Privacy Policy (GDPR)
last modified date: 30/04/2018

The original version of this Privacy Policy is written in Dutch. To the extent any translated version of this Privacy Policy conflicts with the Dutch version, the Dutch version controls.

ImagineDis/MotionPictureArt.com (“we,” ” us,” or “our“) cares a lot about your privacy. We therefore only process data that we need for (improving) our services and we handle the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.
The purpose of the General Data Protection Regulation (GDPR), also called Algemene verordening gegevensbescherming (AVG) in Dutch, is to ensure that the security of your personal data is the same throughout the European Union. Personal data means any kind of information about a person that can lead to their identification.
This privacy policy applies to the use of the website and the services provided by ImagineDis/MotionPictureArt.com. This privacy policy is effective as of 30/04/2018, with the publication of a new version the validity of all previous versions ends. This Privacy Policy describes what information about you is collected by us, where this information is used and with whom and under what conditions this information may be shared with third parties. We also explain how we store your data and how we protect your data against misuse and what rights you have with regard to the personal data you provide us.
We recommend that you store or print this privacy policy so you can read it again at a later time.
ImagineDis/MotionPictureArt.com takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your data is not secure or if there are any indications of misuse or if you have any questions about our privacy policy, please contact our privacy contact person, you will find the contact details at the end of this privacy policy.

Concerning data processing
ImagineDis/MotionPictureArt.com processes your personal data because you use our services and / or because you provided them yourself.
Below you can read how we process your data, where we save it, which security techniques are used and for whom which data is accessible.
This Privacy Policy does not apply to the practices of third parties that we do not own, control, or manage, including but not limited to any third party websites, services, applications, or businesses (“ Third Party Services”). While we try to work only with those Third Party Services that share our respect for your privacy, we don’t take responsibility for the content or privacy policies of those Third Party Services. We encourage you to carefully review the privacy policies of all Third Party Services you access.

Our websites and / or services do not intend to collect data about website visitors who are younger than 16 years. Unless they have permission from parents or guardians. However, we can not check if a visitor is older than 16. We encourage parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us and we will delete this information.

ImagineDis/MotionPictureArt.com processes your personal data for the following purposes:
– Handling your payment
– Sending our newsletter and/or advertising brochure
– To call or e-mail you if necessary to carry out our services
– Give you the opportunity to create an account
– To deliver goods and services to you
– ImagineDis/MotionPictureArt.com also processes personal data if we are legally obliged to do so, such as data that we need for our tax return

Webshop software and Web Hosting
Our webshop was developed with software from WordPress/WooCommerce, we have opted for A2Hosting for our web hosting.

WordPress/WooCommerce
Our webshop is developed with software from WordPress/WooCommerce. WordPress/WooCommerce does not have access to your personal data. However, they and parties that provide software components can collect metadata about the use of the software. These are not personal data. We have taken appropriate technical and organizational measures to prevent abuse, loss and corruption of data as much as possible. These security measures consist at least of the application of SSL encryption and a strong password policy. Backups are regularly made to prevent data loss.
You are not obliged to create an online account / profile in order to use our websites/services. Your account Information is protected by a password for your privacy and security. We may enable additional security features in the future, like multi-factor authentication. You need to prevent unauthorized access to your Account and information by creating a unique, secure, and protected password and limiting access to your computer and browser by signing off after you have finished accessing your account.

Web Hosting
We take web hosting and e-mail services from A2Hosting. A2Hosting processes personal data on our behalf and does not use your data for its own purposes. However, this party can collect metadata about the use of the services. These are not personal data. A2Hosting has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. By the agreement between A2Hosting and ImagineDis/MotionPictureArt.com, A2Hosting is required to keep any customer information confidential, unless it is lawfully requested for by public authorities.

