Privacy Statement
This is the privacy statement of U2pi B.V. and its brands jouwboek.nl, jouwboekdrukkerij.nl, copyshopdenhaag.nl and kelbo.nl (hereinafter also referred to as “U2pi”). This privacy statement applies to all products and services offered by U2pi under its brands and trade names.

We process personal data in accordance with applicable laws and regulations. U2pi B.V., Carolina van Nassaustraat 161, 2595 SX The Hague (Chamber of Commerce number 27322834), is responsible for the use of your personal data.

This privacy statement was last updated on 24 May 2018.

Processing of personal data
This privacy statement explains what information we collect and why we use it. We do so by describing the different ways in which we obtain personal data.

U2pi's legal basis for processing your personal data is always the performance of our agreement with you, your consent and/or the pursuit of a legitimate interest (such as sending marketing information and preventing fraud) of U2pi or a third party.

U2pi continually seeks to improve and update its products and services. We therefore also use the personal data we obtain for analysis and to adapt and improve our services. Where possible and permitted, we try to personalise our communications. Personal data may also be used to prevent fraud and secure our websites, apps, products and services.

When selling and entering into agreements to supply products and services
U2pi offers various publications and provides reprographic services in the broadest sense (through several online stores). U2pi processes contact details (including your name, address, telephone number and email address) and transaction details (including bank and payment details) to enter into and perform our agreement with you, deliver these products and services and keep you informed of their progress. The legal basis for this processing is the performance of our agreement with you.

Visiting a U2pi website
U2pi operates several websites. When you use U2pi websites, we collect personal data to provide you with the best possible service. For example, we use cookies and scripts to improve website performance. Some websites also use tracking cookies and scripts, placed by us and third parties, to show you ads tailored to your interests and analyse your browsing behaviour.

Some U2pi websites use cookies and similar technologies to recognise and track you online, monitor your clicks and mouse movements, and create profiles based on your behaviour on the website.

The legal basis for this processing is your consent (except for functional cookies and cookies with little impact on your privacy).

Newsletter
If you have given your consent, U2pi will track clicks on its website from links in newsletters you receive to improve its products and services and enable targeted advertising.

Creating an account
Some U2pi websites allow you to create an account. To do so, enter your name and email address (your login details). With an account, you only need to log in on your next visit instead of entering your details again. The legal basis for this processing is the performance of our agreement with you.

If account data is used for research and analysis to improve our services, the legal basis is U2pi's legitimate business interest in improving its services.

We may supplement your login details with information we have about you as a newsletter subscriber, so we can identify you as one. This may, for example, allow us to offer you discounts on products or services available to newsletter subscribers. On some websites, we may supplement your login details with information obtained from your use of the website. If so, we will inform you before you create an account or ask for your separate consent where required.

Use of social media
U2pi is active on various social media platforms, including Facebook, Twitter and YouTube. If you follow us on social media, we may be able to access some of your profile information, depending on your settings on those platforms. U2pi may track how often an article is shared or “liked” on social media to analyse its reach. The legal basis for this processing is U2pi's legitimate interest in improving its services.

U2pi may use third-party marketing services, such as Facebook and Google, to target specific audiences on social media.

Contacting customer service
You can contact U2pi customer service through various channels, including info@jouwboek.nl. For more information, please visit the U2pi websites. When you contact our customer service team, we may ask for contact details such as your name, address, email address and telephone number. We use this information to handle your enquiry and store it so we can assist you better in future, in order to perform our agreement with you. We also use it to improve our products and services, on the basis of U2pi's legitimate interest in improving its services.

Communications from U2pi
U2pi would like to keep you informed about its news, events and offers. We do this by email, as well as through direct marketing mailings and telemarketing. Where we know your preferences and interests and you have given your consent, we tailor these communications accordingly as far as possible. U2pi processes contact details (including your name and email address), date of birth and possible interest data (including data based on website behaviour) for email newsletters.

You can sign up for U2pi communications in various ways, for example by subscribing to one of its newsletters. After a purchase, such as in one of our online stores, U2pi may also email you about similar products or services unless you have opted out when making your purchase. You can unsubscribe from U2pi communications at any time. Each message you receive from U2pi explains how to do so.

