Privacy Policy

Version 1.5
This page was last updated on 06-11-2020

We are aware that you place your trust in us. We therefore see it as our responsibility to protect your privacy. On this page, we let you know what data we collect when you use our website, why we collect this data, and how we improve your user experience with it. This way, you understand exactly how we operate.

This privacy policy applies to the services of Riverwood International. You should be aware that Riverwood International is not responsible for the privacy policies of other sites and sources. By using this website, you agree to the privacy policy.

Riverwood International respects the privacy of all users of its site and ensures that the personal information you provide to us is treated confidentially.

Our use of collected data

Use of our services

When you sign up for one of our services, we ask you to provide personal data. This data is used to carry out the service. The data is stored on Johnson Petfoods’ own secure servers or those of a third party. We will not combine this data with other personal data we hold.

Use of personal data

When using our webshop, we obtain certain data from you. These may be personal data. We only store and use the personal data that you provide directly, in connection with the service you request, or which is clearly provided to us for processing.

We use the following data for the purposes mentioned in this privacy statement:

• Name, Address, and Residence details
• Phone number
• Billing address
• Email address
• Payment details
• IP address

Register

For certain parts of our webshop, you must first register. After registration, we store the personal data you provide via the username you choose. We keep this data so you don’t have to fill it in every time and so we can contact you in connection with the execution of the agreement.

We will not share the data linked to your username with third parties unless it is necessary for the execution of the agreement you have with us or if required by law. In case of suspected fraud or misuse of our webshop, we may hand over personal data to the competent authorities.

Portal access

With our portal, you can access a management environment where you can set, provide, and change things yourself.

Order processing

When you place an order with us, we use your personal data to process it. If necessary for proper handling, we may also share your personal data with third parties such as:

• delivery services (e.g., PostNL);
• payment processors (e.g., Buckaroo and AfterPay);
• Review parties (e.g., Trustpilot);
• ICT companies (e.g., hosting providers)

Communication

When you send emails or other messages to us, it is possible that we will save those messages. Sometimes we ask you for personal data relevant to the specific situation. This makes it possible to process your questions and respond to your requests. The data is stored on Riverwood International’s own secure servers or those of a third party. We will not combine this data with other personal data we hold.

Cookies

We collect data for research to gain better insight into our customers so that we can tailor our services accordingly. This website uses “cookies” (text files placed on your computer) to help analyze how users use the site. The information generated by the cookie about your use of the website may be transferred to Riverwood International’s own secure servers or those of a third party. We use this information to track how you use the website, to compile reports on website activity, and to offer other services related to website activity and internet usage.

Purposes

We do not collect or use information for purposes other than those described in this privacy policy unless we have obtained your prior consent.

Third parties

The information is not shared with third parties. This data will only be used for the purpose of the specific application and will not be further distributed. In some cases, the information may be shared internally. Our employees are required to respect the confidentiality of your data.

About data processing

Below you can read how we process your data, where we store it, which security techniques we use, and who has access to the data.

Online store software

Umbraco

Our online store is developed with software from Umbraco. Personal data that you provide to us for our services is shared with this party. Umbraco has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Based on the agreement we have with them, Umbraco is obliged to take appropriate security measures. These security measures include the use of SSL encryption, a strong password policy, and secure data storage. Umbraco reserves the right to share collected data within its own group and affiliated partners to further improve the service. Umbraco complies with the applicable legal retention periods for (personal) data.

Web hosting

Kresco

We use web hosting and email services from Kresco. Kresco processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. Kresco has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Kresco is bound by confidentiality under the agreement.

Email and mailing lists

MailChimp

We send our email newsletters with MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically via our website, you will see the ‘unsubscribe’ link. You will then no longer receive our newsletter. Your personal data is securely stored by MailChimp. MailChimp uses cookies and other internet technologies to track whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and to share information with third parties in that context.

99projects

We use the services of 99Projects for our regular business email communications. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. 99Projects does not have access to our mailbox, and we treat all our email communications confidentially.

Payment processors

Buckaroo

Buckaroo handles the payment processing for our webshop. Buckaroo communicates with banking systems and processes your payment. They are supervised by De Nederlandse Bank, and payments are made through a Stichting Derdengelden account. Buckaroo is internationally certified according to the PCI standards of MasterCard and Visa and ensures proper and secure handling of payments via iDeal, credit card, and bank transfer (payments via PayPal are processed by PayPal itself).

Reviews

WebwinkelKeur

We collect reviews through the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on their own website. In some cases, WebwinkelKeur may contact you to provide clarification on your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information solely to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data.

WebwinkelKeur reserves the right to engage third parties to provide the service, for which we have given WebwinkelKeur permission. All the above-mentioned guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

Shipping and logistics

PostNL

If you place an order with us, it is our responsibility to have your package delivered to you. We use the services of PostNL to carry out deliveries. For this, it is necessary that we share your name, address, and place of residence with PostNL. PostNL uses this data only to fulfill the agreement. In the event that PostNL engages subcontractors, PostNL also provides your data to these parties.

Invoicing and bookkeeping

General purpose of processing

We use your data solely for the purpose of providing our services. This means that the purpose of processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you later – other than at your request – we will explicitly ask for your permission. Your data is not shared with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound by confidentiality under the agreement between them and us or by oath or legal obligation.

