CB Distribution BV and its affiliated companies (“CBD”), collect personal data of (the employees of) our customers and visitors of our websites whilst providing our services.

CBD processes your data with due care, in accordance with all applicable laws and regulations. Our privacy policy explains what data we process, how we do that and how you may object to the processing of your personal data. This privacy policy may be updated from time to time. You can find the current version on our website.

1. When does this Privacy Policy apply?

1.1 This privacy policy applies to all personal data that CBD processes during the execution of our services, including the personal data of visitors of the CBD websites.

2. Who proceses your personal data?

2.1 CB Distribution BV, Hazenweg 2, Office 2.1, 7556 BM  Hengelo, the Netherlands, as well as its affiliated companies.

3. What personal data do we process?

3.1 We may collect and process information in several ways:

i) Information you give to us, such as name, address, phone number, and email address (or those of your employees or customers); and

ii) Information we get from your use of our services and your visit of our websites, such as name, address, e-mail address, IP-address. We also process your preferences for certain products and services.

3.2 Cookies

We use various technologies to collect and store information when you visit a CBD website, including cookies. Cookies allow us to calculate the aggregate number of people visiting our websites and monitor the use of the websites. This helps us to improve our websites and better serve our users. We also use cookies that make the use of the website easier for you, for example by remembering usernames, passwords and (language) preferences. Cookies do not allow us to gather any personal data about you and we do not intentionally store any personal data that your browser provides to us by your cookies.

4. Using your personal information – purposes and use

CBD uses the data we collect for:

4.1 Services

CBD processes your personal data in the first place to be able to deliver our services to you. We use the data for example to send an invoice or maintain our relationship with you. We also use the data to answer any of your requests for information or to judge your application.

4.2 Engagement of third parties

CBD may engage other parties to perform (part of) our services to you. To the extent that these third parties need access to personal data to perform such services, CBD has taken the appropriate contractual and organisational measures to ensure that your data are processed exclusively for the purposes specified in this privacy policy and in accordance with all applicable laws and regulations.

4.3 Marketing and sales activities

As a customer of CBD, we are happy to make offers for our products and services (including after termination of the contract with you). We do this by phone, email or mail, unless you object to this.

4.4 Processing of your data on CBD websites

We collect and use your personal data on our websites in the first place to deliver our (web) services and communicate with you. Your data are also used for research and analysis to improve our services and our websites. We may also use your data entered on our websites in certain cases to send information by e-mail about other services of CBD to you, provided that you have given us consent for that.

5. Sharing

We do not share your personal data with third parties outside of CBD unless one of the following circumstances applies:

5.1 With your explicit consent

We may share your personal data with third parties outside CBD when we have your explicit consent to do so. You have the right to withdraw this consent at all times.

5.2 For external processing by third parties engaged by CBD

We may provide your personal data to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in accordance with our privacy policy and any other appropriate obligations of confidentiality and security measures.

5.3 For legal reasons

We may share your personal data with third parties outside CBD if we have a good-faith belief that access to and use of the personal data is reasonably necessary to:

i) meet any applicable law, regulation, and/or court order;

ii) detect, prevent, or otherwise address fraud, security or technical is-sues; and/or

iii) protect the interests, properties or safety of CBD, our users or the public as far as in accordance with the law.

5.4 We may share aggregated, non-personally identifiable data with our partners. For example, we may share information publicly to show trends about the general use of our services.

5.5 If CBD is involved in a merger, acquisition or asset sale, we will continue to ensure the confidentiality of all personal data. We will give notice to all customers concerned before the personal data are transferred or become subject to a different privacy policy.

6. Storage period

6.1 CBD does not store your personal data longer than is legally permitted and necessary for the purposes for which the data were collected. The storage period depends on the nature of the information and the purposes of processing. The maximum period may therefore vary per use.

7. Access, rectification, and deleting of personal data

7.1 CBD offers you access to the personal data we process. This means you can contact us asking us to inform you about your personal data that we have collected and processed and the purposes such data are used for. You may request such access by sending an e-mail, including your name, address, phone number, e-mail address to CBD info@cb-distribution.nl. If request access to personal data in a cookie, you have to enclose a copy of the said cookie.

7.2 If you believe we are holding inaccurate personal data, please contact us so we can correct the data. You can contact us by sending by sending an e-mail, including your name, address, phone number, e-mail address to CBD info@cb-distribution.nl. You will receive a response within 4 weeks.

7.3 You may also ask us to delete your personal data from our systems. We will comply with such request unless we have a legitimate ground to not delete the data. After the data have been deleted, we may not immediately be able to delete all residual copies from our active servers backup systems.

7.4 We may reject requests that are unreasonably repetitive, require disproportionate technical efforts or have disproportionate technical consequences, risk the privacy of others, or would be extremely impractical.

8. Right to object

8.1 You may object to certain use of your personal data if such data are processed for other purposes than necessary for the performance of our services or for compliance with a legal obligation. You may also object any further processing of your personal data after prior given consent.

8.2 You can object to the processing of your personal data by sending an e-mail, including your name, address, phone number, e-mail address to info@cb-distribution.nl to what kind of processing of your personal data you object. You will receive a response in writing within 4 weeks.

8.3 If you object to the further processing of your personal data, this may lead to fewer possibilities to use our websites and other services.

9. Information security

9.1 We take all reasonable, appropriate security measures to protect CBD and our customers from unauthorised access to or unauthorised alteration, disclosure or destruction of personal data we hold.

9.2 Should despite of the security measures, a security breach occur that is likely to have negative effects to your privacy, we will inform you about the breach as soon as reasonably possible.

10. Applicability and changes

10.1 Our privacy policy applies worldwide, to all of the services offered by CBD.

10.2 Our privacy policy may change from time to time. You can find the current version on our website. We will not reduce your rights under this privacy policy without your explicit consent. If the changes are significant, we will provide a personal notice.

Hengelo, 1 May 2018