PRIVACY POLICY

Privacy Policy Star Remedies B.V.

Version: January 2025

When you visit our website, place an order, or contact us, we may process your personal data. We handle this information carefully and comply with the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect, why we process it, how long we keep it, and what your rights are.

Data Controller
Star Remedies B.V.
Sloterweg 150, 1171 CV Badhoevedorp, The Netherlands
Email: [email protected]
Chamber of Commerce (KvK): 34097765

1. What are personal data?

Personal data are any details that can identify you directly or indirectly, such as your name, address, email address, or IP address. We do not process any special categories of personal data (such as health information, religion, or ethnicity).

2. Individuals under 16 years of age

We do not intend to collect data from persons under 16 years old. If you believe we have collected data from a minor without parental consent, please contact us at [email protected]. We will delete such data immediately.

3. When do we process your data?

3.1 Questions or contact
Data: name, address, city, email address, phone number, and your message.
Legal basis: legitimate interest (to provide customer support and communication follow-up).

3.2 Performance of contracts
Data: name, address, city, email address, phone number.
Legal basis: performance of a contract.

3.3 Therapy consultations (if applicable)
Data: name, address, city, email address, phone number, date of birth, insurance information, and policy number.
Legal basis: consent.

3.4 Invoicing and administration
Data: name, address, city, email address, phone number, date of birth (for consultations), insurance information and policy number (for consultations), Chamber of Commerce number, VAT number, IBAN, IP address (for intra-EU supplies).
Legal basis: legal obligation (fiscal record-keeping).

3.5 Account and order history
Data: name, address, city, email address, customer number, phone number, VAT and IBAN number, login details (username/password), order and invoice details, IP address (for intra-EU supplies).
Legal basis: performance of a contract and consent (for account creation and use).

3.6 Newsletters and updates
Data: name, email address.
Legal basis: consent (you can unsubscribe at any time via the link in each email).

3.7 Customer satisfaction surveys
Data: first and last name, email address.
Legal basis: consent.

4. Cookies

We use functional and privacy-friendly analytical cookies to ensure the proper functioning and improvement of our website. If we use non-essential cookies (such as marketing or tracking cookies), we will request your consent during your first visit. You can disable cookies in your browser settings. See also our Cookie Policy.

5. Sharing data with third parties

We share personal data only when necessary for our services or to comply with legal obligations. Examples of partners we work with:

  • Newsletter and postal delivery services
  • Payment and debt collection providers
  • Web hosting, maintenance, and security providers

We have signed Data Processing Agreements with these processors to ensure that your data are handled securely and lawfully. Some partners are located outside the European Economic Area (EEA); in such cases, we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs). We do not sell your personal data to third parties.

6. Security

We apply suitable technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access. Only authorized staff or processors, who are bound by confidentiality, have access to personal data.

7. Retention periods

  • Emails: up to 5 years, unless required for an ongoing contract or dispute.
  • Invoices and accounting records: 7 years (statutory requirement).
  • Newsletter data: until you unsubscribe.
  • Camera footage: 30 days, unless required for investigation.

After these periods, data will be securely deleted or anonymized.

8. Your rights

You have the right to access, rectify, delete, restrict, or object to the processing of your personal data, as well as to request data portability or withdraw your consent. Please send your request to [email protected]. To verify your identity, we may ask for a redacted copy of your ID (please obscure your photo, MRZ, passport number, and BSN). We respond within four weeks.

If you disagree with our response, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

9. CCTV surveillance

To protect our employees, goods, and premises, CCTV cameras are in use inside and around our warehouse. Footage is kept for 30 days and automatically deleted unless required for an ongoing (criminal) investigation.

10. Data breach reporting

If a data breach occurs, we will report it to the Dutch Data Protection Authority within 72 hours, when legally required. If you discover a possible breach, please notify us within 24 hours via [email protected] so we can take immediate action.

11. Liability

This Privacy Policy applies only to the processing of personal data by Star Remedies B.V. We are not responsible for the operation or content of third-party websites or services linked from our website.

12. Changes

We may update this Privacy Policy from time to time to reflect changes in legislation or our services. The latest version is always available at www.starremedies.nl/privacy-policy-en/. By continuing to use our services after publication, you agree to the most recent version.

13. Contact

If you have any questions or comments regarding privacy or data protection, please contact us:

Star Remedies B.V.
Attn: Privacy – Star Remedies B.V.
Sloterweg 150
1171 CV Badhoevedorp
The Netherlands
Email: [email protected]

Privacyverklaring (Nederlands)