Privacy Policy
1. Who we are
1.1 "We", "us" or "our" means Bubble Boutique bv, with its registered office at Postweg 401, B-1600 Sint-Pieters-Leeuw and with company number BE0836073088. We will be considered the data controller for the personal data we collect in the context of your use of our website.
1.2 This privacy policy is solely intended to provide you with information regarding the processing of personal data in the context of our website. For our privacy practices regarding our services, please refer to the agreement you have concluded with us or the contact person indicated below.
1.3 Our website, www.pullipworld.com, is owned and managed by Bubble Boutique bv, with its registered office at Postweg 401, B-1600 Sint-Pieters-Leeuw and with company number BE0836073088. The website is hosted by Lightspeed Netherlands bv, Herengracht 54, 1015 BN Amsterdam, NL819674734B01. For further information, please refer to Article 5 of this Privacy Policy.
1.4 Your privacy is important to us. Therefore, we have developed this privacy policy to provide you with more information regarding the collection, disclosure, transfer, and use ("processing") of the personal data you share with us, as well as to provide you with more information regarding your rights. We therefore ask you to review this privacy policy.
1.5 If you have any questions, comments or complaints regarding this Privacy Policy or the processing of your personal data, or if you wish to submit a request in accordance with Article 4, please contact us by one of the following methods:
(a) By e-mail: to info@pullipworld.com for the attention of the privacy officer;
(b) By post: to Bubble Boutique bv, Postweg 401, B-1600 Sint-Pieters-Leeuw
1.6 This Privacy Policy was last updated on 04/10/2021.
2. How we use and collect your personal data
2.1 Personal data is defined as any information about an identified or identifiable natural person. Identifiable refers to identifiers (such as name, identification number, location data, etc.) that can be used to directly or indirectly identify a natural person.
2.2 The personal data we collect is collected for the following purposes:
(a) If you use the contact form on our website, we use your personal data to respond to your request, either by email or by phone.
(b) If you create a profile on our website or provide us with transaction data, we collect your personal data for the purpose of storing such information, making a payment for the purchase of goods and/or services, offering our services, and enabling us to ship your orders or contact you.
(c) If you subscribe to the newsletter, your email address will be used to send you our newsletters. Additionally, we may keep you informed about events, etc. that we organize and that may be relevant to you.
(d) We process your personal data for the purpose of supporting the website and improving your user experience. This purpose extends to monitoring the security, availability, (performance), capacity, and health of our website.
(e) We process your personal data to enforce or comply with the rights granted under applicable law if necessary. We may also use your personal data to comply with our obligations under applicable law.
2.3 We collect the following categories of personal data:
(a) Contact details: If you use the contact form, you will be asked to provide the following information: name, email address, and optionally your phone number, and personal data that you enter yourself in the free text box (please do not enter sensitive information, such as health information, information regarding criminal convictions, or bank account numbers). This information is provided directly by you.
(b) Profile data: If you create an account on our website, we collect the following data: name, phone number, email address, address. This information is provided directly by you.
(c) Newsletter: If you subscribe to our newsletter, you will be asked to provide your email address. This information is provided directly by you.
(d) Usage Information: We process personal data regarding your use of our website: IP address, device ID and type, referral source, language settings, browser type, operating system, geographical location, duration of visit, visited page, or information regarding the timing, frequency, and pattern of your visit. This information may be aggregated and can help us gather useful information regarding website usage. In cases where such usage information is anonymized (and therefore cannot be traced back to you as a natural person), such information is not covered by this Privacy Policy. This information is automatically collected through your use of the website.
(e) Transaction Information: We collect personal data regarding your transactions via the website: "contact details", payment information, and the goods and/or services you have purchased. This is personal data provided directly by you.
(f) Identification data: We collect personal data for the processing of your orders. This is personal data provided directly by you.
(g) Financial data: We collect personal data for the processing of your orders. This is personal data provided directly by you.
2.4 The legal basis for the use of your personal data is the agreement. The agreement arises when you place an order on our website.
2.5 If the legal basis for the processing of your personal data is your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of the processing carried out before the withdrawal of your consent.
2.6 If the legal basis for the processing is our legitimate interest or public interest, you have the right to object to the processing as set out in Article 4.13 of this Privacy Policy.
2.7 Your personal data will only be used according to the purposes as set out in Article 2.2.
3. Retention of your personal data and deletion
3.1 Your personal data will not be retained longer than is necessary to achieve a specific purpose. However, as it is not possible to determine a period in advance, the period will be decided as follows:
(a) In accordance with legal tax obligations, we must keep our administration with your invoice, payment and order data for 7 years.
(b) If you have subscribed to our newsletter, we will retain that consent for 5 years. Of course, you can unsubscribe at any time.
3.2 If you withdraw your consent or if you object to the processing of personal data, and such objection is upheld, we will delete your personal data.
3.3 However, we are entitled to retain your personal data if this is necessary to comply with our legal obligations, to assert a legal claim or defend ourselves against such a claim, or for evidentiary purposes.
4. Your rights as an individual
4.1 This article contains an overview of your main rights under applicable personal data protection legislation. We have tried to summarize them for you in a clear and readable way.
