This privacy policy ('Privacy Policy') provides you with information about your personal data that is used on www.josephineco.com ('Website') to inform you about our products and services, sell them to you, and for the maintenance, improvement, and management of our products and services to provide you with the best experience when you interact with us in the digital world and in the real world when you visit our stores. Josephine & Co respects the privacy rights of its online visitors and recognizes the importance of protecting the privacy of collected personal data. For this reason, Josephine & Co has established strict policies and security measures to protect your personal data.

This Privacy Policy contains essential information about the processing of your personal data by Blue Denim Lodge B.V., headquartered at Danzigerkade 223C, 1013 AP Amsterdam, as the data controller (Josephine & Co or we).

INTRODUCTION

In accordance with the European General Data Protection Regulation 2016/679 ('GDPR'), this Privacy Policy aims to provide you with a clear understanding of the types of personal data we collect and how we use, exchange, and protect your personal data. It also explains the options you have to manage your data. This Privacy Policy applies when you visit and/or use the Website. By using the Website, you agree and understand that we collect, use, store, and process your personal data in accordance with this Privacy Policy.

1. Data Josephine & Co collects about you

2. How does Josephine & Co use your data?

3. Legal basis for processing

4. Who will process your data?

5. Does Josephine & Co share your data with others?

6. How long do we retain your data?

7. Social networks

8. Protection and management of your personal data

9. Cookies

10. Minors

11. Your privacy rights

12. Complaints

13. Changes to this information

14. Contact us

1. DATA JOSEPHINE & CO COLLECTS ABOUT YOU

Josephine & Co requests certain personal data to provide you with the products or services you desire, such as when you place orders, subscribe to our newsletter, or create an account.

Data provided by you

Josephine & Co may collect and process the following data:

Personal data – these are the data we use to identify you and ensure that you are who you claim to be. This includes: name [first name, last name, initials], date of birth, email address, unique customer number, password, and identification means for social media.

Contact details – we use this information to get in touch with you to send products to you, provide you with targeted promotional information and updates about Josephine & Co (only if you have given consent), and respond to your questions or comments. This includes, among other things: phone number, shipping and billing address, email address. We process this data for the execution of the agreement between us.

Purchase information – this is the information we use to process your order. This includes, among other things: your shopping cart, payment details (credit card number), delivery information, shipping and billing address, customer order number, purchase history at Josephine & Co. We process this data for the execution of the agreement between us.

Correspondence – this is information we use for quality monitoring purposes and to ensure that we meet your requests or comply with legal regulations. This includes, for example: recordings of your call to our customer service, explanation of your feedback, related call-back service, email correspondence with customer service. We have a legitimate interest in processing this data.

Preferences information – this is information we use to ensure that you have the best experience when we interact. This includes, among other things: language preference, items on the wishlist, first delivery address, and browser settings. We have a legitimate interest in processing this data.

We would like to inform you that we do not collect or store payment details on our servers. We handle this through third parties with whom we have entered into a data processing agreement and who have implemented appropriate security measures to secure all data and personal information obtained.

Data obtained through your interaction with us

We may collect data when you visit our website or get in touch with us through the website.

Information obtained through social media – This is information we use to better understand you, build a stronger relationship with you as a consumer, produce products according to your preferences, and tailor our marketing to provide information that you find useful and interesting (based on your online behavior), as well as optimize your social media experience. This includes all information obtained through social media that is publicly available, such as (but not limited to): social media buttons, interactions and messages through social media, your 'Likes' and other reactions, your connections through social media, your photos. This information is provided to us through the social media network (such as Facebook, Snapchat, Instagram, etc.), directly or indirectly through agencies with whom we have entered into an agreement. We always ask for your prior consent before processing this type of personal data.

Location data – This is information we use to ensure that we provide you with the most relevant information based on your geographical location. This includes, among other things, your place of residence, your current login location (IP address), and GPS data. We always ask for your prior consent before processing this type of personal data.

Device data – This is information we use to secure our network and improve our services and performance. This includes, for example, IP address, date and time of the visit, duration of your stay on our website, the referral URL (if you arrived via another website or an advertisement on our website), the pages visited on our website, your browser type, versions, operating system. We have a legitimate interest in processing this data.