E-mail and Mailing Lists

Email Communications with Us
As part of the Services, you may occasionally receive email and other communications from us. Administrative communications relating to your Account (e.g., for purposes of Account recovery or password reset) are considered part of the Services and your Account, which you may not be able to opt-out from receiving. We also may send you other kinds of emails, which you can opt-out of either from your Account Settings page or by using the “Opt-Out” link in the emails themselves. Note that we will never email you to ask for your password or other Account Information; if you receive such an email, please forward it to us.

MailChimp
We send our e-mail newsletters via MailChimp. MailChimp will never use your name and e-mail address for their own purposes. At the bottom of every e-mail sent you will see an ‘Unsubscribe’ link. You will no longer receive our newsletter by clicking this link. Your personal data will be stored securely by MailChimp. MailChimp uses cookies and other internet technologies to track if e-mails were opened and read. MailChimp reserves the right to use anonymized/general data to further improve their services and, in this context, to share your information with third parties.

A2Hosting
We use the services of A2Hosting for our regular business e-mail traffic. This party takes appropriate technical and organizational measures to avoid abuse, loss and corruption of your and our data as much as possible. A2Hosting does not have access to our mailbox and treats all our e-mail traffic  as confidential, unless it is lawfully requested for by public authorities.

Payment Processors

Financial Information
We collect and/or process financial information, such as information related to your payment method. We ask for this information when you decide to purchase products/services. We do not, however, store that financial information; such information is stored by our payment processor (the “Payment Processor”), and use and storage of that information is governed by the Payment Processor’s applicable terms of service and privacy policy (the Payment Processor may also have other terms, and you are responsible for locating and familiarizing yourself with those terms, as applicable).
Your data will not be shared with a payment processor if you opt for an option such as cash payment at pick up or transfer the amount due by bank yourself.
We may receive certain information from our Payment Processor like unique tokens/codes (Unique payment identifier and Payment provider identifier) that we connect with your account to enable you to make (further) purchases using the information stored by our Payment Processor and in certain cases other information, so that we can prevent fraudulent transactions and identity theft.

Mollie, PayPal, SiSow, Stripe and ABN/Amro
We use the platforms of Mollie, PayPal, SiSow, Stripe and ABN/Amro to process (part of) the payments in our webshop. They use cookies and/or your personal details, address and your payment details, such as your bank account or credit card number, and have taken appropriate technical and organizational measures to protect your personal data. These platforms reserve the right to use your data to further improve their services and, in this context, to share your information with third parties.
All the above mentioned safeguards with regard to the protection of your personal data also apply to parts of the payment platforms services for which they use third parties.
They do not save your data for longer than is permitted under the legal terms.

Shipping and Logistics

PostNL, DHL, GLS, DPD, UPS, BPost, Parcel International, MyParcel and Parcel.nl
If you place an order with us, it is our job to have your package delivered to you. We use
the services of PostNL, DHL, GLS, DPD, UPS, BPost, Parcel International, MyParcel and Parcel.nl for carrying out the deliveries. It is therefore necessary that we share your name, address and residence details and sometimes your telephone number with them. The delivery services only use this information for the purpose of executing the agreement/order. In the event that one of these parties engages subcontractors, they will also provide your details to these subcontractors.

Invoicing and accounting

EasyAdmin/Administration Office
For our business administration and accounting, we use the services of EasyAdmin and a business administration/accounting office. We do not share your data with EasyAdmin. Your personal data is shared with our administration/accounting office for the purpose of setting up, executing and checking our business administration and accounting.
Your personal data is sent and stored protected.
Our business administration/accounting office is obliged to observe secrecy, will treat your information confidentially and will not use it for purposes other than those described here.

External sales channels

Bol.com, Marktplaats.nl, eBay, Ad4Free, Facebook.com, Speurders.nl, MarktPlaza.nl, TweedeHands.nl and eBid
We sell (a part of) our products through the platforms of Bol.com, Marktplaats.nl, eBay, Ad4Free, Facebook.com, Speurders.nl, MarktPlaza.nl, TweedeHands.nl and eBid. If you order through these platforms then they will share your order and/or personal details with us. It is possible that these platforms use cookies. We use this information to process your order. We treat your information confidentially and have taken appropriate technical and organizational measures to protect your data against loss and unauthorized use.

