Privacy

This privacy statement was last updated on April 5, 2022 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via Supercreative.amsterdam. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact – Through phone, mail, email and/or webforms

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • IP address
  • Physical characteristics or description
  • Professional or employment-related information
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex
  • Photos
  • Social media accounts

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6months

1.2 Payments

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • A telephone number
  • IP address
  • Physical characteristics or description
  • Financial information such as bank account number or credit card number
  • Commercial information, including records of personal property, products or services purchased, obtained, or considered
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6months

1.3 Registering an account

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • IP address
  • Physical characteristics or description
  • Professional or employment-related information
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex
  • Photos
  • Social media accounts

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data until the service is terminated.

1.4 Newsletters

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • A social security number
  • IP address
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6months


1.5 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • A telephone number
  • IP address
  • Financial information such as bank account number or credit card number
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6 months

1.6 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • IP address
  • Commercial information, including records of personal property, products or services purchased, obtained, or considered
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6 months

1.7 To be able to offer personalized products and services

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • IP address
  • Commercial information, including records of personal property, products or services purchased, obtained, or considered
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex
  • Photos
  • Social media accounts

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6 months

1.8 To sell or share data with a third party

For this purpose we use the following data:

  • IP address
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6months

1.9 Deliveries

For this purpose we use the following data:

  • A first and last name
  • Account name or alias
  • A home or other physical address, including street name and name of a city or town
  • An email address
  • A telephone number
  • IP address
  • Physical characteristics or description
  • Financial information such as bank account number or credit card number
  • Commercial information, including records of personal property, products or services purchased, obtained, or considered
  • Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  • Geolocation data
  • Date of birth
  • Sex

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 6 months

2. Sharing with other parties

We only share this data with processors and with other third parties for which consent must be obtained.

3. Cookies

To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions. For more information about these technologies and partners, please refer to our Cookie Policy. 

Supercreative.amsterdam participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. It uses the Consent Management Platform with the identification number 332. 

We have concluded a data Processing Agreement with Google.

The inclusion of full IP addresses is blocked by us.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

  • Username and Password
  • DNSSEC
  • TLS / SSL
  • Security software
  • HTTP Strict Transport Security

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

8. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

9. Contact details

Supercreative.Amsterdam
Nieuwpoortkade 2a, 1055 RX Amsterdam
Netherlands
Website: https://supercreative.amsterdam 
Email: hello@supercreative.amsterdam 
Phone number: +31644750171

Annex

MailPoet newsletter & emails

If you have subscribed to our newsletter or if you are a member of our website (you can log in) or if you have purchased on our website, there is a good chance you will receive emails from us. We will only send you emails which you have signed up to receive, or which pertain to the services we provided to you. To send you emails, we use the name and email address you provide us. Our site also logs the IP address you used when you signed up for the service to prevent abuse of the system. This website can send emails through the MailPoet sending service. This service allows us to track opens and clicks on our emails. We use this information to improve the content of our newsletters. No identifiable information is otherwise tracked outside this website except for the email address. MailPoet creates and stores two cookies if you are using WooCommerce and MailPoet together. Those cookies are: Cookie name: mailpoet_revenue_tracking Cookie expiry: 14 days. Cookie description: The purpose of this cookie is to track which newsletter sent from your website has acquired a click-through and a subsequent purchase in your WooCommerce store. Cookie name: mailpoet_abandoned_cart_tracking Cookie expiry: 3,650 days. Cookie description: The purpose of this cookie is to track a user that has abandoned their cart in your WooCommerce store to then be able to send them an abandoned cart newsletter from MailPoet. Note: User must be opted-in and a confirmed subscriber.

User data/profile

We collect information about you during the registration and edit profile process on our site. This information may include, but is not limited to, your name, email address, phone number, address, IP and any other details that might be requested from you for the purpose of building your public profile. Handling this data also allows us to:

  • – Send you important account/order/service information.
  • – Display this information in a public facing manner (such as a web page or API request) and allow website users to search and view submitted information.
  • – Respond to your queries or complaints.
  • Respond to and comment on site posts
  • – Set up and administer your account, provide technical and/or customer support, and to verify your identity. We do this on the basis of our legitimate business interests.

LIMIT LOGIN ATTEMPS PLUGIN

  • Limit Login Attempts Reloaded  are fully GDPR compliant according to the Article 6 (1)f of General Data Protection Regulation. An explicit consent is not required when processing personal data is a matter of security, which is always the case with Limit Login Attempts Reloaded WordPress plugin. Limit Login Attempts Reloaded is also not required to provide any information to anonymous contacts who refuse to identify themselves or don’t submit requested identification. As a user logging into the SneakerLove community and or by making a profile understands and gives consent that their IP address and browser information might be processed by the security plugins installed on the site.

WooCommerce

We collect information about you during the checkout process on our store.