Automatically collected data

Data automatically collected by our website is processed with the aim of further improving our services. This data (for example, your IP address, web browser, and operating system) is not personal data.

Cooperation with tax and criminal investigations

In certain cases, Johnson Petfoods B.V. may be legally required to share your data in connection with tax or criminal investigations by government authorities. In such cases, we are compelled to share your data, but we will oppose this within the limits allowed by law.

Retention Periods

We retain your data as long as you are a client of ours. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also treat it as a request for erasure. Based on applicable administrative obligations, we must keep invoices containing your (personal) data, and we will retain this data for as long as the applicable period lasts. However, employees no longer have access to your client profile and documents we have created in response to your assignment.

Security

The security of personal data is very important to us. We ensure that your data is well protected with us. We continuously adjust security and carefully monitor what can go wrong. However, transmissions over the internet can never be fully secured or error-free. Nevertheless, we take appropriate technical and organizational measures, suitable for the risks of misuse, unauthorized access, unwanted disclosure, alteration, or destruction of personal data, to protect your personal data. We also ensure that third parties and affiliated companies processing personal data on behalf of Johnson Petfoods maintain adequate security and comply with the applicable laws and regulations.

Data Breaches

If it unexpectedly occurs that Riverwood International accidentally or intentionally loses your personal data or that your personal data falls into the hands of unauthorized third parties, this constitutes a data breach. The data protection officer of Riverwood International will digitally report this data breach to the Dutch Data Protection Authority within 72 hours from the moment Riverwood International discovers the breach. The report will include: the nature of the breach, which agencies or persons can be consulted for more information about the breach, recommended measures to limit the negative consequences of the breach, the possible consequences of the breach, and the measures taken or proposed by Riverwood International to remedy these consequences. If the breach poses a high risk to the person(s) involved, Riverwood International will notify them. Riverwood International also documents the data breach internally in the ‘data breach register’ to learn from it and to take measures to prevent such a data breach in the future.

We have taken the necessary administrative, technical, and organizational measures to ensure a level of security appropriate to the specific risks we have identified. We protect your personal data against destruction, loss, alteration, unauthorized disclosure of, or access to personal data that is transmitted, stored, or otherwise processed.

Rights

Under applicable Dutch and European law, you as a data subject have certain rights regarding the personal data processed by or on behalf of us. Below we explain what these rights are and how you can exercise them. In principle, to prevent misuse, we only send copies of your data to the email address we already have on file for you. If you wish to receive the data at a different email address or, for example, by post, we will ask you to verify your identity. We keep a record of processed requests; in the case of a deletion request, we record anonymized data. All copies of data you receive will be in the machine-readable data format used within our systems.

You always have the right to file a complaint with the Data Protection Authority if you suspect that we are using your personal data improperly.

Right of Access

You always have the right to access the data that we (or our agents) process that relates to you or can be traced back to you. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the email address we have on file, along with an overview of the processors who have access to this data, specifying the category under which we have stored this data.

Right to rectification

You always have the right to have the data we process (or have processed) concerning you or identifiable to you corrected. You can submit a request to this effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data has been corrected.

Right to restriction of processing

You always have the right to restrict the processing of data we process (or have processed) concerning you or identifiable to you. You can submit a request to this effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have the data we process (or have processed) concerning you or identifiable to you handled by another party. You can submit a request to this effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or extracts of all data about you that we have processed or that have been processed on our behalf by other processors or third parties to the email address we have on file. In all likelihood, we will no longer be able to continue providing the service in such a case, as the secure linking of data files can no longer be guaranteed.

Right to object and other rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of Johnson Petfoods B.V.. If you object, we will immediately stop the data processing pending the handling of your objection. If your objection is justified, we will provide you with copies and/or extracts of the data we process (or have processed) and then permanently cease the processing. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in a way that this right applies. If you believe this is the case, please contact our privacy officer.

Cookies

Google Analytics

Cookies from the American company Google are placed via our website as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. This processor may be required by applicable laws and regulations to provide access to this data. We have not allowed Google to use the obtained analytics information for other Google services.

Third-party cookies

In the event that third-party software solutions use cookies, this is stated in this privacy statement.

Other provisions

Changes

This privacy statement is tailored to the use and possibilities of this site. Any adjustments and/or changes to this site may lead to changes in this privacy statement. It is therefore advisable to regularly consult this privacy statement.

Choices for personal data

We offer all visitors the possibility to view, change, or delete all personal information currently provided to us.

Adjusting/unsubscribing newsletter service

At the bottom of every mailing, you will find the option to adjust your data or unsubscribe.

Adjusting/unsubscribing communication

If you want to adjust your data or have yourself removed from our files, you can contact us. See the contact details below.

Disabling cookies

Most browsers are set by default to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services on our and other websites may not function properly if cookies are disabled in your browser.

Changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, on this page, you will always find the most recent version. If the new privacy policy affects the way we process data already collected about you, we will notify you by email.

Contact details

Riverwood International B.V.

Saffierborch 16
5241 LN Rosmalen
Netherlands

T 073 – 522 0873
E info@johnsonpetfoods.nl

Contact person for privacy matters

John Sars