Privacy policy
DEFINITIONS AND INTERPRETATION
WHAT DATA, FOR WHAT PURPOSES, BASED ON WHAT GROUNDS WE PROCESS?
WHERE DO WE STORE YOUR PERSONAL DATA?
CHANGES TO THIS PRIVACY POLICY
PRIVACY POLICY
Your privacy is important to us. This Privacy Policy explains:
- What personal data is collected by Retail Rocket Group consisting of all entities listed under “Definitions” (collectively, “Retail Rocket”, “we”, “us” and “our”) or provided by you, through
- your use of our Website and software
- our interactions with you prior to partnership
- subscribing to our newsletters
- applying to work at Retail Rocket
- working as an employee or a contractor at Retail Rocket
- How your personal data will be used, where it is held, how long it will be kept, and your rights.
Please read this Privacy Policy carefully.
DEFINITIONS AND INTERPRETATION
In this Privacy Policy, the following definitions are used:
Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.
Data processor, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
Data subject, “You” means:
Our Website visitors
Prospective partner’s employees
Partner’s employees
Partner’s customers
Applicants for open positions at Retail Rocket
Retail Rocket employees
Partner is a person (or a company) who owns an online shop, accepts our “Offer for Agreement for the provision of services” and to whom we provide tracking services.
Retail Rocket Group is a group of companies that process Your personal data including:
Retail Rocket Netherlands B.V. (headquarters),
Retail Rocket Germany GmbH,
Retail Rocket Iberia S.L.,
Retail Rocket Ltd.
Website means Retail Rocket websites including
OUR CONTACT DETAILS
Our addresses and phone numbers can be found here.
If you have any questions regarding the processing of your personal data, you can contact our Data Protection Officer, who is available if you request information, suggestions, questions, or complaints: privacy@retailrocket.io.
WHAT DATA, FOR WHAT PURPOSES, BASED ON WHAT GROUNDS WE PROCESS?
Website visitors
We get some information from our visitors by recording how you interact with our Website with the use of cookies, analytic tools or obtain data from third parties. We do not combine information collected automatically through cookies and analytic tools with other personal data you may have provided to us when you registered for our Products or submitted a form through our Website.
We use your automatically collected data for our Website improvement to administer our site and for internal operations, including data security, troubleshooting, testing, statistical and survey purposes, and to ensure that content from our site is presented in the most effective manner for you and for your device.
The information you may provide us may include the following data:
Your device and connectivity information such as IP (Internet Protocol) address; your configuration data such as browser type, version, and language setting, time zone setting, browser plug-in types, and versions; details of how you used our Website, such as your search queries; information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page; log information, such as error reports, download errors, any problems you experience using our Website and any phone number used to call our customer service number.
Legal basis
We do not use cookies unless you have provided a consent by clicking the “ACCEPT” button on the cookie banner shown to you when visiting our Website.
We analyze statistics about your visits to our Website on the basis of our legitimate interests to maintain our Website and improve our service.
Prospective partner’s employees and Partner’s employees
We collect the information provided by you to operate effectively and provide you the best experiences with our Website, products, and services. You provide some of this information voluntarily by filling in the contact form on our Website, creating an account at our Website, or by corresponding with us by phone, e-mail, or otherwise. This includes information you provide if you subscribe to any service we offer through our site, send us a query or feedback, sign up for information on events, upload a document with your enquiry, purchase services via the Website, participate in discussion boards or other social media functions on our site, promotion or survey or when you report a problem with our Website.
The information you may provide us may include the following data:
First name, last name, e-mail address and phone number, credentials, information on requested or provided services, your message/enquiry which might contain but not limited to: your company name, website link, business contact information, job title.
We collect passwords and similar security information used for your authentication and account access if you create an account at our Website.
We will use the provided information to operate effectively and do our best to respond to your enquiry and provide you our services as described in our “Offer for Agreement for the provision of services”.
Legal basis
The intention of partner’s employees to accept our “Offer for Agreement for the provision of services” and our Agreement with a Partner are the legal basis for such processing.
Subscribers to our newsletters
By subscribing to our newsletter, you agree to the receipt of the newsletter and the procedures described. We send out newsletters, e-mails, and other electronic notifications with promotional information subject to the consent of the recipient or a legal permission.
The information you may provide us may include the following data:
Online-identifiers contact details which include name, surname, email address.