What we collect and store

While you visit our site, we’ll track:

  • Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
  • Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
  • Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site. When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Process payments and prevent fraud
  • Set up your account for our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders. We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for Dutch tax and accounting purposes. This includes your name, email address and billing and shipping addresses. We will also store comments or reviews, if you choose to leave them.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

  • Order information like what was purchased, when it was purchased and where it should be sent, and
  • Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

What we share with others

WooCommerce Shipping & Tax

By using this extension, we may be storing personal data or sharing data with external services such as Payment gateways and shipping providers: We share information with third parties who help us provide our orders and store services to you; for example see right below:

Payments

Mollie Payment tool:Consumer If you use Mollie’s services as a consumer, the following personal data are processed:

  • Your payment details (e.g. bank account number or credit card number);
  • Your IP address;
  • Your internet browser and device type;
  • In some cases, your first and last name;
  • In some cases, your address details;
  • In some cases, your e-mail address and/or telephone number;
  • In some cases, information about the product or service that you have purchased from our customer;
  • Other personal data that you actively provide, for example in written correspondence or via telephone when you contact our customer service.

The cases in which we might process your personal data but don’t always necessarily do so, might depend on for example the payment method you use, the API’s our customers use and whether you as consumer contact our customer service. If you use Mollie’s services as a consumer (payer), your personal data are processed for the following purposes:

  • To process payments;
  • To perform analyses for statistical and scientific purposes;
  • To train and assess Mollie employees;
  • To record evidence (if necessary);
  • To provide support (such as via e-mail and phone);
  • To ensure the safety and integrity of the financial sector, for example by identifying, investigating, preventing and actively countering (attempted) criminal/illegal conduct;
  • To comply with legal obligations as a financial institution, for example under the Dutch Financial Supervision Act (Wft) and the Dutch Money Laundering and Terrorist Financing (Prevention) Act (Wwft).
  • Mollie processes personal data for the purposes listed above based on your consent, for the performance of a contract, based on legal obligations, performance of tasks in the public interest and to pursue legitimate business interests. If Mollie wants to process your personal data for other purposes than described above, Mollie will only do so when we obtain your consent or when we have legitimate interests, if legally required. You can withdraw your consent at any time without giving reasons, or object to the processing of your personal data when we do so based on legitimate interest. Please note that withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent. You can withdraw your consent via the unsubscribe link in our e-mails, if applicable. Otherwise you can send your request to withdraw your consent to privacy@mollie.com. If, as our customer, you withdraw your consent for marketing related purposes, we may still contact you regarding product functionality or updates, security updates, responses to customer support requests or other transactional, non-marketing/administrative related purposes.
  • How long does Mollie keep your personal data?Mollie will not retain your personal data longer than the mandatory statutory period or, if such a mandatory statutory period does not apply, no longer than is strictly necessary for the realisation of the purposes for which your personal data were obtained. For example, the personal data that Mollie receives relating to the assessment of your application as a customer, the preparation and performance of the agreement and the processing of payments, will not be kept longer than five years after rejection of your application or the termination of the agreement. This period has been determined in the Dutch Money Laundering and Terrorist Financing (Prevention) Act (Wwft).
  •  How does Mollie secure your personal data?The protection of your personal data is very important to Mollie. Mollie has therefore taken various technical and organisational security measures to protect your data and to comply with applicable laws and regulations. Mollie uses, for example, network segmentation, techniques such as firewalls, anti-DDoS systems and file integrity monitoring, strong authentication, encrypted transfer of information, monitoring and alerting, and industry best practices for adequate encryption and system configuration.Furthermore, organisational measures include role separation, least-privilege principles, personnel screening, strict procedures for managing adjustments, incidents, vulnerabilities and suppliers, and continuous training of our staff. The functionality of our security measures is tested periodically.To report possible problems with the security of Mollie’s systems, please go to our Responsible Disclosure Policy.
  • Does Mollie share your personal data with third parties?
  • Processors Mollie shares your personal data with third parties if this is necessary to provide our products and services. When third parties will process your personal data on our behalf and under our strict instructions, those third parties act as so-called processors. Mollie concludes a data processing agreement with processors. This way, Mollie ensures that your personal data are always processed in a careful manner, protected with at least the same level of security we maintain and that the confidentiality of your personal data is guaranteed. Mollie nevertheless remains fully responsible for these processing operations and will therefore take all reasonable administrative, technical and physical measures to protect your personal data against unauthorised access, unintentional loss or alteration.
  • (Joint) Controllers Mollie may also receive data from third parties or share your personal data with third parties that are also controllers. In those cases Mollie has concluded agreements in order to guarantee a thorough protection of your personal data where this is desirable or where required (namely where both parties acties as joint controllers).An overview of processors and controllers that process data for which Mollie is controller, can be found here. We recommend reviewing this overview regularly, since parties can be added or removed from the overview.If your personal data will be shared with third parties for purposes other than those described above, Mollie will only do so when legally permitted or after we have obtained your consent.Cross-border data transfers When providing our services, your personal data may in some cases be processed by third parties (as processor, as joint or independent controller) outside the European Economic Area (EEA). If your personal data is processed outside the EEA in a third country (a country without an adequate level of protection as indicated by the European Commission), Mollie ensures that i) the correct contract is concluded with regard to data processing (processor agreement, joint controller agreement or controller-controller provisions if desired), and ii) an appropriate transfer mechanism is in place, such as EU Standard Contract Clauses. In this way Mollie ensures that your personal data is always secured at at least the same level and that the confidentiality of your personal data is guaranteed.
  • Does Mollie use cookies?Mollie uses functional, analytical and marketing cookies. A cookie is a small text file that is stored in the browser of your device such as a computer, tablet or smartphone when you first visit Mollie’s websites. On the one hand, Mollie uses cookies with a purely technical functionality. These cookies ensure that the website works properly and, for example, remembers your preferred settings, so that Mollie is able to optimize the websites. On the other hand, Mollie uses cookies that keep track of your browsing behavior so that Mollie can offer you tailor-made content and advertisements. Some cookies on Mollie’s websites are placed by third parties, for example advertisers and/or social media companies. More information about Mollie’s use of cookies can be found in our Cookie Statement.
  • What rights do you have?You have the right to access, correct, erase, restrict, transfer, or object to the personal data that Mollie processes, unless Mollie cannot execute these rights based on a legal obligation or whenever exceptions apply. For example, Mollie is required to keep certain personal and payment data based on legal obligations (as stated under point 6), which means that we cannot always delete all of your personal data when you request so.You can send your request to exercise your privacy right(s) to privacy@mollie.com. Mollie prefers to establish that this request originates from you and that you are who you say you are. If we are not capable of verifying it is you directly, Mollie may ask you to send a copy of your identification (i.e. a passport or identity card). Please make sure that in this copy your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and citizen service number (BSN) have been redacted to protect your privacy. Mollie will then respond to your request as soon as possible, but in any case within one month after receipt, unless the request is of such excessive nature that we may extend that period with another 2 months.
  • How can you contact Mollie?If you have any questions regarding our use of your personal data, you can contact us via privacy@mollie.com.If you believe that Mollie has used your personal data unlawfully or if you are not satisfied with Mollie’s response to your question or request, you have the right to file a complaint with the relevant Data Protection Authority (in the Netherlands, this is the Autoriteit Persoonsgegevens). More information about your complaint possibilities can be found here. For contact details of all EU Data Protection Authorities, click here.
  • Data Protection OfficerMollie has appointed a Data Protection Officer (DPO). Among other things, the DPO is responsible for supervising the processing of personal data by Mollie, taking stock of data processing and advising and training our employees on the responsible use of personal data. The DPO is registered with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).If, in spite of the above, you suspect that your data is not properly handled, secured, has been misused or if you believe that Mollie does not adequately process your personal data, please reach out to our DPO via dpo@mollie.com.Amsterdam, June 30th 2021.
  • We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information.