Purpose of data processing

General purpose data processing
We only use your data for the benefit of our services. This means that the purpose of the processing is always directly related to sales, offers, requests and/or services at your request. We do not use your data for (targeted) marketing. If you share information with us and we use this information to contact you at a later date, other than at your request, we will ask you for explicit permission. Your information will not be shared with third parties, other than to comply with accounting and other administrative obligations. These third parties are all obliged to observe secrecy and will treat your information confidentially based on the agreements between them and us or an oath or legal obligation.
This site contains links to other sites. ImagineDis/MotionPictureArt.com is not responsible for the privacy practices or the content of these websites.
This site can make forums, message boards, reviews and/or moderated FAQs available to its users. Be aware of the fact that anything that is disclosed in these areas may become public information, so please exercise caution when deciding to disclose your personal information or express your views/opinions. We reserve the right to modify/delete or only partially publicize your contributions.

Automatically collected data
Data that is automatically collected by our website is processed with the aim of further improving our services. This information (eg your IP address, web browser and operating system) is not personal data.
We collect and store information about your location. This is done by converting your IP address into a geolocation, where we approximately know where you are. We use this location data to prevent fraudulent transactions and identity theft.
We do not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions taken by computer programs or systems, without a person’s interference (for example, an employee of ImagineDis/MotionPictureArt.com).

Participation in tax and criminal investigation
In some cases, on the basis of a legal obligation in connection with government tax or criminal investigations, ImagineDis/MotionPictureArt.com must share your data. In such a case, we are forced to share your data, but we will oppose this within the possibilities that the law offers us.

Retention periods
We keep your information as long as you are our client. This means that we keep your customer profile until you indicates that you no longer wish to use our services. If you indicate this to us, we will treat this as a “Forget Me” removal request. On the basis of applicable administrative obligations, we must keep invoices and other information with your (personal) data offline for at least 7 years. After 7 years, these data will be anonymized and will only be used for statistical and informative purposes. However, employees no longer have access to your client profile and documents that we have produced in connection with your account, offer and/or contract. Your possibly voluntarily created online profile / account can be closed / deleted at any time. All your online personal data, including account and any communication, will be deleted by us after 30 days to prevent data leaks. Until those 30 days you can still view and/or use this data to, for example, request a return.

Your rights
Based on applicable Dutch and European legislation/EU law, you as a data subject and resident in the EU have certain rights with regard to the personal data that are processed by or on behalf of us. We explain below which rights these are and how you can invoke these rights.
You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to the data processing or to object to the processing of your personal data by ImagineDis/MotionPictureArt.com and you have the right to data portability. You can submit a request for inspection, correction, deletion, data transfer of your personal data or request for cancellation of your consent or objection to the processing of your personal data by e-mail or by post.
In principle, in order to prevent abuse, we will send copies and copies of your data only to your with us already known e-mail address. To be sure that a request has been made by you or if you wish to receive the data at another e-mail address or for example by post, we can ask you to send a copy of your proof of identity with or after the request. Mask/cover your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and citizen service number (BSN) in this copy. This is to protect your privacy.
We keep records of completed requests, in the case of a “Forget Me” removal request we process anonymous data. You will receive all information and copies of data in a machine-readable data format that we use within our systems.
When unnecessary repeated or nuisance requests are being made by the same person, we will assess a reasonable fee between 10 to 25 Euros based on the time needed and/or complexity per request.
You have the right to file a complaint with your local supervisory authority at any time if you suspect that we are using your personal data in the wrong way. Click here to find your local supervisory authority.

Right of inspection/access
You always have the right to inspect the data that we (or third parties) process or have processed that relates to you or that can be traced back to you. You can access much of your information by logging into your account. If you require additional access or if you do not have a account, contact us to request a copy of your information. To ensure that a request has been made by you, we ask you to send a copy of your ID with the request. You can submit a data request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors who have/had this data, with the e-mail address known to us, stating the category in which or how we have stored this data in a structured, conventional and machine-readable form.

