Privacy policy

Version 1.5
This page was last updated on 06-11-2020

We are aware that you place your trust in us. We therefore consider it our responsibility to protect your privacy. On this page, we explain what data we collect when you use our website, why we collect this data and how we use it to improve your user experience. This way, you understand exactly how we work.

This privacy policy applies to the services of Riverwood International. You should be aware that Riverwood International is not responsible for the privacy policies of other sites and sources. By using this website, you indicate that you accept the privacy policy.

Riverwood International respects the privacy of all users of its site and ensures that the personal information you provide to us is treated confidentially.

Our use of collected data

Use of our services

When you sign up for one of our services, we ask you to provide personal data. This data is used to provide the service. The data is stored on secure servers belonging to Johnson Petfoods or to a third party. We will not combine this data with other personal data we have.

Use of personal data

When you use our online store, we obtain certain data from you. This may be personal data. We only store and use personal data that you provide directly, in connection with the service you request, or where it is clear when provided that you are giving it to us for processing.

We use the following data for the purposes stated in this privacy statement:

• Name and address details
• Telephone number
• Billing address
• Email address
• Payment details
• IP address

Register

For certain parts of our online store, you must register first. After registration, we store the personal data you provide under the username you choose. We store this data so that you do not have to enter it again each time and so that we can contact you in connection with performing the agreement.

We will not provide the data linked to your username to third parties, unless this is necessary to perform the agreement you enter into with us or if required by law. If we suspect fraud or misuse of our online store, we may hand over personal data to the competent authorities.

Portal access

Through our portal, you can access an administration environment where you can set up, provide and change information yourself.

Order processing

When you place an order with us, we use your personal data to process it. If necessary for proper processing, we may also provide your personal data to third parties, such as:

• delivery services (e.g. PostNL);
• payment processors (e.g. Buckaroo and AfterPay);
• Review platforms (e.g. Trustpilot);
• ICT companies (e.g. hosting providers)

Communication

When you send us email or other messages, we may retain those messages. Sometimes we ask you for personal data that is relevant to the situation in question. This enables us to process your questions and respond to your requests. The data is stored on Riverwood International’s own secure servers or those of a third party. We will not combine this data with other personal data we hold.

Cookies

We collect data for research to gain a better understanding of our customers, allowing us to tailor our services accordingly. This website uses “cookies” (text files placed on your computer) to help analyze how users use the site. The information generated by the cookie about your use of the website may be transferred to Riverwood International’s own secure servers or those of a third party. We use this information to track how you use the website, compile reports on website activity, and provide other services related to website activity and internet use.

Purposes

We do not collect or use information for purposes other than those described in this privacy policy unless we have obtained your consent in advance.

Third parties

The information is not shared with third parties. This data will only be used for the purpose of the relevant application and will not be distributed further. In some cases, the information may also be shared internally. Our employees are required to respect the confidentiality of your data.

About data processing

Below, you can read how we process your data, where we store or have it stored, which security techniques we use, and who has access to the data.

Online store software

Umbraco

Our online store was developed using Umbraco software. Personal data that you provide to us for the purpose of our services is shared with this party. Umbraco has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Under the agreement we have concluded with them, Umbraco is required to take appropriate security measures. These security measures include the use of SSL encryption, a strong password policy, and secure data storage. Umbraco reserves the right to share collected data within its own group and with affiliated partners to further improve its services. Umbraco complies with the applicable statutory retention periods for (personal) data.

Web hosting

Kresco

We purchase web hosting and email services from Kresco. Kresco processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. Kresco has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. Under the agreement, Kresco is required to maintain confidentiality.

Email and mailing lists

MailChimp

We send our email newsletters using MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically through our website, you will find an ‘unsubscribe’ link. You will no longer receive our newsletter after using it. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies to determine whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and, for this purpose, to share information with third parties.

99projects

For our regular business email communications, we use the services of 99Projects. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your data and ours as much as possible. 99Projects does not have access to our mailbox, and we treat all our email correspondence confidentially.

Payment processors

Buckaroo

Buckaroo handles payment processing for our online store. Buckaroo communicates with banking systems and processes your payment. It is supervised by De Nederlandsche Bank, and payments are processed through a third-party funds foundation account. Buckaroo is internationally certified in accordance with MasterCard and Visa PCI standards and ensures that payments made via iDEAL, credit card, and bank transfer are processed correctly and securely (payments made via PayPal are processed directly by PayPal).

Reviews

WebwinkelKeur

We collect reviews through the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to ask for an explanation of your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information solely to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data.

WebwinkelKeur reserves the right to engage third parties to provide its services; we have given WebwinkelKeur permission to do so. All the safeguards mentioned above concerning the protection of your personal data also apply to the parts of the services for which WebwinkelKeur engages third parties.

Shipping and logistics

PostNL

If you place an order with us, it is our responsibility to have your package delivered to you. We use the services of PostNL to carry out deliveries. To do so, it is necessary for us to share your name, address, and place of residence with PostNL. PostNL uses this data solely to perform the agreement. If PostNL engages subcontractors, PostNL also makes your data available to these parties.

Invoicing and accounting

General purpose of processing

We use your data solely to provide our services. This means that the purpose of processing is always directly related to the assignment you give us. We do not use your data for (targeted) marketing. If you share your data with us and we use it to contact you at a later time for a purpose other than at your request, we will explicitly ask for your consent. Your data is not shared with third parties, except to meet accounting and other administrative obligations. These third parties are all bound to confidentiality under the agreement between them and us, an oath, or a legal obligation.

