Privacy statement

Redlab (sole proprietorship), trading as REDLAB, is responsible for the processing of personal data as described in this privacy statement. We handle your data carefully and comply with the General Data Protection Regulation (GDPR).

Depending on how you use REDLAB, we process the following data:

We receive this data directly from you (with your order, account or message), automatically via the webshop (cookies and similar techniques), and via our service providers who process data on our behalf.

Providing your contact, order and payment details is necessary to be able to fulfil your order; without this data we cannot conclude or perform the agreement with you.

We process your data only for clearly described purposes, each time on the basis of a legal ground under the GDPR:

We do not make decisions with legal effects based solely on automated processing (profiling).

We never sell your data to third parties. We do engage service providers who process data on our instructions (processors), with whom we have concluded a data processing agreement. Listed below are only the service providers we actually use:

In addition, we may share data when legally required to do so. In the event of a warranty or return claim, we may share the relevant order data with our supplier or manufacturer to handle your request; communication with you always takes place via REDLAB.

Some of our service providers (such as Stripe) may process data outside the European Economic Area (EEA). In that case we ensure appropriate safeguards, such as the EU Standard Contractual Clauses (SCCs) or an adequacy decision of the European Commission. On request, we will inform you of the safeguard applied.

We do not keep your data longer than necessary. We specifically apply the following retention periods:

Our webshop uses cookies. Necessary cookies are always active; for the other cookies we ask your consent in advance.

For analytics and marketing cookies we ask your consent in advance via the cookie notice; you can change or withdraw your preferences at any time. See our cookie policy for the details. At present we do not yet place any analytics or marketing cookies ourselves.

Under the GDPR you have the following rights:

• Access: requesting which data we process about you.
• Rectification: having incorrect data corrected.
• Erasure: having your data deleted (the "right to be forgotten").
• Restriction: having processing temporarily restricted.
• Objection: objecting to processing based on legitimate interest or to direct marketing.
• Data portability: receiving your data in a common format or having it transferred.
• Withdrawing consent: always withdrawing previously given consent.

Send your request to [e-mail address]; we respond within the statutory term (one month at the latest). To prevent misuse, we may ask you to confirm your identity before we carry out your request.

Do you disagree with how we handle your data? We would like to hear that from you directly first, via [e-mail address]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unlawful processing. Have you nevertheless identified a vulnerability or a possible data breach? Please contact us via [e-mail address].

Our webshop is not directed at children. We do not knowingly collect personal data from persons under 18 years of age. Are you a parent or guardian and believe your child has provided us with data? Please contact us via [e-mail address], and we will delete it.

We may amend this privacy statement. The most current version is always available on our webshop. This version dates from [dd-mm-yyyy].