Recipients
Group companies
U2pi B.V. may share personal data with its partners to ensure responsible, efficient and effective business operations, particularly for the following activities:

Performing agreements
Marketing activities, including targeted marketing to maintain or develop our relationship with you
Business processes and internal management
Security
Compliance with legal obligations
Processors
U2pi may use third-party services to process your data in accordance with this privacy statement, for example technical service providers and delivery companies. These third parties act as processors on behalf of U2pi, and we ensure they provide sufficient guarantees regarding technical and organisational security measures. U2pi enters into data processing agreements with third parties acting as processors on its behalf. These agreements stipulate, among other things, that they will only process personal data on U2pi's instructions.

Other
In all other cases, U2pi will only share data with third parties with your prior consent, where required by law or regulations, where necessary as a result of legal proceedings, and/or where we consider it necessary to protect our own interests.

Security
U2pi takes appropriate technical and organisational measures to protect your personal data against loss or unlawful processing. We secure our systems and applications to a level that, given the state of the art, is sufficient to prevent unauthorised access to, alteration, disclosure or loss of personal data. As part of this, U2pi enters into data processing agreements with suppliers that process personal data on its behalf, requiring them to take appropriate measures to protect the data.

Your rights
Access and correction
To request an overview of all personal data processed by U2pi, email info@jouwboek.nl. You can also use this email address to request changes or corrections to your data. U2pi will respond to such requests as soon as possible and no later than one month, unless an extension is justified by law.

Objection
You can object at any time to the use of your personal data for direct marketing and/or to receiving (further) marketing information by writing to U2pi BV, Antwoordnummer 91025, 2509 VC The Hague, or emailing info@jouwboek.nl. U2pi newsletters include an unsubscribe option. If you use it, you will no longer receive such messages.

Deletion
To request deletion of your personal data and/or account, email info@jouwboek.nl. U2pi may retain some personal data after receiving your request, for example where necessary to process orders you have placed or where required by law.

Restriction of processing
If you have valid grounds to request a restriction of processing—for example, because you dispute the accuracy of personal data processed by U2pi or have objected to its processing—you can request this by emailing info@jouwboek.nl.

Data portability
If U2pi processes your personal data with your consent by automated means, you have the right to request the personal data you provided to U2pi in a structured, commonly used and machine-readable format. You can request this by emailing info@jouwboek.nl.

Withdrawing consent
If we process your personal data on the basis of your (explicit) consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn.

Complaints
If you have a complaint about how U2pi uses personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Retention periods
Personal data is not retained longer than necessary for the purpose for which it was collected or processed. WPG sets retention periods for each purpose and category of data. When setting retention periods, U2pi takes decisions by the Dutch Data Protection Authority into account.

Transfers to countries outside the EEA
U2pi and its processors will only store or process your personal data outside the EEA where this complies with the applicable rules on transferring personal data to countries outside the EEA.

Children
Under 18? Ask your parent(s) or legal guardian(s) for permission before using our products and services.

Anyone under the age of 18 (a minor) may only purchase products and services from U2pi with the consent of a parent or legal guardian. In the minor's best interests, their parent(s) or legal guardian(s) should read this privacy statement and the cookie statement, and may exercise the minor's rights on their behalf. U2pi recommends that parents or legal guardians supervise minors' use of U2pi products and services and explain how their personal data may be used under this privacy statement and the cookie statement.

Changes
U2pi reserves the right to amend this privacy statement. Please check the current privacy statement each time you use our services. We will notify you of any significant changes.

Transfer of business
U2pi may transfer its business, subsidiaries and/or services to a third party. In that case, your personal data will also be transferred to that party. We will inform you in good time beforehand. If you no longer wish to use our services, you can ask us to delete your data.

Contact
For questions or comments about this privacy statement, please contact us with “privacy” in the subject line:

U2pi BV
Antwoordnummer 91025
2509 VC The Hague

Or email info@jouwboek.nl