https://wickedwoodgames.com

About our privacy policy
Wicked Wood Games cares greatly about your privacy. We therefore only process data that we need for (the improvement of) our services and we handle carefully the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services made accessible on it by Wicked Wood Games. The effective date of these terms is 03/03/2021; when a new version is published, the validity of all previous versions expires. This privacy policy describes which data about you is collected by us, what this data is used for and with whom and under what conditions this data may be shared with third parties. We also explain how we store your data and how we protect your data against misuse and what rights you have with regard to the personal data you have provided to us.

If you have any questions about our privacy policy you can contact our privacy contact person; you will find the contact details at the end of our privacy policy.

About data processing
Below you can read how we process your data, where we (have it) stored, which security techniques we use and who can view the data.

Webshop software:

Shopify
Our webshop is developed with software from Shopify. Personal data that you make available to us for the purpose of our services is shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Under the agreement we have concluded with them, Shopify is obliged to take appropriate security measures. These security measures include the application of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected and/or stored. Shopify reserves the right to share collected data within its own group in order to further improve its services. Shopify complies with the statutory retention periods applicable to (personal) data. The EU/US Privacy Shield applies; your data may be processed in the United States.

Web hosting:

BlueHost
We purchase web hosting and e-mail services from BlueHost. BlueHost processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. BlueHost has taken appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. Under the agreement, BlueHost is obliged to confidentiality.

E-mail and mailing lists:

BlueHost
We use the services of BlueHost for our regular business e-mail traffic. This party has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as much as possible. BlueHost has no access to our inbox and we treat all our e-mail traffic confidentially.

Payment processors:

Mollie
For processing (part of) the payments in our webshop we use the Mollie platform. Mollie processes your name, address and town/city details and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, in that context, to share (anonymised) data with third parties. All of the safeguards mentioned above concerning the protection of your personal data likewise apply to the parts of Mollie’s services for which they engage third parties. Mollie does not store your data longer than is permitted under the statutory terms.

Klarna
For processing (part of) the payments in our webshop we use the Klarna platform. Klarna processes your name, address and town/city details and your payment details such as your bank account or credit card number. Klarna has taken appropriate technical and organisational measures to protect your personal data. Klarna reserves the right to use your data to further improve its services and, in that context, to share (anonymised) data with third parties. In the event of an application for deferred payment (credit facility), Klarna shares personal data and information relating to your financial position with credit rating agencies. All of the safeguards mentioned above concerning the protection of your personal data likewise apply to the parts of Klarna’s services for which they engage third parties. Klarna does not store your data longer than is permitted under the statutory terms.

PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie
For processing (part of) the payments in our webshop we use the platforms of PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie. PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie process your name, address and town/city details and your payment details such as your bank account or credit card number. PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie have taken appropriate technical and organisational measures to protect your personal data. PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie reserve the right to use your data to further improve their services and, in that context, to share (anonymised) data with third parties. In the event of an application for deferred payment (credit facility), PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie share personal data and information relating to your financial position with credit rating agencies. All of the safeguards mentioned above concerning the protection of your personal data likewise apply to the parts of the respective payment platforms’ services for which they engage third parties. PayPal, Google Pay, Shop Pay, PayPal, iDEAL, BanContact, Sofort Banking, Przelewy24 and Mollie do not store your data longer than is permitted under the statutory terms.

Reviews:

WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur you are required to provide a name and e-mail address. WebwinkelKeur shares this data with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases WebwinkelKeur may contact you to provide an explanation of your review. In the event that we invite you to leave a review, we share your name and e-mail address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide services; we have given WebwinkelKeur permission to do so. All of the safeguards mentioned above concerning the protection of your personal data likewise apply to the parts of the service for which WebwinkelKeur engages third parties.

Shipping and logistics:

PostNL
If you place an order with us, it is our responsibility to have your parcel delivered to you. We use the services of PostNL to carry out the deliveries. It is therefore necessary that we share your name, address and town/city details with PostNL. PostNL uses this data solely for the purpose of executing the agreement. In the event that PostNL engages subcontractors, PostNL also makes your data available to these parties.

DHL
If you place an order with us, it is our responsibility to have your parcel delivered to you. We use the services of DHL to carry out the deliveries. It is therefore necessary that we share your name, address and town/city details with DHL. DHL uses this data solely for the purpose of executing the agreement. In the event that DHL engages subcontractors, DHL also makes your data available to these parties.

DPD, DHL, PostNL

If you place an order with us, it is our responsibility to have your parcel delivered to you. We use the services of DPD, DHL and PostNL to carry out the deliveries. It is therefore necessary that we share your name, address and town/city details with DPD, DHL and PostNL. DPD, DHL and PostNL use this data solely for the purpose of executing the agreement. In the event that

DPD, DHL and PostNL engage subcontractors, DPD, DHL and PostNL also make your data available to these parties.

