The LightBear Privacy Statement

1. General
This statement contains the privacy policy of The LightBear with regard to the processing of your personal data. Processing includes the use, storage, and sharing of your data.

The LightBear is aware of the fact that the appropriate processing of personal data constitutes an essential aspect of privacy law. In order to safeguard this right, this statement explains to you what happens with your personal data. When you order a product from us, we need a number of details from you. Without this information, for example, we would not be able to send you your product. We also save some of your details, just in case the product is not delivered to you, so that we are able to provide you with faster assistance and can find out more easily what went wrong.

Needless to say, the actions taken by The LightBear comply with the current Dutch Personal Data Protection Act as well as the General Data Protection Regulation which have come into force in May 2018.

By purchasing a product from The LightBear, you agree to the general terms and conditions that apply as well as the approach we take to processing personal data does.

2. Processing purposes
In order to carry out the purchase agreement or other agreements between you and The LightBear as effectively as possible and to maintain a customer relationship, it is necessary that we collect, use, share and document a number of your personal details. This is referred to as ‘processing’ in the General Data Protection Regulation. We take great care when documenting these details and protect them using appropriate methods.

3. What data do we process and why?
When purchasing a product from The LightBear, you can register an account with us so that your details are entered into our customer database to make ordering more efficient.

The data processed by The LightBear include your:
Address detailsChamber of Commerce number
VAT number
E-mail address
Purchasing history
You can see which details we have in your account environment.

Whenever you send us an e-mail or other types of messages, we may keep these. We may sometimes ask you for personal details that are relevant for the situation concerned. This makes it possible to process your questions and respond to your requests. The information is stored on secure servers owned by The LightBear.
We will not combine these details with other personal data that we have.

We collect data for research purposes in order to better understand our customers so that we can tailor our services accordingly.
Our website uses ‘cookies’ (small files that are placed on your computer) to help us analyse the way our website is used. The information generated by these cookies regarding your use of the website can be transmitted to the secured servers owned by The LightBear.
We use this information to keep track of how you use the website, to create reports on website activity and to offer other services related to website activity and use of the internet.


4. Sharing data with third parties
It is necessary to share your details with third parties for the purpose of fulfilling the agreement. Agreements have been made with these third parties regarding the collection and use of your personal data. Your data is shared with third parties in accordance with the laws and regulations of the Dutch Personal Data Protection Act and the forthcoming General Data Protection Regulation. The LightBear will never share your data with third parties for marketing purposes without your knowledge and consent.

Your personal details are shared with postal/transportation companies:
In order to ensure that your product actually reaches you, The LightBear is obliged to share your name, address, and possibly your telephone number with the postal company that delivers your order. These details are only to be used for this purpose and The LightBear has contractual agreements with the company regarding the use of your data.


5. Retention periods
In accordance with the Dutch Personal Data Protection Act and the forthcoming General Data Protection Regulation, The LightBear will retain your details for no longer than necessary. The LightBear is also bound by deadlines which have been laid down by law and these deadlines are very much adhered to by The LightBear.

6. Security
The LightBear protects the information entrusted to it by means of technical and administrative security measures in order to minimize the risk of loss, misuse, unauthorized access, public disclosure and changes with respect to the data. These measures include the use of firewalls, data encryption and physical and administrative control of access to the data and servers. However, please contact us if you think that your data has been misused in any way. You will find our contact details under ‘Our contact details’. We send your personal details securely by encrypting them. This also applies to your order and your customer login details.

In addition, we secure our websites and other systems by taking technical and organizational measures against loss, destruction, access, changes or dissemination of your details by unauthorized persons.

7. Right of subject access
As a customer, you have a number of important rights, also referred to as the right of subject access. The right of subject access gives you the opportunity to inspect, change or delete your details. The LightBear is aware of the fact that this right is an extremely important aspect of your privacy and that your personal data must be treated with the utmost care.

The LightBear therefore gives you the opportunity to contact us so that we can provide you with access to your personal data.

In addition, you can invoke the right to object by lodging an objection to the processing of your data.

If you no longer wish to use our services or no longer wish to purchase any products from us, you are entitled to ask for your details to be deleted from our database.

Needless to say, we will no longer share your details with third parties as explained under ‘Sharing data with third parties’.

If you would like to invoke one of the above rights against The LightBear, then please let us know by sending us a request.

8. Notification requirement and Dutch Data Protection Authority
If, as the result of a data leak, The LightBear loses personal data or makes it available to unauthorized persons, then you will be informed about this if there is a reason to do so.
Likewise, if you suspect unlawful processing of data by The LightBear, you can contact the Dutch Data Protection Authority.

9. Changes to privacy policy
The LightBear has the right to change and update this privacy statement so that the statement corresponds to the rules in conformity with the Dutch Personal Data Protection Act and the General Data Protection Regulation.
It is therefore advisable to consult this statement from time to time. If a substantial change is made to this statement that has demonstrable consequences for you, you will be informed of this via e-mail.

This privacy statement was drawn up on 10/03/2019.