Privacy Policy

Uniserve, trading as Store-IT, with its registered office at Korte Hogendijk 14, 1506 MA Zaandam, is responsible for the processing of personal data as set out in this privacy statement.

Contact details

www.store-it.eu
Korte Hogendijk 14
1506 MA Zaandam
+31 (0)75 – 64 72 130

Introduction

Store-IT attaches great importance to the protection of personal data. In this privacy statement, we explain what personal data we process when you visit our website, contact us, request information from us or communicate directly with Store-IT in any other way.

This privacy statement describes only those processing operations for which Uniserve, trading as Store-IT, is itself the data controller within the meaning of the General Data Protection Regulation (GDPR).

Store-IT may also process personal data on behalf of clients in connection with the software and services provided by Store-IT. In such situations, Store-IT acts as a data processor, and the client in question determines the purpose and means of the processing. These processing activities fall outside the scope of this privacy statement and are governed by the applicable data processing agreement.

Personal data processed by Store-IT

Store-IT processes your personal data because you use our services and/or because you provide it to us yourself via the website or communicate with us directly in another way. Below is an overview of the personal data that we may process in this context:

• Name;
• Email address;
• Telephone number;
• Data that you provide in a message, contact form, quotation request or other communication;
• Data necessary for the performance and administration of a contract;
• IP address;
• Technical data about your device, browser and website usage, insofar as this data is processed via our website or the technical services used.

We do not process more personal data than is necessary for the purpose in question.

Special and/or sensitive personal data that we process

Our website and/or services are not intended to collect data about website visitors under the age of 16 unless they have parental or guardian consent. However, we cannot verify whether a visitor is over 16. We therefore advise parents to be involved in their children’s online activities to prevent data about children from being collected without parental consent. If you believe that we have collected personal data about a minor without such consent, please contact us at support@store-it.eu, and we will delete this information.

For what purposes does Store-IT process personal data?

We process personal data only to the extent necessary for one or more of the following purposes:

Contact and enquiries

When you contact us or ask a question via our website, we use your data to:

• Answer your question;
• Contact you by telephone or email;
• Provide further information;
• Process your request further.

Quotations and enquiries

When you request a quotation, a demonstration or other information about our services, we process your data in order to:

• Assess your enquiry;
• Contact you;
• Draw up a quotation or proposal;
• Prepare a contract.

Performance of contracts

If you are a customer or are contacting us on behalf of an organisation, we may process personal data necessary for:

• The performance of our contract;
• Communicating about the services provided;
• Support and customer service;
• Administration and invoicing;
• Maintaining our business relationship.

Security and prevention of misuse

We may process technical data, including IP addresses and log data, in order to:

• Secure our website and systems;
• Prevent misuse and fraud;
• Detect attacks and unauthorised access;
• Investigate incidents;
• Protect the availability and integrity of our services.

Website analysis and improvement

Where you have given your consent, we may process data relating to the use of our website in order to:

• Analyse the use of our website;
• Improve its functionality and user-friendliness;
• Optimise the content and functionality of our website.

The precise processing carried out for analytical purposes depends on your cookie preferences.

Automated decision-making

Store-IT does not use automated decision-making.

The legal basis for processing

We process personal data only where there is a legal basis for doing so. Depending on the processing in question, this may be:

• Performance of a contract: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
• Legal obligation: Where we are legally obliged to process certain personal data, for example for our financial records.
• Legitimate interest: Where processing is necessary for a legitimate interest of Store-IT or a third party, and your privacy interests do not override those interests. This may, for example, relate to:
  • Securing our website and systems;
  • Preventing and investigating misuse;
  • Managing our business relationship;
  • Responding to and managing business communications.
• Consent: Where consent is required by law, we will seek your consent in advance. You may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out prior to the withdrawal on the basis of your consent.

Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies may be necessary for:

• The technical functioning of the website;
• Remembering settings;
• Security;
• Improving the user experience;
• Analysing website usage.

We distinguish between essential and non-essential cookies and similar technologies. Non-essential cookies or similar technologies are only used once the necessary consent has been obtained. You can manage your preferences via the cookie settings on our website, where this functionality is available.

Google Analytics

We may use Google Analytics to gain insights into the use of our website and to improve the website and the services we provide. Where Google Analytics is used, processing is organised in accordance with the applicable privacy and cookie regulations.

Depending on the settings selected, technical data, website usage data and online identifiers, among other things, may be processed. The Google Analytics settings are reviewed periodically to assess whether the processing complies with this privacy statement. For further information, please refer to Google’s privacy policy.

Google reCAPTCHA

We may use Google reCAPTCHA to protect our website and forms against spam, automated attacks and other forms of abuse. For this security functionality, technical data relating to your visit may be processed, including your IP address and information necessary to assess whether a request is being made by a person or an automated system.

The use of reCAPTCHA is periodically assessed in terms of proportionality, privacy and necessity. Where consent or an additional measure is required for the use of reCAPTCHA, the technical configuration will be adjusted accordingly. For further information, please refer to Google’s privacy policy.