Legal basis
Consent of the recipient or a legal permission to receive newsletters. You may withdraw your consent to receive our newsletters by following the “unsubscribe” instructions contained in the promotional communications you receive.
Applicants for open positions at Retail Rocket
If you apply to work at Retail Rocket, we process the information provided to recruit new talent to join Retail Rocket.
The information you may provide us may include the following data:
First name, last name, e-mail address and phone number; photography; education information; work experience information; information about professional skills and expertise.
Legal basis
The intention of applicants to conclude an employment agreement with us.
Retail Rocket employees
We collect the information provided by our employees for various HR, payroll, and accounting purposes.
The information you may provide us may include the following data:
First name, last name; sex; date of birth; age; place of birth; place of work; job title; employment data (date of hiring, working hours); phone number; email address; actual address of residence; marital status; citizenship; COI information (information on the presence of a conflict of interests); photography; education information; work experience information; information about professional skills and expertise; payroll information (about salary and bonuses).
Legal basis
Employment agreement between Data controller and an employee as well as our legal obligations regarding employment and accounting.
Customers of our partners
Acting as data processor we process personal data provided by our partners as instructed by them pursuant to Data Processing Agreement.
The information our partners provide us may include the following data:
Personal details including contact details; online identifiers; device identifiers; lifestyle and social circumstances; details of goods and services.
Legal basis
We process the data solely under the instruction of our partners (data controllers) described in Data Processing Agreement with our partners.
SPECIAL CASES
Children
We do not sell any products or services for purchase by children. If you are under 16, you may use our Website only with the involvement of your holder of parental responsibility. We do not knowingly collect personal information from children below 16 without the consent of the child’s holder of parental responsibility.
Information you provide about others
In providing personal data about other individuals (such as someone in whose name you are registering an account or subscribing to our marketing promotions), you represent that you have notified them of
- the purposes for which information will be used
- the recipients of their personal data and
- how they can access and correct the information.
You further represent that You have obtained all necessary consents from them.
When we act as a Data processor
The data processing practices related to cases when we act as a data processor and process on behalf of our customers are described in our Data Processing Agreement and are not described in this Privacy Policy.
Our Data Processing Agreement is based on the EU Standard Contractual Clauses.
Considering the judgment of the Court of Justice of the EU in Case C-311/18. we agree to notify You if we realize that we can no longer meet our obligation to provide the same level of protection as is required by the GDPR.
WHERE DO WE STORE YOUR PERSONAL DATA?
We take Your confidentiality and security very seriously. We are committed to protecting the personal data you share with us.
We use a combination of industry-standard security technologies, procedures, and organizational measures to help protect your personal data from unauthorized access, use or disclosure.
Your personal data is stored within European Union Area.
We engage Hetzner Online (Hetzner Online GmbH infrastructure in Germany) to store and process your data.
TRUSTED PARTNERS (DATA PROCESSORS) WHO WORK ON OUR BEHALF UNDER CONFIDENTIALITY AGREEMENTS AND MIGHT STORE, MAINTAIN OR PROCESS YOUR DATA
We have partnered with a number of authorized service providers (data processors), whose services and solutions complement, facilitate and enhance our own under written confidentiality agreements that guarantees that the requirements of the GDPR will be met and the rights of data subjects are protected. Data processors only act on behalf of our documented instructions. They have direct responsibilities under the GDPR and may be subject to fines or other sanctions if they do not comply.
These include:
Information technology service providers,
web analytics,
e-mail distribution and monitoring services,
our legal and financial advisors, accountants, insurance brokers,
delivery services,
IP Telephony services,
messenger services.
The list of our processors is provided in the table below.
| Entity Name | Purpose | Location of processing | Transfer to the third country |
| Amazon Services Europe S.à.r.l. | Object storage infrastructure service. Runs the code in response to events and automatically manages the compute resources. | 5, Rue Plaetis, L-2338 Luxembourg | Adequate country |
| Google Netherlands B.V. | Data analytics. Mail Server | Claude Debussylaan, 34/15E etage, 1082 MD, Amsterdam, Nederland | Adequate country |
| Hetzner Online GmbH | Hosting services | Industriestr. 25, 91710 Gunzenhausen, Germany | Adequate country |
| Pipedrive UK Limited | Customer Relationship Management | Hogarth House, 136 High Holborn, London, England, WC1V 6PX | Adequate country |
| Vodafone Libertel B.V. | Phone communications | Avenue Ceramique 300, 6221 KX Maastricht, Nederland | Adequate country |
Such data processors may receive or otherwise have access to your personal data, in its entirety or in part – depending on each of their particular roles and purposes in facilitating and enhancing our Services and business, and may only use it for such purposes. Under no circumstances may data processors will use the data for their own purposes.
