Privacy Statement
Privacy Statement
We explain which personal data we process, why we need it and how you can exercise your rights.
Who is responsible for your data?
The controller of your personal data is NKON B.V., De Huufkes 87, 5674 TL Nuenen, the Netherlands, registered with the Dutch Chamber of Commerce under number 55090117. This statement applies to your use of the NKON online shop and contact relating to our services.
For privacy matters and requests to exercise your rights, email [email protected] or write to the postal address above. NKON's telephone number is +31 40 369 06 00. For general questions about your order, contact customer service at [email protected].
Which data do we process?
Depending on how you use the shop and contact us, this may include:
- your first and last name, billing and delivery addresses, telephone number and email address;
- data needed to handle your order, payment, delivery, return or complaint, and any business details you provide;
- the content of correspondence and other information you choose to provide;
- your IP address, browser and device type, and data about your use of the website, to the extent collected through the technologies used and the relevant settings.
We obtain data mainly from you, for example when you make a purchase, use your account or send a message. Technical data is generated when you use the website. When fulfilling an order, we may also receive necessary payment or delivery information from the service providers involved.
Data required for an order is needed to enter into and perform the contract. Without the necessary address, contact details or payment information, we cannot properly handle your purchase. You provide data marked as optional voluntarily. Please do not send sensitive information that is unnecessary for us to deal with your enquiry.
Why do we use your data?
Orders and customer service
We process data to take steps at your request before entering into a contract, handle your order and payment, deliver the product and conduct necessary correspondence. The legal basis is performance of a contract or steps taken before entering into one (Article 6(1)(b) GDPR). This basis also covers the appropriate handling of returns and complaints relating to the contract.
Online withdrawal function
When you use the online withdrawal function, we process your name, email address, order number or other details identifying your purchase, your statement of withdrawal, the date and time of submission and details of the acknowledgement of receipt. We use this data to receive, acknowledge and handle your withdrawal. For the statutory withdrawal function and acknowledgement of receipt, the legal basis is our legal obligation (Article 6(1)(c) GDPR); for handling returns and refunds, it is performance of the contract (Article 6(1)(b) GDPR). You do not need to consent to marketing or data processing to use this function.
Legal obligations
We process data needed to keep mandatory tax records, fulfil statutory obligations towards customers or provide information to authorised bodies in order to comply with a legal obligation (Article 6(1)(c) GDPR).
Correspondence and protection of rights
Where contact does not directly relate to entering into or performing a contract, data needed to respond or to establish, exercise or defend legal claims may be processed on the basis of a legitimate interest (Article 6(1)(f) GDPR). That interest is dealing with enquiries properly and protecting NKON's rights. You may object on grounds relating to your particular situation.
Website analysis and consent
Data about use of the website may be used to analyse and improve its performance and our offering. If a particular analysis, tracking activity or other technology requires consent, your consent is the relevant legal basis for processing personal data (Article 6(1)(a) GDPR). Consent is voluntary and may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Newsletter and commercial messages
If you subscribe to the newsletter, we process your email address and necessary subscription details on the basis of consent (Article 6(1)(a) GDPR). Subscribing is voluntary and is not a condition of making a purchase.
Where permitted by law, we may also inform existing customers about our own similar products or services. The legal basis is then NKON's legitimate interest in this communication (Article 6(1)(f) GDPR), subject to the requirements for electronic marketing and your right to opt out.
You can unsubscribe from the newsletter and other commercial messages at any time using the unsubscribe link in the message or by contacting [email protected]. You do not need to give a reason when objecting to direct marketing. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Messages necessary for handling your order, product safety or required updates serve a different purpose from marketing. Your statutory rights as a customer do not depend on consent to marketing.
Who may receive your data?
We do not sell your data. We share it to the extent necessary with parties involved in fulfilling your order or providing services, and where required by law. Categories of recipients include payment service providers, carriers, suppliers, repair partners and IT service providers. Authorised bodies may receive data where there is a legal basis for this.
We enter into appropriate data processing agreements with service providers that process data on our behalf. Some recipients, such as certain payment providers or public authorities, may act as independent controllers for their own obligations.
Data stays within the European Economic Area
NKON processes personal data exclusively within the European Economic Area (EEA). This also applies to processing by service providers acting on our behalf. We do not transfer personal data outside the EEA.
How long do we keep data?
We keep data for as long as necessary for the purpose for which it was collected, taking legal obligations into account. The seven-year period applies to data covered by the Dutch obligation to retain basic tax records, such as relevant invoice details. It does not automatically mean that all personal data is kept for seven years.
When determining retention periods for other data, we consider factors including the duration and completion of the contract, the need to handle a return or complaint, ongoing correspondence, evidential requirements and applicable limitation periods. We keep technical and analytical data only for as long as necessary for its specific purpose. Data used solely to send the newsletter is used until you unsubscribe, withdraw consent or validly object. Necessary records of consent or unsubscription may be retained to demonstrate legal compliance and respect your choice. Once there is no longer a justified need, data is deleted or anonymised, unless the law requires continued retention.
We retain statements of withdrawal and related acknowledgement records for as long as needed to handle the withdrawal, demonstrate compliance and address any disputes, taking applicable statutory periods into account. Only data subject to tax retention obligations is kept longer for that purpose.
Cookies and similar technologies
The NKON website uses functional, analytical and tracking cookies or similar technologies. Functional technologies may be needed, for example, for the shopping basket and basic shop features to work properly. Analytics help us understand how the website is used, while tracking technologies may serve marketing purposes.
Technologies necessary to provide the service you request differ from those requiring prior consent. Not every analytical technology is automatically exempt from the consent requirement. Where consent is the basis for processing, you can withdraw it at any time.
You can delete or block cookies through your browser settings. This may limit some shop functions. Deleting cookies from your browser does not by itself delete all data held by their providers. You can send questions about data and consent to [email protected].
Additional information
NKON does not make decisions that produce legal effects or similarly significantly affect individuals based solely on automated processing of personal data.
We do not intend to collect data from people under 16 without the consent of a parent or guardian where such consent is required. We encourage parents and guardians to be involved in children's online activities. If you believe we have received a child's data without the required legal basis, please contact us.
Control over your data
Within the limits and subject to the conditions set out in the GDPR, you have the right to:
- information about processing and access to your data;
- rectification of inaccurate data and completion of incomplete data;
- erasure of data where the legal conditions are met;
- restriction of processing;
- object to processing based on a legitimate interest on grounds relating to your particular situation;
- object to direct marketing;
- data portability where processing is automated and based on consent or a contract;
- withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Send your request to [email protected]. If there is reasonable doubt, we may request information necessary to confirm your identity. Do not send a complete copy of an identity document in advance. We normally respond within one month. If the law permits an extension because of the complexity or number of requests, we will inform you of the extension and its reason within the first month.
Not all rights are unconditional. For example, an obligation to retain an invoice may limit our ability to delete it before the statutory period ends. We will explain the basis for any limitation.
Right to lodge a complaint
You may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), or with the competent data protection authority, in particular in the country of your habitual residence, place of work or the alleged infringement. Contacting NKON first may help clarify the matter, but does not affect your right to complain or seek other legal remedies.
A question about privacy?
[email protected] · +31 40 369 06 00
NKON B.V. · De Huufkes 87 · 5674 TL Nuenen · The Netherlands
