This is the privacy statement of Folat B.V., hereinafter referred to as: "Folat".
See the header “What if you have questions or complaints” below this privacy statement for contact details.
In this privacy statement we inform you about the use of your personal data (hereinafter: “data”) by Folat.
Short privacy statement
We collect and process personal data for various purposes including the following:
• To allow one to create an account
• Information about our offering, news and promotions by email and sometimes for customer surveys
We share some data with other parties (receivers).
The persons whose personal data we process have certain rights with regards to their data.
What do we use your data for?
We use your data for the following purposes:
• To allow one to create an account and to secure the account
• To be able to process the order
• Information about our offering, deals, news and promotions and for customer surveys
• Information about our offering, news and promotions by email and sometimes for customer surveys
On which principles (“legal grounds”) is the use of your data based?
We use your data on the basis of the following principles (“legal grounds”):
• Your permission
• The data necessary for concluding and/or executing the agreement we have with you or to which you are a party.
• The data which is necessary for our legitimate interest, or that of another party. This concerns the following “legitimate interests”:
o Our interest to maintain a (commercial) relationship with our clients or members. With whom do we share your data? In principle we only use your data for ourselves.
Is your data transmitted outside the European Economic Area (EEA)?
No, we do not transmit your data outside of the European Economic Area, it is only stored on servers located within the European Economic Area.
How long do we store your data?
We don’t store your data for longer than is necessary for the purpose for which we process it. In general, we use the following retention periods:
Type of data |
Retention period |
Customer data (name and address data, email address,
telephone number) |
As long as we have a contract or other relationship
with you and up to 2 years afterwards. |
Invoice data, transaction data and other financial
data |
7 years on the basis of the legal fiscal retention
period. |
Account data (username, passwords) |
As long as you have the account. |
Order history (parts that do not fall under the
legal fiscal retention period). |
As long as we have a contract or other relationship
with you and up to 2 years afterwards. |
IP address |
Up to 2 months after the last website visit. |
Information about surfing behaviour |
Up to 2 months after the last website visit. |
Which rights do you have?
On legal grounds, you at least have the following rights with regards to your personal data:
• to request a copy and access to your data;
• to receive information about the processing of your data;
• to have incorrect data corrected;
• to add to data which is incomplete considering the purposes for which it is used;
• to have your data deleted;
• to have your data “limited”;
• to object to the use (the processing) of your data;
• to, if you have given permission for the use of your data, revoke this permission. The revocation then applies to future use of your data;
• if you supplied the data yourself or if data was created by you (for example, based on your use of our service), and you have given permission for this or the data is necessary for the execution of the agreement, and if the data is electronically processed: to get your data in a structured and common format in machine-readable form and, if this is technically possible, have this transferred to another party in this way;
• to submit a complaint to the competent privacy supervisor (this may be the supervisor in the country of your habitual residence, where you work or where (alleged) infringement takes place upon the privacy legislation), in the Netherlands this is the Personal Data Authority.
To exercise your rights, you can contact us using the contact details listed under “What if you have questions or complaints?”
We may deny your request in certain cases. In that case we’ll explain why we’re rejecting the request. It can be the case that we can no longer execute the agreement with you if we don’t have certain data from you, we will explain this as well.
Most of your data can be found in your own account. You can log in and modify the data there. For access to data which is not in your account, you can contact us directly (see: “What if I have questions or complaints”?).
If we use your data for direct marketing purposes and you ask us to stop this use, we will comply.
The electronic commercial messages always include an unsubscribe button so you unsubscribe from these messages.
Can we modify this privacy statement?
Yes. This privacy statement is in effect as of 24 May 2018. We reserve the right to modify this privacy statement. If this concerns an important change, we will inform you of this, for example in an email message.