Privacy Policy - Pelpito

Legal Notice Pelpito B.V. (EN)

Pelpito B.V. Privacy Policy Statement

Dear consumer,
This competition is run by Pelpito B.V.. (Hereinafter “us”, “we” or “Pelpito” is referred to as Pelpito B.V.). We care about your privacy and in this privacy policy statement we want to provide you with all the necessary information about your privacy rights according to the European General Data Protection Regulation (GDPR, May 2018)

The collection, use and processing of your personal data,
Communicating and storing your personal data
Your rights

If you have any questions regarding the collection, processing and use of your personal data or are interested in exercising your rights, you can reach us at any time, by post or by email

Pelpito B.V.
Tjalk 19d, 2411 NZ Bodegraven, Netherlands
[email protected]

1. How we collect the information:
We collect, use and process personal data that you provide in the context of our relationship, such as:

Filling in one of our electronic forms
Participate in offers from us
Visiting our websites
Contact our employees

2. What information we collect, use and process:
In general, the types of personal data collected, used and processed are:

Personal data (e.g. first name, last name and date of birth)
Contact data (e.g. e-mail address, postal address and telephone number), Interest data (e.g. preferences of offers you have chosen on our page).
Technical details (e.g. data related to browser type, internet service provider (ISP), local time, location)

3. How the information is used:
Any information made available to us will be used for one or more of the following purposes:

Gaol/activities	Type of data	Lawful basis for processing
To run the contest you have signed up for on our page. .	(a) Personal data (b) Contact data	(a) Performance of a contract with you
To communicate with you and keep you informed of our latest updates: (a) Notify you about changes to our Terms and Conditions or our Privacy Statement (b) Notify you if you are the winner (c) Contact you in response on a contact request	(a) Personal data (b) Contact data	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services )
To support and troubleshoot our services and to respond to your inquiries	(a) Personal data (b) Contact data (c) Technical data	Necessity for our legitimate interests: (a) For running our business (b) provision of administration and IT services (c) Fraud prevention (d) Business reorganization or group restructuring activities
To support and troubleshoot our services and to respond to your inquiries	(a) Personal data (b) Contact data (c) Technical data	Necessity for our legitimate: (a) For our business operations (b) provision of administration and IT services (c) Network security (d) Fraud prevention (e) In the context of a corporate reorganization or group restructuring
To conduct research or analysis to improve and tailor our services to your needs and interests	(a) Personal data (b) Contact data (c) Interest data (d) Technical data	Necessity for our legitimate interests: (a) To study how customers use our products/services (b) To develop products/services (c) To define types of customers for our products and services (d) To keep our website up to date and relevant hold
To inform you about our other websites and services via e-mail, push notification, post, telephone and/or SMS and/or Whatsapp	(a) Personal data (b) Contact data (c) Interest data (d) Technical data	(a) Necessity for our legitimate interests: to develop our products/services to grow our business (b) Consent
To inform you about offers and possibilities of our partners via e-mail, push notification, mail, telephone and/or SMS and/or Whatsapp	(a) Personal data (b) Contact data (c) Profile data (d) Technical data	(a) Consent
To investigate violations and enforce our policies, and as required by law, regulation or other governmental agency	(a) Personal data (b) Contact data (c) Profile data (d) Technical data	(a) Necessity to comply with a legal obligation

Performance of our contract that we are about to enter into or have entered into with you (for example, entering the competition only)
Satisfy our legitimate interests pursued by us (e.g. for our own marketing purposes),
Comply with our legal obligations, enforce our rights and other legal uses, and
Relying on your valid consent (e.g. for third-party marketing purposes)

We reserve the right to further process the personal data we have collected for any of the foregoing purposes, including any other purposes that are consistent with the original purpose or that are permitted or prescribed by law (for example, reporting obligations).

4. What is our legal basis and for what purposes we will use your data:
Our legal basis for collecting, using and processing the information in accordance with the provisions of the European General data protection Regulation (GDPR, 2018), at least, on one of the following legal bases, listed in a table format.