Please see the PayPal Privacy Policy for more details.

Akismet Anti Spam filter

We collect information about visitors who comment on Sites that use our Akismet anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself). When Akismet is enabled on your site, only the personal data needed to carry out its core function of protecting you against comment spam is collected. In the language of the GDPR, this is a “legitimate interest” use of that data. You can read more about this and how you can customize that notice here. A common misconception is that we are selling the data we collect via Akismet. We do not sell the personal data collected through Akismet. For more details, please review our Privacy Policy here and more details on Akismet-specific items here. Please note that we don’t keep the Akismet data for very long. We have short retention periods of between two weeks and ninety days for the vast majority of our spam-related data, at which point it is automatically deleted from our databases. Anyone can opt-out of all long-term tracking for the very small subset of data we do keep longer by using our contact form. Additionally, the Akismet plugin fully integrates with WordPress’ personal data erasure and privacy policy tools. The data collected by Akismet is stored on servers located all over the world. This allows us to offer an Akismet that is both fast and reliable. When we transfer data to the US and other countries outside of the EU we do so under the Standard Contractual Clauses (SCCs), which have been upheld by the EU Court of Justice as a legal means of transferring data under the requirements of the GDPR. Additionally, we include the SCCs in our Data Processing Addendum (DPA), which is available to all of our users. You’re welcome to request a DPA by logging into your account on WordPress.com, and clicking the “Request a DPA” button at https://wordpress.com/me/privacy in your dashboard. With everything privacy related, things can be confusing and complicated, so if you have other questions or concerns that we haven’t addressed here, please get in touchwith us and we’ll be happy to address them with you.

  • Complianz | The Privacy Suite for WordPressThis website uses the Privacy Suite for WordPress from Complianz to collect records of consent. For this functionality your IP address is anonymized and stored in our database. For more information, see the Complianz Privacy Statement.