Invoicing and accounting:

Eigen Software
To keep our administration and accounting records we use the services of Eigen Software. We share your name, address and town/city details and details relating to your order. This data is used for administering sales invoices. Your personal data is sent and stored in a protected manner. Our Eigen Software is bound to confidentiality and will handle your data in a confidential

manner. Our Eigen Software does not use your personal data for purposes other than those described above.

External sales channels:

Bol.com
We sell (part of) our items via the Bol.com platform. If you place an order via this platform, Bol.com shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.

Marktplaats.nl
We sell (part of) our items via the Marktplaats.nl platform. If you place an order via this platform, Marktplaats.nl shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.

Beslist.nl
We sell (part of) our items via the Beslist.nl platform. If you place an order via this platform, Beslist.nl shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.

Amazon, Etsy, Google Shopping, Facebook Shopping and Ankerstore
We sell (part of) our items via the Amazon, Etsy, Google Shopping, Facebook Shopping and Ankerstore platforms. If you place an order via these platforms, Amazon, Etsy, Google Shopping, Facebook Shopping and Ankerstore share your order and personal data with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.

Purpose of data processing:

General purpose of processing
We use your data solely for the purpose of our services. This means that the purpose of the processing is always directly related to the assignment you give us. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time other than at your request, we will explicitly ask your permission to do so. Your data is not shared with third parties other than to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality on the basis of the agreement between them and us or an oath or statutory obligation.

Data collected automatically
Data that is collected automatically by our website is processed for the purpose of further improving our services. This data (for example your IP address, web browser and operating system) is not personal data.

Cooperation in fiscal and criminal investigations
In some cases Wicked Wood Games may be obliged under a statutory obligation to share your data in connection with fiscal or criminal investigations conducted by the authorities. In such

a case we are forced to share your data, but we will oppose this within the possibilities offered to us by law.

Retention periods
We retain your data for as long as you are our client. This means that we retain your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also regard it as a request to be forgotten. Under applicable administrative obligations, we must retain invoices containing your (personal) data; we will therefore retain this data for as long as the applicable term runs. However, staff members no longer have access to your client profile and documents that we have produced in response to your assignment.

Your rights
Under applicable Dutch and European legislation you, as the data subject, have certain rights with regard to the personal data processed by or on behalf of us. We explain below which rights these are and how you can exercise these rights. As a rule, to prevent misuse, we only send copies and transcripts of your data to your e-mail address already known to us. If you wish to receive the data at another e-mail address or for example by post, we will ask you to provide proof of identity. We keep a record of completed requests; in the case of a request to be forgotten we keep anonymised data. You receive all copies and transcripts of data in the machine-readable data format we use within our systems. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are using your personal data in an incorrect way.

Right of access
You always have the right to inspect the data that we (have) process(ed) that relates to your person or is traceable to you. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all the data to your e-mail address known to us, together with an overview of the processors who hold this data, stating the category under which we have stored this data.

Right to rectification
You always have the right to have the data that we (have) process(ed) that relates to your person or is traceable to you, corrected. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to your e-mail address known to us that the data has been adjusted.

Right to restriction of processing
You always have the right to restrict the data that we (have) process(ed) that relates to your person or is traceable to you. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to your e-mail address known to us that the data will no longer be processed until you lift the restriction.

Right to data portability
You always have the right to have the data that we (have) process(ed) that relates to your person or is traceable to you, carried out by another party. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies or transcripts of all data about you that we have processed or that has been processed on our behalf by other processors or third parties, to your e-mail address known to us. In all likelihood we will then no longer be able to continue the service, because the secure linking of data files can then no longer be guaranteed.

Right to object and other rights
In certain cases you have the right to object to the processing of your personal data by or on behalf of Wicked Wood Games. If you object, we will immediately cease data processing pending the handling of your objection. If your objection is well-founded, we will make copies and/or transcripts of data that we (have) process(ed) available to you and then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our privacy contact person.

Cookies:

Google Analytics
Cookies from the American company Google are placed via our website, as part of the “Analytics” service. We use this service to keep track of and to obtain reports on how visitors use the website. This processor may be obliged under applicable laws and regulations to provide access to this data. We collect information about your surfing behaviour and share this data with Google. Google may interpret this information in conjunction with other datasets and in this way track your movements on the internet. Google uses this information to offer, among other things, targeted advertisements (AdWords) and other Google services and products.

Third-party cookies
If software solutions from third parties use cookies, this will be stated in this privacy statement.

Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy has consequences for the way in which we process data already collected about you, we will inform you of this by e-mail.

Contact details:

Wicked Wood Games
Sikkel 34b 3274KK Heinenoord The Netherlands T (316) 135-3318 E info@wickedwoodgames.com

Privacy contact person
Ton de Vries