5. Where your data is stored and for how long:
We store the personal data on the basis of the following aspects:

Within the European Economic Area.
We store your information on our secure servers.
We will retain your personal data for as long as necessary to fulfill the purposes described above – in principle for 4 years (four) years – provided that no revocation or deletion takes place.
After withdrawing your consent to the processing of your data and/or objecting to it, your data will be moved to our so-called “block list”. This means that your personal data will no longer be used for our relationship basis. We then only store your data for legal purposes (e.g. burden of proof and assertion or defense of claims) and delete it after the expiry of a period of 4 (four) years, provided that there are no compelling reasons otherwise to do or where, for other reasons – possibly in the form of renewed consent – an appropriate level of data processing is permitted.
If the personal information we retain is no longer necessary for its intended purpose for at least 6 (six) months, we will ensure that it is securely destroyed or deleted.
When transferring to third countries (outside the European Union), a secure transfer within the framework of EU data protection and privacy specifications is guaranteed.

6. How we protect your personal data:
We take the necessary precautions – administrative, organisational, technical and physical – to protect your personal data against loss, theft, misuse, unauthorized access, unauthorized transmission, unauthorized alteration and destruction. This means that your data is protected by means of access controls (securely placed servers, to which access is only granted according to defined security procedures), access controls (128-bit encrypted data transfer, individual password, menu and employee authorization, current virus software), access controls (individual access authorization of employees through personal accounts, identification and authentication requirements), disclosure controls (constant supervision and guidance from authorized personnel, no local storage of data, Despite these precautions and due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our website. Any transmission of your data to our website is therefore at your own risk.

7. What data protection rights do you have:
According to the provisions of the GDPR, you have the following data protection rights:

Right of access (Art. 15, GDPR): You have the right to obtain information about the data stored about you as an individual, including the sources and recipients of your data, as well as the purposes of subsequent processing.
Right to rectification (Art. 16, GDPR): You have the right to demand the rectification of any incorrect or inaccurate personal data we hold about you.
Right to erasure (Art. 17, GDPR): You have the right to have your personal data erased if: (i) the data is no longer necessary in relation to the purposes for which it was collected or processed; (ii) you have withdrawn your consent; or (iii) the data has been unlawfully processed.
Right to restriction of processing (Art. 18, GDPR): You have the right to have your data restricted to processing by fulfilling one of the conditions stated in Art. 18 (1) GDPR (e.g. contesting the accuracy of your personal data).
Right to withdraw consent (Art. 7, GDPR): you have the right to withdraw a previously made declaration(s) of consent in connection with the processing of your personal data with future effect, by sending an e-mail to [email protected] or by requesting it at the time you are contacted by email or telephone, SMS or post or Whatsapp. However, such withdrawal of consent does not affect the legitimacy of previously performed processing.
Right to data portability (Art. 20, GDPR): You have the right to demand the provision by us of any personal data communicated to us in a format that allows the transfer to another controller.

Right to object (Art. 21, GDPR): You have the right, on grounds related to your particular situation, to object, without any formal requirements, to the processing of your personal data, if such processing is in the public interest or pursues the legitimate interests of the company or a third party. You also have the right to object without any formal requirements to the use of personal data for marketing purposes (e.g. if you object to the processing of your personal data for direct marketing purposes, we will stop processing your personal data for this purpose) .

You should preferably submit all requests listed here in writing to the Data Protection Officer, who is the point of contact for other data protection matters.

If you would like to exercise any of the above rights in this section, please contact us at, Tjalk 19d, 2411 NZ Bodegraven, Netherlands or by email at : [email protected]

Finally, you also have the right to submit a complaint to the competent regulatory authority for – the British Data Protection Authority, Bezuidenhoutseweg 30, 2594 AV The Hague

8. Usage data and cookies
You can view our internet pages without providing any personal information. However, when you visit our pages, certain technical data is generated, which is known as “usage data”. In addition, we may use one or more cookies and in some cases include social media plug-ins. The text below is also intended to provide you with information about this.

Usage Data:
When you visit our web pages, the only items of information we store by default are the website from which you reached our page, the name of your internet service provider, which web pages you visited while we were on the internet, and the date and duration of your visit. The data obtained is completely anonymous.