We will also share your data with our affiliates from Retail Rocket Group only provided that a Data Processing Agreement is concluded with them.
Please note that your personal data will be maintained, stored, and processed at a destination inside the European Economic Area.
In case of a transfer of your personal data to a country not providing an adequate level of protection, we ensure compliance with the GDPR by entering into Data Processing Agreement based on the EU Standard Contractual Clauses.
Considering the judgment of the Court of Justice of the EU in Case C-311/18. we will make an assessment as to whether the data processor we engage is able to comply with all EU Standard Contractual Clauses requirements and will suspend the transfers in case it is unable to comply.
Once this contract is terminated, the Data processor will return data to us or transmit it to another processor appointed by us and erase any copy in its possession. However, the processor may keep the data locked to address possible administrative or jurisdictional responsibilities.
DATA RETENTION
Unless otherwise specified, where you have indicated to us that you are happy for us to send you the information about goods and services we offer and we feel may interest you or similar to those that you have already purchased or enquired about do so, we assume you are happy for us to keep your collected personal data. We may retain your personal data (contact details) for as long as your User Account is active or as otherwise needed to provide you with information about our Services. As the data subject you have rights related to processing of your personal data and the option of withdrawing your consent to receive promotions at any time. Please see paragraph “Your rights”.
If you and we enter in a contract, we might keep your data during the performance of the contract and as long as it is necessary as for our legitimate interests and contractual and legal obligations.
We might hold your information for as long as is necessary to comply with our and legal obligations and in accordance with our legitimate interests to develop our business and satisfy our partners’ needs as a Data controller after the contractual relationship between you and us elapses.
COOKIE POLICY
We use tracking technologies like cookies, tags, scripts to collect and store information from you when you use our Services, such as your IP address, browser type, browser language, operating system, device type, referring site (site you visited before coming to our Site), date and time of visit, URL and page metadata, operating system type and application version. We may also automatically collect and store certain information in activity logs such as: details of how you used our Sites and Services, your search queries, and your IP address. These technologies are used in analyzing trends, tracking users’ behavior on the Site and to gather demographic information about our client base as a whole to improve Services we provide you.
A cookie is a small file, typically of letters and numbers, downloaded on to a device when the user accesses certain websites. Cookies allow a website to recognize a user’s device.
We might use cookies to recognize you when you visit our site or use our Services, remember your preferences, and give you a personalized experience:
Please note that we do not use cookies unless you have provided a consent by clicking the “ACCEPT” button on the cookie banner shown to you when visiting our Website.
AUTHENTIFICATION COOKIES. If you are resigned into our Services, these cookies will help us show you the right information and personalize your experience.
SESSION COOKIES. These cookies store the ID of a user’s session. The cookie is set when a user signs in and is used to restore the session without entering the personal data.
SECURITY COOKIES. We use cookies for our security features, and to help us detect malicious activity.
PREFERENCE, FEATURES AND SERVICES. These cookies help us to customize your preferences, such as which language you prefer and what your communications preferences are or to fill out forms on our faster.
PERFORMANCE, ANALYTICS AND RESEARCH. These cookies help us to analyze our Website performance. We use cookies to improve our products, features, and services, including to create logs and record when you access our site.
THIRD-PARTY COOKIES. We might use them for website analytics and advertising purposes, i.e. cookies which are set and can be accessed by servers respectively domains of our third-party providers.
We are using Google Analytics cookies on this Website which might register a unique ID that is used to generate statistical data on how the visitor uses the Website, and cookies sending data to Google Analytics about the visitor’s device and behavior which track the visitor across devices and marketing channels.
We use the following session, permanent and third-party marketing cookies and tracking technologies, including cookies from our partners and service providers:
| Name | Host | Duration | Category | Description |
| _ga | retailrocket.nl | 2 years | Analytics Cookies | Registers unique ID that is used to generate statistical data on how the visitor uses the website. |
| _gat_gtag_UA_62775212 | retailrocket.nl | Session | Analytics Cookies | Used to limit the amount of data recorded by Google on high traffic volume websites. |
| _gid | retailrocket.nl | 1 day | Analytics Cookies | Used to store and update a unique value for each page visited. |
| viewed_cookie_policy | retailrocket.nl | 1 year | Functional Cookies | Used to store whether user has consented to the use of cookies. |
WHAT CAN YOU DO IF YOU DON’T WANT COOKIES TO BE SET OR WANT THEM TO BE REMOVED?
