Privacy Statement

About our privacy policy

Machinepunt cares deeply about your privacy. We therefore only process data that we need for (improving) our services and handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services made available through it by Machinepunt. The effective date for the validity of these terms is 18/01/2024; upon publication of a new version, all previous versions become invalid. This privacy policy describes what data about you is collected by us, what this data is used for, and with whom and under what conditions this data may possibly be shared with third parties. We also explain to you how we store your data, how we protect your data against misuse, and what rights you have with regard to the personal data you have provided to us.

If you have any questions about our privacy policy, you can contact our contact person for privacy matters; you will find the contact details at the end of our privacy policy.

Data security

Summary – Data security
 
We apply appropriate technical and organizational security measures to protect your personal data. Make sure you use a secure transmission method whenever you send personal data to us.

In accordance with applicable law, we have implemented appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized forms of processing.

Because the internet is an open system, the transmission of information via the internet is not completely secure. Although we take all reasonable measures to protect your personal data, we cannot guarantee the security of your data transmitted to us via the internet – any such transmission is at your own risk and you are responsible for securely sending your personal data to us.

Accuracy of data

Summary – Accuracy of data
 
We take all reasonable measures to ensure that your personal data is accurate and up to date and that it is deleted or corrected if we become aware of inaccuracies.

We take all reasonable measures to ensure that:

The personal data we process about you is accurate and updated where necessary; and

All inaccurate personal data we process about you (taking into account the purposes for which it is processed) is deleted or corrected without delay.

From time to time, we may ask you to confirm the accuracy of your personal data.

Data retention

Summary – Data retention
 
We take all reasonable measures to ensure that your personal data is not retained longer than necessary in connection with a legitimate purpose.

We take all reasonable measures to ensure that your personal data is not processed longer than strictly necessary for the purposes set out in this statement. The retention period for your personal data is determined on the basis of the following criteria:

We retain personal data in a form that allows identification only for as long as:

we maintain a relationship with you (for example, when you are a user of our services or are legally included in our mailing list and have not unsubscribed); or

your personal data is necessary in connection with the lawful purposes described in this statement for which we have a valid legal basis (for example, if your personal data is included in an agreement between us and your employer and we have a legitimate interest in processing this data in the context of carrying out our business activities and fulfilling our obligations under that agreement, or if we have a legal obligation to retain your personal data, or until you withdraw your consent and there is no other legal basis, or for as long as a statutory retention obligation applies),

plus:

the duration of:

any limitation period under applicable law (that is, any period during which a person may bring a legal claim against us that relates to or concerns your personal data); and

two (2) additional months after the end of any such limitation period (to ensure that if someone brings a claim at the end of the limitation period, we still have a reasonable amount of time to identify the personal data relevant to that claim),

and:

additionally: if relevant legal claims are brought, we will continue to process personal data for the additional periods necessary in connection with that claim; we may also continue to process personal data if deleting the data would be contrary to the requirement to protect the interests of the data subjects, or if processing is otherwise necessary in accordance with Article 17(3) of the GDPR.

During the periods referred to above in paragraph (2)(a) and (2)(b), we restrict the processing of your personal data to storing and maintaining the security of that data, except insofar as the data must be reviewed in connection with any legal claims or obligations under applicable law.

After the end of the periods referred to above in paragraphs (1), (2) and (3), where applicable, we will:

permanently delete or destroy the relevant personal data; or

anonymize the relevant personal data.

 

About data processing

Below you can read how we process your data, where we store or have it stored, which security techniques we use, and who has access to the data.

Webshop software

WooCommerce

Our webshop has been developed using WooCommerce software. Personal data that you make available to us for the purpose of our services is shared with this party. WooCommerce has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Based on the agreement we have concluded with them, WooCommerce is obliged to take appropriate security measures. These security measures consist of the application of SSL encryption and a strong password policy. WooCommerce uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored. WooCommerce reserves the right to share collected data within its own group in order to further improve the services.

WooCommerce hosting

Our webshop has been developed using WooCommerce software; for our web hosting, we have chosen AndersRevaio. Personal data that you make available to us for the purpose of our services is shared with this party. AndersRevaio has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Based on the agreement we have concluded with them, AndersRevaio is obliged to take appropriate security measures. These security measures consist of the application of SSL encryption and a strong password policy. Backups are made regularly to prevent data loss.

Web hosting

Revaio

We purchase web hosting and email services from Revaio. Revaio processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. Revaio has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Revaio is bound to confidentiality under the agreement.

Email and mailing lists 

Combell

 We use the services of Combell for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. Combell does not have access to our mailbox, and we treat all our email traffic confidentially.

Payment processors

Mollie

For handling (part of) the payments in our webshop, we use the Mollie platform. Mollie processes your name, address and place of residence details, and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, in that context, to share (anonymized) data with third parties. All the safeguards mentioned above with regard to the protection of your personal data also apply to the parts of Mollie’s services for which it engages third parties. Mollie does not retain your data longer than permitted under the statutory periods.

Reviews Shipping and logistics

Bpost

If you place an order with us, it is our task to have your parcel delivered to you. We use the services of Bpost to carry out the deliveries. For that purpose, it is necessary for us to share your name, address, and place of residence details with Bpost. Bpost uses this data only for the performance of the agreement. If Bpost engages subcontractors, Bpost also makes your data available to these parties.

Invoicing and accounting External sales channels

Purpose of data processing

General purpose of processing

We use your data exclusively for the purpose of our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time – other than at your request – we will ask for your explicit consent to do so. Your data is not shared with third parties, except where necessary to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality on the basis of the agreement between them and us or an oath or legal obligation.

Automatically collected data

Data automatically collected by our website is processed for the purpose of further improving our services. This data (for example your IP address, web browser, and operating system) is not personal data.

Cooperation with tax and criminal investigations

Where applicable, Machinepunt may be required by law to share your data in connection with tax or criminal investigations by government authorities. In such a case, we are compelled to share your data, but we will oppose this within the possibilities offered to us by law.

Retention periods

We retain your data for as long as you are our client. This means that we retain your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also interpret this as a request to be forgotten. This also means that we do not retain your data for more than two years from the last contact moment or transaction, unless there is a legal justification for doing so. Under applicable administrative obligations, we are required to retain invoices containing your (personal) data; we will therefore retain this data for as long as the applicable term runs. However, employees will no longer have access to your client profile and documents that we have produced in response to your assignment.

Your rights