About the data processing
Below you can read how we process your data, where we store it or have it stored, which security techniques we use and for whom the data are transparent.
Our webshop has been developed with software from WooCommerce, we have our web hosting chosen Versio. Personal data that you make available to us for the purpose of providing our services will be shared with this party. Versio has access to your data in order to provide (technical) support, they will never use your data for any other purpose. On the basis of the agreement we have concluded with them, Versio is obliged to take appropriate security measures. These security measures consist of SSL encryption and a strong password policy. Backups are made on a regular basis to prevent loss of data.
We purchase web hosting and email services from Versio. Versio processes personal data on our behalf and does not use your data for its own purposes. It may, however, collect metadata on the use of the services. These are not personal data. Versio has taken appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. Versio is obliged to maintain confidentiality on the basis of the agreement.
E-mail en mailinglists
We use the services of Versio for our regular business e-mail traffic. This party has taken appropriate technical and organizational measures to prevent abuse, loss and corruption of your and our data as much as possible. has no access to our inbox and we treat all our e-mail traffic confidentially.
To process (part of) the payments in our webshop we use the platform of Mollie. Mollie processes your name, address and residence details as well as your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to further improve the service and to share (anonymised) data with third parties in the context thereof. All the above guarantees with regard to the protection of your personal data also apply to the parts of Mollie’s services for which they engage third parties. Mollie does not retain your data for longer than permitted by law.
We collect reviews via the platform of WebwinkelKeur. If you leave a review via WebwinkelKeur then you are required to provide a name and e-mail address. WebwinkelKeur shares this information with us, so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases WebwinkelKeur may contact you to explain your review. In case we invite you to leave a review, we will share your name and e-mail address with WebwinkelKeur. They only use this data for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the delivery of the service, for which we have given permission to WebwinkelKeur. All the above mentioned guarantees with regard to the protection of your personal data are also applicable to the parts of the service for which WebwinkelKeur engages third parties.
Shipping and logistics
If you place an order with us, it is our task to have your package delivered to you. We use the services of PostNL for the execution of the deliveries. It is therefore necessary for us to share your name, address and residence details with PostNL. PostNL shall only use these data for the purpose of implementing the agreement. In the event that PostNL engages subcontractors, PostNL shall also make your data available to these parties.
If you place an order with us, it is our task to have your package delivered to you. We use DHL’s services to carry out deliveries. It is therefore necessary for us to share your name, address and place of residence with DHL. DHL will only use this information for the purpose of performing the contract. In the event that DHL engages subcontractors, DHL will also provide your information to those parties.
Invoicing and Accounting
In order to keep our administration and accounts, we make use of the services of e-boekhouden We share your name, address and place of residence details and details regarding your order. This data is used to administer sales invoices. Your personal data will be sent and stored in a protected manner. e-boekhouden is obliged to secrecy and will treat your data confidentially. E-boekhouden does not use your personal data for purposes other than those described above.
We sell (part of) our articles via the Bol.com platform. If you place an order via this platform, Bol.com will share your order and personal data with us. We use this information to process your order. We treat your data confidentially and have appropriate technical and organizational measures in place at getroﬀen to protect your data against loss and unauthorized use.
We sell (part of) our products via the Etsy platform. If you place an order via this platform, Etsy will share your order and personal data with us. We use this information to process your order. We treat your data confidentially and have appropriate technical and organizational measures in place at getroﬀen to protect your data against loss and unauthorized use.
Purpose of the data processing
General purpose of the processing
We only use your data for the purpose of providing our services. This means that the purpose of the processing is always directly related to the order you give. We do not use your data for (targeted) marketing purposes. If you share information with us and we use this information to – other than at your request – contact you at a later time, we will ask you for explicit permission to do so. Your data will not be shared with third parties other than for the purpose of meeting accounting and other administrative obligations. These third parties are all bound to secrecy on the basis of the agreement between them and us or an oath or legal obligation.
Automatically collected data
Data that is automatically collected by our website is processed for the purpose of further improving our services. These data (e.g. your IP address, web browser and operating system) are not personal data.
Cooperation in tax and criminal investigations
In such cases, sign my sign may be required by law to share your data in connection with a criminal investigation or a government investigation. In such a case, we will be forced to share your data, but we will oppose it within the limits of the law.
We store your data as long as you are a client of us. This means that we will retain your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also regard this as a forgetful request. Pursuant to applicable administrative obligations we must store invoices with your (personal) data, so we will store this data for as long as the applicable term runs. However, employees no longer have access to your customer service and the documents that we have produced as a result of your order.
Pursuant to the applicable Dutch and European legislation, you, as the data subject, have certain rights with regard to the personal data that are processed by or on behalf of us. We will explain below what these rights are and how you can invoke them.
In principle, in order to prevent misuse, we only send copies and copies of your data to your e-mail address already known to us. In the event that you wish to receive the information by another e-mail address or, for example, by post, we will ask you to provide proof of identity. We keep records of completed requests; in the event of a request to forget, we administer anonymised data. You will receive all copies and copies of data in the machine-readable data format that we use within our systems.
You have the right to complain to the Personal Data Authority at any time if you suspect that we are using your personal data in the wrong way.
Right of inspection
You always have the right to view the data that we process (or have processed) and that relate to your person or are traceable for that purpose. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the e-mail address known to us with an overview of the processors in possession of this data, stating the category in which we have stored this data.
Right of Rectification
You always have the right to have the data that we process (or have processed) and that relate to your person or are traceable for that purpose, modified. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is accepted, we will send you a confirmation that the details have been adjusted at the e-mail address known to us.
Right to limitation of processing
You always have the right to limit the data we process (or have processed) that relate to your person or are traceable to it. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the e-mail address known to us that the data will no longer be processed until you lift the restriction.
Right to transferability
You always have the right to have the data that we process (or have processed), relating to your person or that can be traced back to you, carried out by another party. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all data about you that we have processed or that have been processed by other processors or third parties on our behalf at the e-mail address known to us. In all probability, in such a case, we will no longer be able to continue to provide services, because the safe linking of data files will then no longer be guaranteed.
Right of objection and other rights
If the occasion arises, you have the right to object to the processing of your personal data by or on behalf of sign my sign. If you object, we will immediately cease data processing in anticipation of the handling of your objection. If your objection is well-founded, we will make copies and/or copies of data that we process or have processed available to you and will then permanently cease processing.
You also have the right not to be subjected to automated individual decision making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our privacy contact.
Our website places cookies from the U.S. company Google, as part of the “Analytics” service. We use this service to keep track of and receive reports on how visitors use the website. This processor may be obliged to allow inspection of this information on the basis of applicable legislation and regulations. We have not allowed Google to use the analytical information obtained for other Google services.
Cookiesof third parties
Spank & Spoon
8021 WB Zwolle
t: (+31) 06 541-4768
Contactperson for privacyquestions: