Privacy Statement
This is the privacy statement of U2pi B.V. and its brands jouwboek.nl, jouwboekdrukkerij.nl, copyshopdenhaag.nl and kelbo.nl (hereinafter also referred to as “U2pi”). This privacy statement applies to all products and services offered by U2pi under its brands and trade names.

We process personal data in accordance with applicable laws and regulations. U2pi B.V., Carolina van Nassaustraat 161, 2595 SX Den Haag (Chamber of Commerce number 27322834) is responsible for the use of your personal data.

This privacy statement was last updated on 24 May 2018.

Processing of personal data
This privacy statement explains what data we collect and how we use it. We do this by outlining the different ways in which we obtain personal data.

The legal basis for U2pi’s processing of your personal data is always the performance of our agreement with you, your consent and/or the pursuit of a legitimate interest (such as sending marketing information or preventing fraud) on the part of U2pi or a third party.

U2pi is constantly working to optimise and update its products and services. We also use the personal data we collect for analysis and to adapt and improve our services. Where possible and permitted, we try to personalise our communications. Personal data may also be used to prevent fraud and secure our websites, apps, products and services.

Sales and agreements for the supply of products and services
U2pi offers a range of publications and reprographic services in the broadest sense, through various online stores. U2pi processes contact details (including your name, address, telephone number and email address) and transaction details (including bank and payment details) to enter into and perform our agreement with you, supply these products and services, and keep you informed about the progress of your order. The legal basis for this processing is the performance of our agreement with you.

Visiting a U2pi website
U2pi manages several websites. When you use a U2pi website, we collect personal data to provide you with the best possible service. For example, we use cookies and scripts to improve website performance. On some websites, we and third parties also place tracking cookies and scripts to show you ads tailored to your interests and analyse your browsing behaviour.

Some U2pi websites use cookies and similar technologies to recognise and track you online, monitor your clicks and mouse movements, and build profiles based on your activity on the website.

The legal basis for this processing is your consent (except for functional cookies and cookies that have little impact on your privacy).

Newsletter
If you have given your consent, U2pi may track how you interact with a U2pi website after clicking through from a newsletter you received. We use this information to improve our products and services and to target our advertising.

Creating an account
You can create an account on some U2pi websites by entering your name and email address (your login details). With an account, you only need to log in on future visits instead of entering your details again. The legal basis for this processing is the performance of our agreement with you.

If account data is used for research and analysis to improve our services, the legal basis is U2pi’s legitimate business interest in improving its services.

We may supplement your login details with information we have about you as a newsletter subscriber. This allows us to recognise you as a subscriber. For example, we may offer you discounts on products or services available to newsletter subscribers. On some websites, we may supplement your login details with information we obtain from your use of the website. If we do, we will inform you before you create an account or ask for your separate consent if required.

Social media
U2pi is active on various social media platforms, including Facebook, Twitter and YouTube. If you follow us on social media, we may be able to access some of your profile information, depending on your settings on those platforms. U2pi may track how often an article is shared or “liked” on social media to analyse its reach. The legal basis for this processing is U2pi’s legitimate interest in improving its services.

U2pi may use third-party marketing services, such as Facebook and Google, to reach a specific target audience on social media.

Contacting customer service
You can contact U2pi customer service through various channels, including info@jouwboek.nl. For details, visit the U2pi websites. When you contact our customer service team, we may ask you for contact details such as your name, address, email address and telephone number. We use this information to handle your enquiry and keep it on file so we can assist you better in future, as part of our agreement with you. We also use it to improve our products and services, on the basis of U2pi’s legitimate interest in improving its services.

Communications from U2pi
U2pi would like to keep you up to date with its news, events and offers. We do this by email, as well as through direct marketing mailings and telemarketing. Where possible, and with your consent, these communications are tailored to your preferences and interests if we know them. U2pi processes contact details (including your name and email address), date of birth and potential interests (which may be based on your activity on the website) for email newsletters.

You can sign up to receive communications from U2pi in various ways, for example by subscribing to one of its newsletters. After a purchase, such as in one of our online stores, U2pi may also email you about similar products or services unless you have indicated that you do not wish to receive such messages. You can unsubscribe from U2pi communications at any time. Each message from U2pi explains how to do so.