Behavioral/profile data – This is information we use to ensure that we provide only relevant information to you, offer the best deals and promotions that you might be interested in, and optimize your experience as a user of the website. This includes, for example, your purchase history, your browsing behavior, your shopping preferences, interactions during shopping. We always ask for your prior consent before processing this type of personal data.

We may obtain information through the use of cookies. A cookie is a small file sent to the browser and stored on your device when you visit our website. The use of cookies helps us improve our website and provide a more personalized experience. Some ads on our website are managed by third-party companies. It should be noted that these companies may also use cookies to collect data about our users.

2. HOW DOES JOSEPHINE & CO USE YOUR DATA?

Your personal data is collected and processed by Josephine & Co for purposes strictly related to the use of the website, its services, and the purchase of products on the website. We will be transparent about when we collect your data, how we use it, and with whom we share this data. We may use the data in the following ways:

To create and manage your account so that you can place orders, enabling us to:

• Deliver our products and services to you;
• Ensure that items are shipped to you and arrive on time;
• Communicate with you regarding your orders and account.

To ensure that the content of our website is presented to you as effectively as possible, so that we can:

• Keep you informed about our latest products, the latest news, and special offers;
• Provide you with the best service when you contact our customer service;
• Conduct market research and obtain information on how we can improve our product offering;
• Improve products and services and develop new ones;
• Request reviews of products and services;
• Process your order quickly.

By placing an order, you agree that we store your personal data for the purpose of processing your order.

3. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds:

Execution of Contracts

When we process your data for the conclusion of the purchase agreement with you, we ensure that we only use the minimal information necessary for its execution. This basis justifies the processing of personal data in the following activities:

• Conclusion and execution of a purchase agreement for the products offered on the Website;
• Registration for the Website and use of services reserved for registered users;
• Delivery of services offered on the Website; and
• Management of your requests by our customer service.

Provision of your personal data for these activities is a contractual obligation. You are free to provide or withhold your data, but without the requested information, it is not possible to enter into or perform the agreement with you and fulfill your requests. This means that you cannot purchase products, use our services, and we cannot process your requests.

Legal obligation

We must comply with legal regulations. We may process your data if required in connection with taxes, sanction laws, claims, seizures, combating money laundering, preventing the financing of terrorism, preventing fraud, and over-indebtedness.

Legitimate interest

We have legitimate interests in processing your personal data to conduct our business activities and improve your shopping experience and our Website.

Consent

We only carry out the following processing activities if you have given us your explicit consent:

• Execution of marketing activities, such as sending newsletters;
• Analysis of your browsing behavior and consumption patterns within the use of your account to personalize your experience on our Website. 

If you have given your consent for the processing of your personal data, you can withdraw this consent at any time.

4. WHO HAS ACCESS TO YOUR DATA?

Your personal data is processed by our internal employees who are trained and authorized for this purpose.

In addition, your data is also transmitted to third parties we engage to provide our services. These so-called data processors are carefully selected and ensure compliance with the rules regarding the processing of personal data. Designated data processors are responsible for processing and executing their activities in accordance with the instructions given by Josephine & Co.

We may also disclose your personal data to the police and to judicial and administrative authorities, in accordance with the law, for the detection and prosecution of criminal offenses, the prevention and protection against threats to public safety, to enable us to exercise or defend a right in court, and for other reasons related to the protection of the rights and freedoms of others.

5. DOES JOSEPHINE & CO SHARE YOUR DATA WITH OTHERS?

We treat your data with care and confidentiality, and we do not share, sell, or trade your data with/to third parties other than as expressly outlined in this Privacy Policy or if you have given your consent. We engage third parties with appropriate security measures to secure all obtained data or personal information.

To conduct our business activities, we need to collaborate with several third parties who are experts in their respective fields, such as our key service providers. We also share your data when we need to comply with a legal request or when we believe it is necessary to protect Josephine & Co or its customers. For example, if Josephine & Co is the subject of an attempt of fraudulent or illegal activities. We also share your data with third parties if you have given us your consent.

