This privacy policy applies to the PlisseZonderBoren.nl website, contact requests, advice, quotations, orders, delivery, warranty, complaints and other services provided by BlindDesign via PlisseZonderBoren.nl.
Important: website data is not used for marketing
We measure page views and visitor flows to understand which information works well and where the website could be clearer. This data is not used for advertising profiles, retargeting, personalised advertising or tracking visitors on other websites.
1. Who is responsible for your data?
- Controller
- BlindDesign, trading as PlisseZonderBoren.nl.
- Correspondence address
- Noorderhoofd 95, 3846 JV Harderwijk, the Netherlands.
- Registration
- Chamber of Commerce (KvK) 55740014 and VAT number NL002150272B95.
- Contact for privacy questions
- info@plissezonderboren.nl or 085-2736378.
2. What personal data do we process?
Depending on your contact with us, we may process the following data:
Name, email address, telephone number, address and the content of messages.
Window measurements, technical data, drawings, photos, chosen fabrics, colours and profiles.
Order number, products, sizes, prices, payment status, invoice and delivery details of an order you place on the website.
Correspondence, warranty queries, complaints, return and repair data.
Anonymised IP address, browser, device, pages visited, referring page and times.
The content of your message, attached files and the IP address from which you sent the form — the latter exclusively to prevent misuse of the form.
If you create an account, we store your email address, name, telephone number and address, the time of your last login and your password in encrypted form — we cannot read or recover your password.
We do not knowingly ask for special categories of personal data. Therefore, do not share medical data, identity documents, citizen service numbers or other sensitive information via forms or attachments that is not necessary for your request.
3. For what purposes and on what legal basis?
| Purpose | What do we do? | Legal basis |
|---|---|---|
| Advice and quotation | Answering questions, assessing window and product information and making a suitable proposal. | Preparation of a contract and legitimate interest. |
| Fulfilling an order | Producing and delivering made-to-measure products and keeping in touch about the order. Payment is handled by Mollie B.V., our payment service provider. You enter your payment details with Mollie; we only receive whether the payment was successful and which method was used. | Performance of the contract. |
| Free fabric samples | Processing your request for free fabric samples and sending the samples. About a week later we send you a one-off service message asking whether the samples have arrived and whether you have any questions. After that you will receive nothing further about this; we do not use your address for newsletters or offers. | Fulfilment of your request and legitimate interest. |
| Customer service and warranty | Handling questions, complaints, repairs, warranty and proof of agreements made. | Contract, legal obligation and legitimate interest. |
| Administration | Keeping invoices, payments and tax records. | Legal obligation. |
| My account | Giving you the option to log in, view your previous orders and manage your details, so that you do not have to fill them in again every time. | Performance of the contract and legitimate interest. An account is not compulsory: you can also order without one. |
| Security | Preventing and investigating misuse, malfunctions and unauthorised access. | Legitimate interest. |
| Website statistics | Analysing visitor flows, ease of use and performance in order to improve the website. | Legitimate interest (Article 6(1)(f) GDPR). Consent is not required: nothing is placed on or read from your device. |
Where we rely on a legitimate interest, we weigh our interest against your privacy interest and limit the processing to what is reasonably necessary.
4. Cookies and statistics
This website does not place any tracking, marketing or advertising cookies. That is why there is no cookie banner: no consent is needed for the measurement below.
Something is stored on your device once you actually use the website, and only then:
- Your configuration and basket are stored in your own browser's storage, so that your choices do not disappear when you click on to another page or come back later. That data stays on your device and is only sent to us when you place the order. After ordering, your browser also keeps the order number, the amount and your email address for a maximum of one hour, so that the confirmation page can display them; after that they are deleted automatically.
- A login cookie is placed exclusively when you log in to My account. That cookie contains only a random session number, applies only to the address /account, disappears when you close the browser and expires on our server after one hour of inactivity. Logging in cannot work without this cookie; it is not used to track you.
Both are strictly necessary for a function that you request yourself and therefore do not require prior consent. You can delete them at any time via your browser settings; you will then be logged out and your basket will be empty.
We do measure how many people visit the website and which pages are read most. This is done with statistics software that runs on our own server within the European Union. The data stays there and is not shared with other parties.
- the visitor measurement itself does not place cookies and stores nothing on your device;
- your IP address is made unrecognisable before it is stored;
- from your IP address we do first derive an approximate location (country, region and town), using a database located on our own server — no data is sent to another party for this;
- we also record which pages you viewed, for how long, via which website or search engine you arrived, and what kind of device, browser and screen size you use;
- we do not follow you across other websites and do not build a profile of you;
- if your browser honours the "Do Not Track" setting, we do not measure your visit;
- we delete the individual visit data after 180 days; after that we only keep totals.
The legal basis for this is our legitimate interest in a properly functioning website (Article 6(1)(f) GDPR). Because nothing is placed on or read from your device, no consent is required for this.