Sharing personal data with third parties

We do not disclose personal data to third parties without a valid reason. We may share personal data with:

• IT and hosting service providers;
• Suppliers who support our website or IT infrastructure;
• Suppliers of security and anti-abuse services;
• Analytics service providers, if you have given your consent;
• Administrative and financial service providers;
• Professional advisers, where necessary;
• Government bodies where we are legally obliged to do so.

Where required by law, we enter into agreements with third parties that process personal data on behalf of Store-IT regarding the processing and security of personal data. We do not sell personal data to third parties.

Processing outside the EEA

We endeavour to process personal data within the European Economic Area (EEA). However, for certain services, personal data may be processed by suppliers that are part of an international organisation or use infrastructure outside the EEA.

Where personal data is transferred outside the EEA, we ensure that there is a valid basis for the transfer and that appropriate safeguards are in place, such as an adequacy decision or appropriate contractual safeguards, where required. The international data transfers and safeguards in place are monitored internally and reviewed periodically.

Processing on behalf of our customers

Store-IT provides software and services in which personal data relating to customers and other data subjects may be processed. Where Store-IT processes this personal data exclusively on behalf of a client, Store-IT acts as a data processor.

In that case:

• The client determines the purposes and means of the processing;
• Store-IT processes the personal data in accordance with the client’s instructions;
• The arrangements are set out in a data processing agreement;
• Store-IT implements appropriate technical and organisational security measures;
• Store-IT supports the customer where necessary, in accordance with the agreement and the GDPR.

Does your enquiry relate to personal data processed in our systems by a Store-IT client? If so, you should first contact the relevant client as the data controller.

How long do we retain personal data?

We do not retain personal data for longer than is necessary for the purpose for which it was collected, unless a legal obligation or another legitimate purpose requires a longer retention period. As a general principle, we apply the retention periods set out below, among others:

Processing	Retention period
Information request	Until the request has been dealt with and for as long as necessary thereafter
Quotation or demo request	For as long as necessary for the request and its follow-up
Data for the performance of the contract	For the duration of the contract and thereafter for as long as necessary or required by law
Invoice and financial data	For the duration of the statutory retention period
Security and log data	In accordance with internal security and logging guidelines
Cookie and consent data	For as long as necessary to demonstrate consent and preferences
Privacy requests	For as long as necessary to demonstrate the request and its handling

Where legal or contractual obligations require a longer retention period, we will adhere to that period. Once the retention period has expired, personal data will be deleted or, where deletion is not possible, otherwise protected in such a way that it is no longer used for other purposes.

Security of personal data

Store-IT takes the protection of personal data seriously. We implement appropriate technical and organisational measures to protect personal data against, among other things:

• Loss;
• Unauthorised access;
• Unauthorised alteration;
• Unauthorised disclosure;
• Misuse;
• Destruction.

The measures are tailored to the risks associated with the processing and are periodically reviewed and adjusted where necessary. Store-IT has an information security management system (ISMS) and implements appropriate information security measures. Where relevant, these measures form part of our ISO/IEC 27001:2022-based information security management system.

For security reasons, we do not publish detailed technical security measures in this privacy statement.

If you believe your personal data is not adequately protected or if you suspect misuse, please contact us at support@store-it.eu.

Your privacy rights

Depending on the circumstances and the conditions set out in the GDPR, you have the following rights:

• The right to access your personal data;
• The right to have inaccurate personal data rectified;
• The right to erasure of your personal data;
• The right to restrict processing;
• The right to object to certain processing activities;
• The right to data portability;
• The right to withdraw consent previously given;
• The right not to be subject to a decision based solely on automated processing where the GDPR provides for this right.

Whether a right applies may depend on the specific processing and the applicable legal conditions.

Submitting a request

Would you like to exercise your data protection rights? If so, please send your request to: support@store-it.eu

We will first attempt to verify that the request was made by the individual concerned. Where there are reasonable grounds to do so, we may ask for additional information to verify your identity. We will not ask for more information than is necessary for this verification.

In principle, we will respond within one month of receiving your request. Where a request is complex or where multiple requests have been submitted, this time limit may, where permitted by law, be extended by up to two months. In such cases, we will inform you of the extension and the reason for it within one month of receiving the request.

In principle, we do not charge a fee for exercising your data protection rights. In the case of manifestly unfounded or excessive requests, the statutory exceptions may apply.

Complaints

Do you have a complaint about the way we handle your personal data? If so, please contact us first at: support@store-it.eu

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the supervisory authority for the protection of personal data in the Netherlands.

Changes to this privacy statement

We may amend this privacy statement where changes to our services, the processing of personal data, legislation and regulations, or our security measures make this necessary. The most recent version is published on our website. In the event of significant changes, we will clearly state when the privacy statement was amended.

The date on which this privacy statement was last amended is shown at the top of this document.