6. HOW LONG DO WE RETAIN YOUR DATA?

We retain your personal data for a limited period, depending on the type of activity involved in the processing of your personal data. We keep your personal data after you have deleted your account to the extent necessary to comply with our legal and regulatory obligations and for fraud monitoring, detection, and prevention. We also retain your data to comply with our tax and accounting obligations and our obligations regarding financial reporting. If we keep your data, we do so in accordance with all statutory limitations and data retention obligations imposed by applicable law.

After this period, your data will be permanently deleted or otherwise irreversibly anonymized.

7. SOCIAL NETWORKS

On our Website, you will find social plugins from various social networks. If you choose to be active within a social network, your activities on our Website will also be made available to social networks such as Facebook, Twitter, and Instagram. If you are logged into one of these social networks during your visit to our Website, this social network may add this information to your profile on that network. We are not responsible for their use of data. Please refer to the privacy statement of each social network for more information.

8. PROTECTION OF YOUR PERSONAL DATA

We have implemented appropriate technical and organizational measures to protect your data from loss, alteration, access, or improper use. This includes, in particular, the following measures:

Encryption and Security

Josephine & Co has implemented various security measures to maintain the security of your personal data. All payment data provided by you is transmitted via Secure Socket Layer (SSL) technology, encrypting your data before it is provided to us to protect it from unauthorized use. In addition to SSL encryption, we use MasterCard SecureCode, providing an extra level of security when placing an order. This code protects you from misuse of your credit card number. All payment data is processed through a gateway provider and is not stored or processed on our servers. While we do our best to protect your personal data, security cannot be guaranteed.

Third-Party Links

Our Website may contain links to external websites managed by other companies. These third-party links may collect personal data from visitors to their website. Josephine & Co is not responsible or liable for the content and activities of these linked websites.

Subscription to Email Newsletters

You can subscribe to Josephine & Co's newsletter by providing your email address in the newsletter module at the bottom of each page on the Website. We send the newsletter only to online (or registered) visitors if you have chosen to receive the newsletter. All our email messages contain an unsubscribe button, allowing you to opt-out at any time from receiving email messages in the future. You can also contact us through our contact details to exercise your rights.

9. COOKIES

When you visit our Website, unique cookies are placed to recognize your browser among all other browsers visiting our Website. For more information, please refer to our cookie policy.

10. MINORS

If you are under 18 years of age, we ask you to inform your parent or guardian and obtain the consent of a parent or guardian before providing your personal data to us.

11. RIGHTS RELATED TO YOUR PERSONAL DATA

Rights regarding the processing of personal data

You have the right to access and modify the personal data we have obtained from you. You have the right to object to the processing of your personal data. In certain cases, you can also ask us to restrict the processing of your personal data, delete your data, transfer it to another data controller, or erase it. If you wish to exercise any of these rights, you can send a request to our customer service via info@josephineco.com, indicating that it is a request regarding personal data.

Attach a copy of your ID so that we can be sure that you are indeed the person who submitted the request. Make sure to black out your passport photo and your citizen service number. This is to protect your privacy. Also, provide your home address. You will receive an overview of your data or a response to your request within one month from your request.

12. COMPLAINTS

While we hope this is not necessary, it may happen that you have complaints about our use of your personal data; in that case, send an email with a description of your complaints to info@josephineco.com. We will handle your complaints and respond to all complaints received by us.

If you believe that the processing of your personal data has been unlawfully performed, you can file a complaint with the supervisory authority responsible for compliance with data protection rules. In the Netherlands, complaints can be filed with the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl. If you are dissatisfied with how the complaint has been handled, you can appeal to the courts.

13. CHANGES TO THIS INFORMATION

Josephine & Co reserves the right to make changes to this Privacy Policy without prior notice. Changes will be published on our Website, indicating the date of the last update. If you continue to visit the Website, you are automatically bound by the amended Privacy Policy. Therefore, we recommend checking this Privacy Policy regularly.

14. CONTACT US

If you have any questions about our use of your data, how to exercise your rights, or about our policies, please contact us using the details below.

Phone: +31 20 705 5190 (Monday to Friday 9:00 – 17:00 CET)

Email: info@josephineco.com