Privacy policy

About this privacy policy

Hej Refurbished takes the protection of your privacy seriously. We only process personal data that is necessary to deliver, support and improve our service. We handle the data you give us, or that we collect through the use of our website, carefully and confidentially.

We do not sell your personal data to third parties and we do not make it available for the commercial purposes of other parties. This privacy policy applies to the use of our website and to the services offered through Hej Refurbished.

This privacy policy takes effect on 12 januari 2024. When we publish a new version, earlier versions automatically lapse. In this document we explain which personal data we collect, why we process it, how we protect it, which parties it may be shared with and what rights you have regarding your data.

If you have questions about this privacy policy or about the way we handle personal data, you can reach us through the contact details at the bottom of this document.

About the processing of personal data

In the sections below you can read how we process personal data, with which parties data may be stored, which security measures are applied and which parties can have access to certain data.

Webshop software

Shopify

Our webshop is built with software from Shopify. We also use Shopify to host our webshop. Personal data you provide to us for the use of our service may be processed through Shopify.

Shopify can access certain personal data when this is needed to provide technical support, to keep the webshop working properly or to process orders correctly. Shopify does not use this data for its own purposes outside the service. Under the agreements we have made with Shopify, Shopify is required to take appropriate technical and organisational security measures.

These measures include secured connections, careful access management and systems set up to protect data as well as possible against loss, misuse or unauthorised access.

Yourhosting

For web hosting and email services we use Yourhosting. Yourhosting processes personal data on behalf of Hej Refurbished and does not use this data for its own commercial or independent purposes.

Reloadify

For sending newsletters and automated emails we use Reloadify. When you sign up for our newsletter, or when an automatic email is sent through our website, your name and email address may be processed through Reloadify.

Reloadify does not use your data for its own marketing purposes. Every newsletter contains an unsubscribe link at the bottom. As soon as you unsubscribe, you will no longer receive newsletters from us.

Reloadify stores personal data securely. Reloadify also uses cookies and comparable techniques to see whether emails are opened and read. Reloadify may use data to improve its own service and may share information with third parties in that context, as far as applicable law permits.

Payment providers

Mollie

To process payments in our webshop we use Mollie. Mollie processes your name, address, town and payment details, such as bank account or credit card details, as far as these are needed to handle the payment correctly.

Mollie has taken appropriate technical and organisational measures to protect personal data. Mollie may use data to improve its service and may share anonymised data with third parties in doing so.

When Mollie engages other parties for parts of its service, the same safeguards apply to the protection of personal data. Mollie does not keep personal data longer than is legally permitted or necessary for processing payments.

Reviews

Trusted Shops

We use Trusted Shops to collect customer reviews. When you leave a review through Trusted Shops, you are asked for a name and email address. Trusted Shops shares this data with us so that we can link the review to your order. Trusted Shops SE is based at Subbelrather Straße 15c, 50823 Cologne (Germany).

Your name may be published visibly with the review on the Trusted Shops website. In some cases Trusted Shops may contact you to ask for an explanation of your review.

When we invite you to leave a review, we share your name and email address with Trusted Shops. This data is used only to invite you to post a review.

Trusted Shops has taken appropriate security measures to protect personal data. Trusted Shops may engage third parties to deliver the service. We have given our consent for this. Appropriate safeguards for the protection of personal data apply to those third parties as well.

Shipping and logistics

PostNL

When you place an order with Hej Refurbished, we have to make sure your order reaches you. We use PostNL to carry out deliveries.

To deliver your parcel, we share your name, address and town with PostNL. PostNL uses this data only to carry out the delivery. When PostNL uses subcontractors, the necessary data may also be shared with those parties to carry out the delivery.

Invoicing and bookkeeping

e-Boekhouden

For our administration and bookkeeping we use e-Boekhouden. For this we process your name, address, town and details about your order.

This information is needed to draw up sales invoices and to meet our statutory administrative obligations. The data is sent and stored securely. e-Boekhouden is bound to confidentiality and treats your data confidentially. Your personal data is not used for purposes other than administration and bookkeeping.

External sales channels

Bol.com

Some of our products may be offered through Bol.com. When you place an order through Bol.com, Bol.com shares with us the data needed to process your order.

We use this data only to handle your order correctly. Hej Refurbished treats this data confidentially and takes appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access.