Most browsers accept cookies automatically, however some people prefer not to allow cookies. You may change the security settings of your web browser in order to stop your device receiving and storing cookies, to allow receiving and storing cookies from selected websites you trust, or to be notified before receiving cookies. You may also delete cookies stored in your browser at any time. Information stored in such cookies will be removed from your device. However, that these settings may have negative effects on the Website usability.
Browser manufacturers usually provide help pages relating to cookie management in their products. Please see below for more information:
– Google: https://support.google.com/chrome/answer/95647?hl=en-GB
– Internet Explorer: https://support.microsoft.com/en-us/help/260971/description-of-cookies
– Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
– Safari (Desktop): https://support.apple.com/kb/PH5042?locale=en_US
– Safari (Mobile): https://support.apple.com/en-us/HT201265
– Android Browser: https://support.google.com/nexus/answer/54068?visit_id=1-636585517588941681-639659396&hl=en&rd=1
– Opera(Desktop): https://www.opera.com/help
– Opera (Mobile): https://www.opera.com/help/mobile/android#privacy
For other browsers, please consult the documentation that your browser manufacturer provides.
You may opt-out of third-party cookies from Google Analytics on its website.
You can opt-out of interest-based targeting provided by participating ad servers through the Digital Advertising Alliance (http://youradchoices.com).
In addition, on your iPhone, iPad, or Android, you can change your device settings to control whether you see online interest-based ads.
DATA SECURITY
We keep your personal data secure by taking appropriate technical and organizational measures against its unauthorized or unlawful processing and against its accidental loss, destruction, damage, misuse, or disclosure.
Disclosure of personal data to third parties
We do not rent, sell, or share your personal data with other people or non-affiliated companies without your consent except to provide products or services you’ve requested, when we have your permission, or under the following circumstances:
- We transfer personal data to trusted partners who provide us services under data processing agreements, specified in Paragraph “Trusted partners (data processors)” who process personal data on our behalf under data processing agreements and might store, maintain or process your data These companies do not have any independent right to share this information.
- We may disclose your personal data to third parties when we reasonably believe we are obligated to do so by law, and in order to investigate, prevent, or take action regarding suspected or actual prohibited activities, including but not limited to, fraud and situations involving potential threats to the physical safety of any person.
- In the event we are acquired by or merged with a third party entity or undergo another change of control, we reserve the right to transfer information, including your personal data, to a successor entity. In this event, we will notify you by electronic means before information about you is transferred and becomes subject to a different privacy policy.
AUTOMATED SOLUTIONS
We do not use automated decision-making assessing personal aspects relating to You.
YOUR RIGHTS
You have the following rights in accordance with the General Data Protection Regulation
- THE RIGHT TO BE INFORMED. In this Privacy Policy we supply you detailed information related to your personal data storage, maintenance, and processing
- THE RIGHT TO ACCESS DATA HELD ABOUT YOU.
- THE RIGHT TO RECTIFY YOUR PERSONAL DATA if it is inaccurate, incomplete, or out-of-date.
- THE RIGHT TO ERASURE (DELETE OR REMOVE) YOUR PERSONAL DATA.
- THE RIGHT TO RESTRICT (BLOCK) PROCESSING. When processing is restricted, we will store your personal data, but not further process it.
- THE RIGHT TO DATA PORTABILITY is your right to receive the personal data which you have given to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another controller from the current controller applicable if: The processing is based on consent or on a contract, and the processing is carried out by automated means.
- THE RIGHT TO OBJECT at any time to processing of your personal data based on our legitimate interests.
- THE RIGHT TO WITHDRAW YOUR CONSENT OR OBJECT TO DIRECT MARKETING AND OTHER TYPES OF PROCESSING IF APPLICABLE. You can exercise your rights by following the “unsubscribe” instructions contained in the promotional communications you receive.
- THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY. You have the right to lodge a complaint with a supervisory authority if you have a concern about our information rights practices.
CHANGES TO THIS PRIVACY POLICY
The Company may update this Privacy Policy at any time. In case of any significant changes of the Privacy Policy you will receive notification on your email address filled in your account information or we will post a prominent notice of the Site prior to changes becoming effective.