you will find a link to adjust your preferences. Don’t want cookies anymore? In my cookie policy you can read how to delete them.

Any questions or complaints?

Please feel free to email me at gilles@planted-box.com if you would like to contact me with a question or complaint regarding your privacy and personal information.