Purpose of data processing

General purpose of processing

We only use personal data for purposes that are directly related to our service. This means we process your data to handle orders, process payments, ship parcels, provide customer service, keep our administration and keep our webshop working properly.

We do not use your data for targeted marketing without your consent. When we want to use your data to contact you later for a purpose other than the one you provided it for, we ask for your consent first.

Personal data is not shared with third parties, except where this is necessary for our service, our administration, legal obligations or the performance of an agreement. Parties that process data on our behalf are bound to confidentiality through an agreement, a legal obligation or a professional duty of confidentiality.

Automatically collected data

Our website may automatically collect certain technical data, such as your IP address, browser, device and operating system. We use this data to analyse how our website performs and to improve our service.

As far as this data cannot be traced directly back to you, we do not regard it as personal data. When technical data does qualify as personal data, we treat it in line with this privacy policy.

Cooperation with tax and criminal investigations

In certain cases Hej Refurbished may be legally obliged to share personal data with government authorities, for example as part of a tax or criminal investigation.

Where we are legally required to provide data, we have to cooperate. Within the room the law gives us, we assess whether the request is lawful and necessary.

Retention periods

We do not keep personal data longer than necessary for the purpose it was collected for. As long as you are a customer of Hej Refurbished, we may keep your customer profile so that we can deliver our service properly.

When you tell us you no longer wish to use our services, we treat this as a request to delete your data, as far as the law allows. Some data, such as invoice data, we have to keep longer because of statutory administrative obligations.

Once data is no longer actively needed for our service, we limit access to it. Staff then no longer have access to customer profiles or documents, unless this is necessary for legal obligations or security purposes.

Your rights

Under European data protection law you have several rights regarding the personal data we process about you. Below we explain which rights you have and how to use them.

To prevent misuse, we in principle send copies or overviews of personal data only to the email address already known to us. If you want to receive the data at another email address or by post, we may ask you to identify yourself.

We keep a record of which requests have been handled. For a deletion request we may keep anonymised data to show that the request was processed. You also always have the right to lodge a complaint with the competent data protection authority if you believe we handle your data incorrectly.

Right of access

You have the right to know which personal data we process about you. You can submit a request through our contact details.

We respond to your request within 30 days. If your request is approved, you will receive at the email address known to us an overview of the personal data we process, including information about the parties that process this data on our behalf and the categories in which it is stored.

Right to rectification

When personal data is incorrect, incomplete or out of date, you have the right to have it corrected. You can contact us for this.

You will receive a response to your request within 30 days. If we approve your request, we confirm that the data has been corrected.

Right to restriction of processing

You have the right to ask us to restrict the processing of your personal data temporarily or partly. This may apply, for example, when you contest the accuracy of the data or the way we process it.

We respond to your request within 30 days. If the request is approved, we will not process the data concerned any further for as long as the restriction applies, unless processing is legally permitted or necessary.

Right to data portability

You have the right to receive the personal data we process about you in a transferable form, or to have it transferred to another party.

You can submit a request through our contact details. You will receive a response within 30 days. If the request is approved, we will send you a copy of the data we process about you or that is processed on our behalf by other parties.

In some cases transferring data may affect our ability to continue the service, for example when secure connections between systems can no longer be guaranteed.

Right to object and other rights

In certain situations you have the right to object to the processing of your personal data by Hej Refurbished or by parties that process data on our behalf.

When you object, we temporarily stop the processing concerned until your objection has been assessed. If your objection is justified, we stop the processing permanently and, where needed, make copies or overviews of the data concerned available to you.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, where this produces legal effects concerning you or similarly significantly affects you. Hej Refurbished does not process personal data in a way to which this right applies. If you believe it does, you can contact us.

Cookies

Google Analytics

Our website may place cookies from Google Analytics. We use Google Analytics to understand how our website is used and to receive reports about visitor behaviour.

This information helps us improve our website and make it easier to use. Google may be required by law and regulations to provide data to competent authorities. We have not given Google permission to use the analytics data obtained through our website for other Google services.

Third party cookies

When software or services from third parties use cookies through our website, this is stated in this privacy policy where applicable.

Changes to this privacy policy

Hej Refurbished reserves the right to change this privacy policy. The most recent version is always shown on this page.

When a new version affects the way we process personal data already collected, we will inform you by email, as far as this is needed or legally required.

Contact details