4.2 If you wish to exercise one of your rights, please send us a written request in accordance with Article 1 of this Privacy Policy. We will endeavour to respond to your request without undue delay, but in any event within one month of receiving your request. If we are unable to respond within the aforementioned one-month period and wish to extend the period, or if we will not grant your request, we will inform you of this.
Right of access
4.3 In the event that we process your personal data, you have the right to access your personal data, as well as certain additional information as described in this Privacy Policy.
4.4 You have the right to receive a copy from us of your personal data that we hold, provided that this does not adversely affect the rights and freedoms of others. The first copy will be provided to you free of charge, but we reserve the right to charge a reasonable fee if you request multiple copies.
Right to rectification
4.5 If the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct this information.
Right to erasure / right to be forgotten
4.6 Where one of the following applies, you have the right to obtain – without undue delay – the erasure of your personal data:
(a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) You withdraw your consent on which the processing is based, and where there is no other legal ground for the processing of your personal data;
(c) Your personal data have been unlawfully processed;
(d) Erasure of your personal data is necessary for compliance with EU law or Belgian law;
4.7 There are certain exclusions to the right to erasure. These exclusions include where processing is necessary,
(a) For exercising the right of freedom of expression and information;
(b) For reasons of public interest in the area of public health;
(c) For archiving purposes in the public interest, or statistical purposes;
(d) For compliance with a legal obligation; or,
(e) For the establishment, exercise or defence of legal claims.
Right to restriction of processing
4.8 You have the right to obtain the restriction of the processing of your personal data (meaning that the personal data may only be stored by us and may only be used for limited purposes), if one of the following elements applies:
(a) You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
(b) The processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use;
(c) We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or,
(d) You have objected to the processing, pending the verification whether our legitimate grounds override yours.
4.9 In addition to our right to store your personal data, we may still process them, but only:
(a) With your consent;
(b) For the establishment, exercise or defence of legal claims;
(c) For the protection of the rights of another natural or legal person; or,
(d) For reasons of important public interest.
4.10 Before we lift the restriction on the processing of your personal data, you will be informed.
Right to portability of your personal data / data portability
4.11 If the processing of your personal data is based on your consent and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right does not apply insofar as it would adversely affect the rights and freedoms of others.
4.12 You also have the right to have your personal data transmitted directly from us to another company, where technically feasible.
Right to object
4.13 You have the right to object at any time - on grounds relating to your particular situation - to the processing of your personal data, but only to the extent that the legal basis for the processing is that the processing is necessary for:
(a) The performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(b) The purposes of our legitimate interests or those of a third party.
4.14 If you object to the processing of your personal data, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms.
4.15 Where your personal data are processed for direct marketing purposes, whether it is an initial or further processing, you have the right to object at any time and free of charge to this processing, including in the case of profiling to the extent that it relates to direct marketing. If you make such an objection, we will stop processing your personal data for this purpose.
Right to lodge a complaint with a supervisory authority
4.16 If you believe that the processing of your personal data carried out by us violates data protection legislation, you have the right to lodge a complaint with a supervisory authority responsible for data protection. You can do this in the EU Member State of your habitual residence, of your place of work or of the place where the alleged infringement took place. In Belgium, you can lodge a complaint with the Data Protection Authority, Drukpersstraat 35, 1000 Brussels (commission@privacycommission.be),https://www.privacycommission.be/nl/contact.
5. Providing your personal data to third parties
5.1 To provide our website, we work with service providers to process and store your personal data. We use the following service providers:
Our website is hosted by Lightspeed Netherlands bv, Herengracht 54, 1015 BN Amsterdam, NL819674734B01. They also provide the server on which our website runs.
5.2 Financial transactions within the website are handled by Multisafepay and PayPal. Personal data is only shared to the extent necessary to complete the payment. If your payment is processed in the environment of such payment intermediaries, the Privacy Policy of such intermediaries will apply.
5.3 If you are our customer, we may pass on your personal data to suppliers with whom we have contracted to offer you services, such as the transport company that delivers the orders.
5.4 It may be necessary to provide access to your data for legal purposes. In such a case, we will be obliged to comply. We may also disclose your personal data if this is necessary to protect the vital interests of another natural person.
5.5 We do not provide personal data to third parties. However, our website uses social media plugins that allow you to link to our social media channels or enable you to share content on your social media channels. These social media channels are: Facebook. If you click on such a link, the aforementioned social media partners may collect personal data, such as personal data regarding your profile.
5.6 We are not responsible for how these social media partners use your personal data. In such cases, they will act as data controllers. For your information, we list the relevant links below (these may change from time to time):
(a) Facebook: http://facebook.com/about/privacy;
6. Transfer of personal data
6.1 No personal data is transferred outside the European Economic Area.
7. Cookies
7.1 Our website uses cookies. For further information, please refer to our cookie policy.
8. Amendments to the privacy policy
From time to time we may make changes to this Privacy Policy. As a change may directly affect you, we will send you the updated Privacy Policy and, where necessary, ask for your consent.