Automatically collected data

Data automatically collected by our website is processed to further improve our services. This data (such as your IP address, web browser, and operating system) does not constitute personal data.

Cooperation with tax and criminal investigations

In certain cases, Johnson Petfoods B.V. may be legally required to share your data in connection with a government tax or criminal investigation. In such a case, we are obliged to share your data, but we will oppose this within the limits permitted by law.

Retention periods

We retain your data for as long as you are our client. This means that we retain your customer profile until you indicate that you no longer wish to use our services. If you notify us of this, we will also treat it as a request to be forgotten. Under applicable administrative obligations, we must retain invoices containing your personal data; we will retain this data for as long as the applicable retention period runs. However, employees will no longer have access to your client profile or to documents we have prepared in connection with your assignment.

Security

The security of personal data is very important to us. We ensure that your data is properly secured with us. We continually adapt our security measures and carefully monitor what could go wrong. However, transmissions over the internet can never be completely secure or error-free. We nevertheless take appropriate technical and organizational measures, proportionate to the risks of misuse, unauthorized access, unwanted disclosure, alteration, or destruction of personal data, and to protect your personal data. We also ensure that third parties and affiliated companies that process personal data on behalf of Johnson Petfoods maintain adequate security and comply with the applicable laws and regulations.

Data breaches

If, unfortunately, Riverwood International accidentally or deliberately loses your personal data or your personal data falls into the hands of unauthorized third parties, this constitutes a data breach. Riverwood International’s data protection officer will report this data breach digitally to the Dutch Data Protection Authority within 72 hours of the moment Riverwood International discovers the data breach. The report will state: the nature of the breach, which authorities or persons can be consulted to obtain more information about the breach, which measures are recommended to limit the negative consequences of the breach, the possible consequences of the breach, and which measures Riverwood International has taken or proposes to take to remedy these consequences. If the breach poses a high risk to the person or persons concerned, Riverwood International will notify them. Riverwood International will also document a data breach internally in the “data breach register” in order to learn from it and take measures to prevent a similar data breach in the future.

We have implemented the necessary administrative, technical, and organizational measures to ensure a level of security appropriate to the specific risks we have identified. We protect your personal data against destruction, loss, alteration, unauthorized disclosure of or access to personal data that is transmitted, stored, or otherwise processed.

Rights

Under applicable Dutch and European legislation, you, as the data subject, have certain rights regarding the personal data processed by or on our behalf. Below, we explain what these rights are and how you can exercise them. In principle, to prevent misuse, we send copies of your data only to the email address we already have on file. If you wish to receive the data at a different email address or, for example, by post, we will ask you to verify your identity. We keep records of completed requests; in the case of a request to be forgotten, we record anonymized data. You will receive all copies of data in the machine-readable data format used within our systems.

You have the right at any time to file a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data incorrectly.

Right of access

You always have the right to inspect the data that we process (or have processed) and that relates to you personally or can be traced back to you. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all the data to the email address we have on file, together with an overview of the processors that hold this data, specifying the category under which we have stored it.

Right to rectification

You always have the right to have the data we process or have processed that concerns you or can be traced back to you corrected. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to the email address known to us that the data has been corrected.

Right to restriction of processing

You always have the right to restrict the data we process or have processed that concerns you or can be traced back to you. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to the email address known to us that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have the data we process or have processed that concerns you or can be traced back to you transferred to another party. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send copies or reproductions of all data concerning you that we have processed or that have been processed on our behalf by other processors or third parties to the email address known to us. In all likelihood, we will no longer be able to continue providing our services in such a case, because the secure linking of data files can then no longer be guaranteed.

Right to object and other rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of Johnson Petfoods B.V. If you object, we will immediately stop processing the data pending the handling of your objection. If your objection is justified, we will provide you with copies and/or reproductions of the data that we process or have processed and will then permanently stop processing it. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that makes this right applicable. If you believe that we do, please contact our privacy contact person.

Cookies

Google Analytics

Cookies are placed on our website by the American company Google as part of its “Analytics” service. We use this service to track and obtain reports on how visitors use the website. This processor may be required under applicable laws and regulations to provide access to this data. We have not permitted Google to use the analytics information obtained for other Google services.

Third-party cookies

If third-party software solutions use cookies, this is stated in this privacy statement.

Other provisions

Changes

This privacy statement is tailored to the use and features of this site. Any adjustments and/or changes to this site may result in changes to this privacy statement. We therefore recommend consulting this privacy statement regularly.

Choices regarding personal data

We offer all visitors the opportunity to view, change, or delete all personal information provided to us at that time.

Modifying/unsubscribing from the newsletter service

At the bottom of every mailing, you will find the option to modify your data or unsubscribe.

Modifying/unsubscribing from communications

If you would like to modify your data or have yourself removed from our records, you can contact us. See the contact details below.

Disabling cookies

Most browsers are set to accept cookies by default, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services on our website and other websites may not function correctly if cookies are disabled in your browser.

Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. However, this page will always contain the most recent version. If the new privacy policy affects how we process data already collected about you, we will notify you by email.

Contact details

Riverwood International B.V.

Saffierborch 16
5241 LN Rosmalen
The Netherlands

T 073 – 522 0873
E info@johnsonpetfoods.nl

Contact person for privacy matters

John Sars