No marketing or advertising cookies are used, no retargeting is applied and there is no component on this website that contacts a third-party server. For payment you are redirected to Mollie; this only happens after you click on pay yourself, and there is no component on this website that contacts a third-party server of its own accord. Should this change, this policy will be amended and a consent request will be shown before that technology goes live.
What we explicitly do not do
We do not use the statistics to create individual marketing profiles. We do not combine website usage with advertising networks, do not show personalised advertising and do not use retargeting. Personal data is not sold or rented out.
5. Contact forms, photos and attachments
Via the contact form you can send questions, measurements, photos, drawings and PDF files. We use this information to assess your situation, give advice, draw up a quotation or provide service.
- Only send photos and documents that are relevant to your window or order.
- Avoid people, number plates, documents or other private information being unnecessarily visible.
- Photos and attachments are not used for advertising, social media or other marketing without separate, explicit consent.
6. Orders, payments and delivery
You configure your pleated blind on the website and pay online. The configuration takes place in your own browser; your details are only sent to us when you place the order.
For such an order we process the data necessary to produce, invoice, collect payment for and deliver the made-to-measure product. For delivery, name, address, contact details, order number and delivery information may be shared with the carrier. Payment is handled by Mollie B.V. (Amsterdam). You enter your payment details with Mollie; we only receive whether the payment was successful and which method was used. Full account or card details never reach us.
7. With whom may data be shared?
We only share personal data when this is necessary for the purposes stated. Specifically, this concerns:
- Payment services: Mollie B.V., based in Amsterdam, handles the payments and processes your payment details in doing so.
- Web hosting and technical management: the website runs on its own server environment within the European Union. The visitor measurement runs on that same server, so no data leaves it for that purpose.
- Email delivery: the notification we receive when you send the contact form is delivered via a specialised European email service provider, established within the European Union, which acts exclusively as a processor on our instructions. We will provide the names of our processors on request.
- Carrier: for an order, the party that carries out the delivery.
- Accounting: invoices and payments, for the legally required records.
No advertising, statistics or tracking parties are involved in this website. Agreements are made with processors on confidentiality, security and the use of personal data. Otherwise, we only share data when required to do so by law, a competent supervisory authority or a court.
8. Processing outside the European Economic Area
The website, the visitor measurement and the email delivery all three run within the European Union. There is therefore currently no transfer of personal data to countries outside the European Economic Area. Should a service provider ever be added that does so, we will use a legally recognised transfer mechanism, such as an adequacy decision or standard contractual clauses adopted by the European Commission, supplemented by appropriate security measures.
9. How long do we keep data?
We do not keep personal data longer than necessary for the purpose, except where a statutory retention obligation or an ongoing dispute requires a longer period.
| Type of data | Usual retention period | Explanation |
|---|---|---|
| Contact request without an order | Maximum of 2 years after the last contact | For follow-up, recurring questions and proof of communication. |
| Photos and attachments for advice | Maximum of 2 years | Longer if they form part of an order, warranty case or complaint. |
| Order and invoice data | At least 7 years for tax records | Insofar as this data forms part of the records that must be kept by law. |
| Warranty and complaints | Until the matter has been settled and thereafter for as long as reasonably necessary | For example for warranty, legal claims or a dispute. |
| Visit data | 180 days | After that only totals remain, without individual visit data. |
| Account data | Until you delete the account | You can close your account yourself via My account. Your orders and invoices will remain after that: they are subject to the seven-year tax retention obligation. The link to your account, however, is removed. |
| Technical security logs | 30 days | The web server logs are rotated daily and deleted after thirty days; longer only in the event of a specific security incident. |
10. How do we secure personal data?
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure. Examples include secure connections, access restrictions, updates, backups, strong authentication where available and agreements with service providers.
We never store account passwords as readable text, but exclusively in encrypted form using a modern technique designed for that purpose. We therefore cannot view your password or send it to you; if you forget it, you will receive a one-time link with which you set a new password yourself. Such a link is valid for twenty-four hours and expires as soon as it has been used.
No digital processing is completely without risk. If you suspect misuse, a data breach or unauthorised access, please contact us as soon as possible via info@plissezonderboren.nl.
11. What privacy rights do you have?
Depending on the situation, you can request:
- information about and access to your personal data;
- correction or completion of inaccurate data;
- erasure of data;
- restriction of processing;
- transfer of data in a commonly used format;
- objection to processing based on legitimate interest;
- withdrawal of consent, without this invalidating earlier lawful processing.
Send a request to info@plissezonderboren.nl and state clearly which right and which data it concerns. To prevent misuse, we may ask for additional information to verify your identity. In that case, do not reveal more data than necessary.
We do not take solely automated decisions that have legal or similarly significant effects for you.
12. Questions or a complaint about privacy
If you have a question or complaint, please contact us first via info@plissezonderboren.nl or 085-2736378. We aim to answer a privacy question carefully and within the statutory time limit.
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority for privacy legislation.
13. Changes to this privacy policy
We may amend this privacy policy when the website, the systems used, our services or legislation change. The current version is available on PlisseZonderBoren.nl. The version date is always shown at the top.
