Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible when creating them.
What is Personal Data?
Personal data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not personal data. This includes, for example, the number of users of a website.
Responsible for data processing
Responsible for data processing in accordance with the provisions of the GDPR and UAVG is:
The Palmtree Lifestyle
Amsterdam, the Netherlands
General information on data processing
In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the Netherlands and the EEA. Where we transfer data outside the Netherlands or EEA, we have highlighted this accordingly below.
All personal data that we obtain from you via the website will only be processed for the purposes described in more detail below. This is done within the framework of the respective legal regulations mentioned or only with your consent. In particular, Art. 6 GDPR specifies when data processing is permitted. The Palmtree Lifestyle collects personal data if:
you have given your consent (Art. 6 para. 1 lit. a GDPR),
the data is necessary for the fulfilment of a contract / pre-contractual measures (Art. 6 para. 1 lit. b GDPR),
the data is necessary for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c GDPR) or
the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden (Art. 6 para. 1 lit. f GDPR).
To provide our website, we use the services of the Israel based Company Wix.com Ltd who process the below-mentioned data and all data to be processed in connection with the operation of our website on our behalf. The legal basis for the data processing is our legitimate interest in providing our website.
b) Collection of access data and log files
We also collect data on every access to our website. The access data includes the name of the website
accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.
c) Contacting us
If you contact us, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details (phone number and e-mail address) -if provided by you- and your message. The legal basis of the data processing is our obligation to fulfil the contract and/or to fulfill our pre-contractual obligations and/or our legitimate interest in processing your enquiry.
We offer visitors to our website the possibility to contact us via the messaging service WhatsApp of Meta Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you contact us via WhatsApp on the occasion of a specific transaction, we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with the provision of a contractual or pre-contractual measure to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data via WhatsApp in order to be able to assign your request to a specific process.
e) When you use our services
We process various data within the framework of the provision of our services and for the initiation and processing of the existing contractual relationship between you and us. If you have commissioned us to provide a service, we process your data (if provided: Name, contact details (email address and telephone number), and all information that is necessary in the context of fulfilling the services,
exclusively for the purpose of processing and handling the contractual relationship. Accordingly, the data is processed on the basis of fulfilling our contractual obligations as well as to fulfil our legal obligations.
f) Administration, financial accounting, service and membership organization, contact management
We process data within the scope of administrative tasks as well as organization of our business, financial accounting, service and membership organization and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The purpose and our interest in the processing lies in the administration, financial accounting, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information mentioned in these processing activities. In this context, we disclose or transmit data to the tax authorities, consultants such as tax advisors or
auditors as well as other fee offices and payment service providers. Accordingly, the data is processed on the basis of fulfilling our contractual obligations as well as to fulfil our legal obligations.
h) Newsletter registration on our website
On our website there is the possibility to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us, i.e., at least your e-mail address. The registration is carried out by means of the so-called double opt-in procedure.
Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.
Transfer of personal data
We will not disclose or otherwise distribute your personal data to third parties unless this:
is necessary for the performance of our services,
you have consented to the disclosure,
or the disclosure of data is permitted by relevant legal provisions.
However, we are entitled to outsource the processing of your personal data in whole or in part to external service providers acting as processors within the framework of the UAVG and GDPR. External service providers support us, for example, in the technical operation of the service and membership organization and may include but are not limited to Google Meets operated by the US provider Google, Inc. WhatsApp, Facetime operated by the US provider Apple Inc, and support of the website, data management, the provision and performance of services, marketing, as well as the implementation and fulfilment of reporting obligations.
The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the UAVG and the GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us We may also disclose Personal Data to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfil our legitimate interests.
Automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR does not take place at The Palmtree Lifestyle.
Your data subject rights
These rights are standardized in the UAVG and the GDPR. These include:
the right to information (Art. 15 GDPR),
the right to rectification (Article 16 GDPR),
the right to erasure (Article 17 GDPR),
the right to restriction of data processing (Article 18 GDPR),
the right to data portability (Article 20 GDPR),
the right to object to data processing (Article 21 GDPR),
the right to revoke any consent you have given (Art. 7 (3) GDPR), and
the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).
Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights as a data subject.
We encourage you to get in touch if you have any concerns with how we collect or use your personal data. You do however also have the right to lodge a complaint directly with the Autoriteit Persoonsgegevens, their contact details are as follows: Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ DEN HAAG, Telephone number: (+31) - (0)70-888 85 00, Fax: (+31) - (0)70 - 888 85 01, www.autoriteitpersoonsgegevens.nl
State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorized access from outside. In addition, technical and organizational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
We are present in 'social media'; (currently, Facebook, LinkedIn, Instagram) in order to communicate with our customers, interested parties and users registered there and to be able to inform them about our offers. We would like to point out that you use social media platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating). We, as the provider of our Social Media Profile, do not collect and process any data from your use of our social media platforms and beyond this. The processing of users' personal data is based on our legitimate interests in providing users with effective information and communicating with users.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests. Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore.
Links to other providers
Our website also contains - clearly recognizable - links to the websites of other companies. Insofar as here are links to websites of other providers, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages. The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements of the law become known.
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your personal information on our part, or any other questions or comments, you can contact us.
Who should I contact for more information?
The Palmtree Lifestyle
Amsterdam, the Netherlands