Privacy Policy
ESS B.V. respects the privacy of its customers, users and visitors to our website.
In this Privacy Policy, we explain which personal data we process, why we process it
and how we protect this data.
What data do we process?
Depending on the service used, we may process the following data:
- company name and/or personal name;
- address details;
- email address;
- telephone number;
- Chamber of Commerce number;
- login details;
- information about services used;
- payment and invoice details;
-
product, order and customer data required for integrations with webshops,
marketplaces or other external platforms.
When our customer uses order integrations or similar services, we may also process
customer data on behalf of that customer. In that case, ESS B.V. acts as a processor
and our customer remains the data controller.
Sharing data with third parties
We only share personal data with third parties when this is necessary for the performance
of our services, when we have received permission to do so or when we are legally required
to do so.
When we engage third parties to process personal data, we ensure that appropriate
agreements are made regarding confidentiality, security and data protection.
Processing outside the European Economic Area
Personal data is processed within the European Economic Area as much as possible.
If processing outside the European Economic Area is necessary, we take appropriate
measures to ensure that personal data is properly protected in accordance with applicable
privacy laws.
Security
ESS B.V. takes appropriate technical and organisational measures to protect personal data
against loss, unauthorised access, modification or unlawful processing. These measures
include secure connections, access controls, firewalls, security updates and, where possible,
password hashing.
Although we make reasonable efforts to protect data, we cannot guarantee that security
measures will be fully effective under all circumstances.
Data breaches
If a security incident or data breach occurs, we will assess it as soon as possible and,
where necessary, notify the relevant customer or responsible party. Where required, we will
cooperate with notifications to supervisory authorities or affected individuals.
Retention periods
We do not retain personal data longer than necessary for the purpose for which it was
collected, unless a longer retention period is required by law.
Rights of individuals
Individuals have the right to access their personal data, have it corrected, deleted or
restrict its processing. They may also object to certain types of processing.
When ESS B.V. processes data on behalf of a customer, any request from an individual may,
where necessary, be forwarded to the relevant customer as the data controller.
