SmileWhite respects the privacy of everyone whose personal data are processed by SmileWhite, including in particular that of visitors and users of the website www.yoursmilewhite.com (hereinafter: ‘the website’). The careful handling of personal data is essential to SmileWhite. SmileWhite will process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).
SmileWhite processes personal data that you provide to SmileWhite by yourself, i.e. in the following situations:
If you provide personal data for questions or complaints, these will only be used by SmileWhite to process your request. If you have entered into an agreement with SmileWhite, the personal data you provide will be used to execute the agreement in question. If you write a review on the website at present or in the future, the personal data provided by you for that purpose will only be used to be able to publish the review on this website.
Under of the execution of an agreement concluded between you and SmileWhite, the personal data provided by you may be shared with third parties if and insofar as this is necessary in relation to the involvement of these third parties in the execution of the agreement in question. For example, your name and address will be shared with a mail-order company which, on behalf of SmileWhite, will deliver the products purchased by you to the delivery address agreed upon with you, or your payment details which will be shared with an external payment provider when you make the payment for the order via the website.
If you have explicitly subscribed to receive newsletters, SmileWhite will only process the personal data provided by you for this purpose in order to be able to send you the requested newsletters. However, if you have once concluded an agreement with SmileWhite, SmileWhite may send you commercial e-mail messages without your prior consent, if these messages are largely related to, or relevant to, the products previously purchased by you from SmileWhite. You may unsubscribe from further receipt of such messages in the manner indicated in the messages concerned.
The above processing of personal data is permitted by law pursuant to the fact that you have given your implicit or explicit permission for this, or pursuant to the fact that the processing is necessary to execute an agreement concluded between you and SmileWhite or your request for the conclusion of such an agreement. With respect to this, ’agreement’ should be interpreted in a wider context. For example, your possible subscription to receive newsletters will also be regarded as ’agreement’.
In addition, SmileWhite processes personal data if and insofar as this is necessary on the basis of a statutory regulation or court order, as well as on the so-called legal basis of ‘legitimate interests’. Legitimate interests include, for example, the detection of (attempted) unlawful and/or punishable conduct directed against SmileWhite or third parties, for example in relation to the use of the website. Legitimate interests furthermore include the processing (including storage) of your personal data by SmileWhite’s hosting provider, in order to operate SmileWhite’s website and e-mail facilities, the operator of the chat software used by SmileWhite to enable the relevant messaging function, MailChimp for sending newsletters, the operator of the review software used by SmileWhite to disclose your review on the website and the sharing of your personal data with an accounting firm in order to look after SmileWhite’s administration and bookkeeping.
SmileWhite stores your personal data within the European Economic Area (“EEA”). However, it is possible that certain personal data collected by SmileWhite may be transferred to or stored outside the EEA because an external service provider of SmileWhite is located there. If this is the case, SmileWhite will ensure that the processing of your personal data outside the EEA takes place in a secure and lawful manner. SmileWhite will therefore take the necessary steps to guarantee that your personal data are adequately protected.
In all cases, only authorised SmileWhite employees have access to your personal data and only to the extent necessary to carry out the tasks assigned to them. This also applies to third parties to whom SmileWhite provides personal data as described above. Under no circumstances will SmileWhite sell your personal data. The persons under the responsibility of SmileWhite, as well as third parties engaged by SmileWhite are obliged to respect the confidentiality of your personal data. Insofar as SmileWhite outsources the processing of personal data to a third party, SmileWhite will take the necessary steps to guarantee that your personal data are sufficiently protected. Such steps include, if and in so far as required by law, the handling of a processing agreement with such recipients to ensure that they take the same or comparable technical and organisational measures as SmileWhite, so that your personal data are sufficiently protected.
SmileWhite furthermore uses analytical cookies to collect data for research purposes in order to gain a better insight into the use of the website by its visitors. Analytical cookies help analyse how the website is used by collecting log data and visitor behaviour on the website in an anonymous form.
Social-media cookies are related to buttons that serve to promote or share web pages on social-media networks. These buttons work through bits of code that come from the social-media networks themselves. This code is used to place cookies.
You have the right to ask SmileWhite to inspect, delete and rectify your personal data as well as to limit the processing of your personal data. Furthermore, you have the right to object to the processing and you have the right to data transfer. This means that you can submit a request to SmileWhite to send your personal data processed by SmileWhite in a computer file to you or to an organisation mentioned by you.
nsofar as the processing of personal data is based on the consent obtained from you, you have the right to withdraw such consent at any time, without prejudice to the lawfulness of the processing based on the consent prior to withdrawal. You have the right to lodge a complaint with the Personal Data Authority or, if you reside in a country other than the Netherlands, the supervisory authority at such location.
Personal data are only retained by SmileWhite for as long as is necessary in view of the purposes for which they were obtained. SmileWhite implements appropriate technical and organisational measures to secure personal data against loss and against any form of unlawful processing. With due allowance for the state of the art and the cost of implementation, these measures guarantee an appropriate level of security in view of the risks posed by the processing and the nature of the personal data to be protected. The measures shall also aim at preventing unnecessary processing of personal data.