For security reasons, your IP address and a time stamp are also stored. This data is used for internal purposes. The IP address is machine-related code that provides information about the computer or Internet gateway used to access the Internet when retrieving online. A timestamp is a value in a well-defined format that assigns a specific time to an event (for example, sending or receiving a message, change of data, etc.). The purpose of a timestamp is to tell people or computers when events occurred.

Social Media Plugins:
In some areas of our web pages, we include “social media plug-ins” (often known as “social media buttons”). These types of plug-ins are indicated on our pages by buttons (hence the term “buttons”), each of which shows the plug-in provider via the corresponding colors and symbols. Clicking on these buttons will allow you to do things such as tell your friends on the social networks you use that you like one of our pages, or share a link to a website with other Internet users, depending on the button

If you are browsing our website and access one of our web pages containing a social media plug-in, your browser will connect directly to the plug-in provider’s servers, and the plug-in may be removed from these servers. are downloaded. During the process, the plug-in provider may be notified that the relevant web page has been accessed through our website.

If you have a user account of which one or more social networks are operated by the providers of the plug-ins, and if you are logged in to the relevant network(s) while on one of our web pages that contains one or more plug-ins social media content of the provider(s) in question, access to that page may also link to your existing user profile(s) with the provider(s) in question. Afterwards, if you click on built-in plugins and log in to one or more of the networks (or if you are already logged in), the shared or “recommended” information will usually be posted in a condensed form in your profile. For example, the network provider may be able to retrieve and store further usage data. In this way, the providers of the networks can create user profiles that contain more information than just what you yourself have directly and actively disclosed to the network. For more information about data collection and processing, see the privacy policies of the plug-in providers.

Cookies
This website uses cookies and similar technologies to provide you with a better experience while using our website.

A cookie is a small text file that a website – when a user visits – asks your browser to store certain information on the hard drive of your device, such as login details. The cookies that may be placed by us are the so-called first party cookies. The cookies from a domain other than the website you are visiting are called third-party cookies.

We use the following category of cookies:

Necessary cookies: essential for the operation of our website.

Below is a detailed list of the cookies we use on our website:

Cookie categories	Name of cookies	Goal	Type and duration
		Necessary cookie to complete the registration and manage the popunder and popup functionalities.	3rd party 5 minutes after submission or if the user visits the site again

Push Notifications:

You will regularly receive information about Products or services via our push notifications.

To subscribe to push notifications, you must confirm the accessibility of your browser or end device to receive notifications. This process is documented and stored by us. For this purpose, the time of login and a push token or device ID are stored. This data is used, on the one hand, to send you push notifications and, on the other hand, as proof of your registration. The legal basis for this processing is your consent and thus Article 6(1)(a) GDPR.

In addition, our push notifications are also statistically evaluated. In this way we can recognize whether and when our push notifications have been displayed and clicked on. This gives us the opportunity to determine which push notifications are of interest to the recipients, so that we can tailor future messages to the assumed interests of all recipients and thus increase interest in our offer. Furthermore, in addition to the push token or device ID, we also store the thematic focus of the app on which the push notifications were triggered (e.g. business, sports, etc.). We also use this information to send push notifications to the relevant subscribers, for which they are likely to be of interest. The legal basis for the processing is Article 6(1)(f) GDPR.

You can withdraw your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future. In addition, as described above, based on Article 6(1)(f), you may at any time contest the use of your personal data. Please revoke your consent for this purpose. You can withdraw your consent via the appropriate setting for receiving push notifications in the settings of your device or browser.

Your data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. Your data will therefore be kept as long as the subscription to our push notifications is active.

To speed up the retrieval of content (e.g. images) and to defend against attacks, we use the services of cloudflare.com, a service of Cloudflare, Inc., as part of an order processing based on the standard contractual clauses .

We do not store any data containing personal data on the Cloudflare servers, but only general content, such as texts or images. When accessing this content, the device you are using connects to Cloudflare and that device’s IP address is processed.

9. Delete cookies
As a user, you can always decide for yourself which cookies, including those for push notifications, you want to accept or delete. The individual settings for this can be configured directly in the settings of your internet browser. For more information, contact your internet browser provider.

10. Minors
This site, including the data protection and privacy policy and general terms and conditions of business, is not intended for minors. Personal data of minors is not knowingly collected, used and/or disclosed.
May, 2023