Rectification right (Rectify, Delete)
You always have the right to rectify or delete the data that we (or third parties) process or have processed that relates to you or that can be traced back to you. You can rectify or delete much of your information by logging into your account. If you cannot do this, or you do not have an account, please contact us. You can submit a rectification request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation of the details that have been changed to the e-mail address known to us.

Right to restriction of processing or revoke consent.
You always have the right to limit the processing of data that we (or third parties) process or have processed that relates to you or that can be traced back to you. You can rectify, restrict, limit or delete much of your information by logging into your account. If you cannot do this, or you do not have an account, please contact us. You can submit a request to limit the processing of data to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation of the data that will no longer be processed till unrestricted to the e-mail address known to us.

Right of transferability/porting
You always have the right to transfer/port the data that we (or third parties) process or have processed that relates to you or that can be traced back to you. You can submit a transfer/port request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all the information about you that we have processed or that has been processed by third parties to the e-mail address known to us. In such a case, we will no longer be able to continue our services for you, because the secure linking and/or storage of data files can then no longer be guaranteed.
In difficult cases, we may extend the period to three months, as long as we inform you or a third party.

Right of objection and other rights
In some cases you have the right to object to the processing of your personal data by us or by third parties on behalf of ImagineDis/MotionPictureArt.com. If you object, we will immediately stop the data processing pending the settlement of your objection. If your objection is well-founded, we will make available all information and copies of data to you and we will permanently discontinue the processing.
You also have the right to not be subject to automated individual decision making or profiling. We do not process your data in such a way that this right applies. If you do suspect your data is processed in such a way, please contact our contact person for privacy matters.

If you withdraw/change your consent to the use or sharing of your information for purposes set out in this privacy policy, you may not have access to all (or any) of our services and we might not be able to provide you all (or any) of the services under this privacy policy and our terms and conditions. In certain cases, we may continue to process your information after you have withdrawn or changed consent if we have a legal basis to do so of if your withdrawal/change of consent was limited to certain processing activities. For example, we may keep information data if we need to do so to comply with a legal obligation.

Complaints
Without prejudice to any other rights you may have, you also have the right to file a complaint against us with your local supervisory authority. Click here to find your local supervisory authority.

Cookies

Cookies
Our site uses only technical and functional cookies and your IP address to identify and help you, for example, by keeping track of your shopping cart. A cookie is a small piece of data sent from a website and stored in a user’s web browser while browsing a website. We use cookies to enhance your shopping experience by delivering content specific to your interests and saving your shopping cart or password so you don’t have to re-enter it each time you visit our site. On your first visit to our website we have already informed you about these cookies and asked permission for their placement. You can opt out of cookies by setting your internet browser so that it does not store cookies anymore. You can control cookies by adjusting your browser settings. Visit this link to read more: cookie control

Our cookies are harmless and you will only diminish your browsing experience by disabling them, because our website may not work properly.

Google Analytics
Through our website, cookies are placed by Google (as part of their “Analytics” service) that do not infringe your privacy.
We use this service to track and get reports on how visitors use the website. Google may be required to give access to this data in accordance with applicable laws and regulations. We have not given  permission to Google to use the obtained analytics information for other Google services.

Cookies from third parties
In the case that third-party software makes use of cookies, this is stated in this privacy statement.

Changes to the privacy policy
We reserve the right to change our privacy policy at any time, so you should check it occasionally. You will always find the most recent version on this page. Please refer to the ‘last modified’ date to see when this privacy policy was last updated. If the new privacy policy has consequences for the way we process already collected data relating to you, we will notify you either by e-mail or prominently posting a notice of such changes before they take effect.

The Data Protection Officer (DPO) / / Functionaris Gegevensbescherming (FG) of Imaginedis/MotionPictureArt is the entrepreneur, Mrs. A. Kassing.
Contact
The Entrepreneur’s identity