Recipients
Group of companies
U2pi B.V. may share personal data with its partners to ensure responsible, efficient and effective business operations, particularly for the following activities:

Performance of agreements
Marketing activities, including targeted marketing to maintain or develop our relationship with you
Business processes and internal management
Security
Compliance with legal obligations
Processors
U2pi may use third-party services to process your data in accordance with this privacy statement, for example those of technical service providers and delivery companies. These third parties act as processors on behalf of U2pi. We ensure that they provide adequate guarantees regarding technical and organisational security measures. U2pi enters into data processing agreements with third parties acting as processors on its behalf. These agreements include provisions stipulating that they may only process personal data on U2pi’s instructions.

Other
In other cases, U2pi will only share data with third parties with your prior consent, if we are required to do so by law or regulations, if we are compelled to do so as a result of legal proceedings, and/or if we consider it necessary to protect our own interests.

Security
U2pi takes appropriate technical and organisational measures to protect your personal data against loss or unlawful processing. We secure our systems and applications to a level that, given the current state of technology, is sufficient to prevent unauthorised access, alteration, disclosure or loss of personal data. As part of these measures, U2pi enters into data processing agreements with suppliers it engages to process personal data on its behalf, imposing appropriate obligations on them to ensure the security of that data.

Your rights
Access and correction
To request an overview of all personal data processed by U2pi about you, email info@jouwboek.nl. You can also use this email address to request that your data be changed or corrected. U2pi will respond to such requests as soon as possible and no later than within one month, unless an extension is justified by law.

Objection
You may object at any time to the use of your personal data for direct marketing and/or to receiving (further) marketing information by sending your request in writing to U2pi BV, antwoordnummer 91025, 2509 VC Den Haag, or by email to info@jouwboek.nl. U2pi newsletters include an unsubscribe option. If you use it, you will no longer receive such messages.

Erasure
To request the deletion of your personal data and/or account, email info@jouwboek.nl. U2pi may retain some personal data after receiving your request, for example where necessary to fulfil orders you have placed or where we are legally required to retain the data.

Restriction of processing
If you have valid grounds to request a restriction of processing—for example, if you dispute the accuracy of personal data processed by U2pi or have objected to U2pi’s processing of your personal data—you can request this by emailing info@jouwboek.nl.

Data portability
If U2pi processes your personal data with your consent using automated means, you have the right to request the personal data you provided to U2pi in a structured, commonly used and machine-readable format. You can make this request by emailing info@jouwboek.nl.

Withdrawing consent
If processing of your personal data is based on your (explicit) consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing based on your consent before it was withdrawn.

Complaints
If you have a complaint about U2pi’s use of personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Retention periods
Personal data is not retained for longer than necessary for the purpose for which it was collected or processed. WPG sets retention periods for each purpose and category of data. When setting retention periods, U2pi takes into account decisions made by the Dutch Data Protection Authority.

Transfers outside the EEA
U2pi or its processors will only store or process your personal data outside the EEA if this complies with the applicable rules for transferring personal data to countries outside the EEA.

Minors
Under 18? Ask your parent(s) or legal guardian(s) for permission before using our products and services.

People under the age of 18 (minors) may only purchase products and services from U2pi with the consent of a parent or legal guardian. Parents or legal guardians of minors should read this privacy statement and the cookie statement in the minor’s best interests and may exercise the minor’s rights on their behalf. U2pi recommends that parents or legal guardians supervise minors’ use of U2pi products and services and make them aware of how their personal data may be used under this privacy statement and the cookie statement.

Changes
U2pi reserves the right to amend this privacy statement. Please check the current privacy statement each time you use our services. We will notify you of any significant changes.

Transfer of business
U2pi may transfer its business, subsidiaries and/or services to a third party. In that case, your personal data will also be transferred to that party. We will inform you in good time beforehand. If you do not wish to continue using our services, you can ask us to delete your data.

Contact
For questions or comments about this privacy statement, please contact us, quoting “privacy”:

U2pi BV
Antwoordnummer 91025
2509 VC Den Haag

Or email info@jouwboek.nl