General

This is the privacy statement of Andsome Amsterdam (KvK number: 89775058), located at Tweede Kostverlorendekade 135 H, 1053 SE Amsterdam.

Andsome Amsterdam (referred to as "Andsome," "we," or "us") is a trade name of By Jelle B.V., which is also located at Tweede Kostverlorendekade 135 H, 1053 SE Amsterdam.

Andsome is a company that operates a salon and an online webshop. Andsome determines the purposes and methods for which personal data are used within its business activities. Andsome processes personal data about you through its salon, website, webshop, promotions, and other services. For the processing of all personal data obtained through these activities and channels, Andsome is considered the data controller in accordance with the Algemene Verordening Gegevensbescherming (AVG).

Andsome is committed to protecting your personal data. This privacy statement describes the ways and purposes for which your personal data are processed. For questions regarding privacy matters, please contact Andsome at info@andsome.nl.

This privacy statement pertains to the processing of personal data of:
- Customers of Andsome.
- Potential customers (prospects) of Andsome.
- Suppliers of Andsome.
- Job applicants.
- All other individuals with whom Andsome maintains contact or who make use of Andsome’s services/products.

What personal data do we process?

Below is a list of personal data processed by Andsome.

Personal data of clients/customers:
- Personal data obtained from (contact persons of) prospects, such as first and last name, email address(es), phone number(s), and job title.
- Contact details and other personal information necessary for executing an order/delivering products, including first and last name, gender, address, postal code, city of residence, date of birth, place of birth, phone number(s), email address(es), IBAN/bank account number(s), login details, and IP address(es).
- Contact details and other personal information you actively provide, such as through correspondence/phone conversations, creating a profile on our website, and filling out contact or other web forms.
- Data on activities on our website and your browsing behavior.
- Contact details provided during introductory meetings, events, etc.
- Photos and/or videos taken in the salon.

Personal data of prospects:
- Personal data obtained from (contact persons of) prospects, such as first and last name, email address(es), phone number(s), and job title.
- Information on topics in which a (contact person of a) prospect may have a personal interest, issues they are engaged with, or matters that are otherwise important to them.

Personal data of suppliers:
- Contact details and other personal information necessary for fulfilling an order, including name, address, postal code, city of residence, phone number(s), email addresses, bank account numbers, Chamber of Commerce (KvK) numbers, and VAT numbers.
- Personal data of contact persons from suppliers (as provided by the contact persons themselves), such as name, email address(es), and phone number(s).

Personal data of job applicants:
- All personal data provided by an applicant or a recruitment agency to By Jelle, such as first and last name, gender, address, postal code, city of residence, phone number(s), email address(es), CV, and employment history.

Personal data obtained from other sources:
- Personal data obtained through or generated by our website, electronic newsletters, commercial emails, or related technologies.
- Personal data available on business social media platforms like LinkedIn and Instagram.
- Personal data available on public (business) websites.

Andsome does not intend to collect data from individuals under the age of 16, unless they have permission from a parent or guardian. However, Andsome cannot verify whether a customer or (website) visitor is over 16 years old. We therefore recommend that parents be involved in their children’s (online) activities to prevent the collection of data on minors without parental consent. If you believe we have collected personal information about a minor without permission, please contact us at info@andsome.nl, and we will delete this information.

For what purposes do we process personal data?

Andsome processes personal data for various purposes, as outlined below: - To fulfill an agreement with you or a third party related to the provision/receipt of our services and/or products. This includes delivering goods and services to you and processing and handling your payment.
- To comply with legal obligations, such as tax obligations.
- To maintain contact with you. Your contact details are kept in our customer system and may be used for sending newsletters, updates on our services and products, invitations to events, and providing information you have requested from us.
- To improve our product and service information and conduct targeted marketing activities. We strive to provide you with information that is relevant to you. To make this possible, we combine and analyze the personal data available to us. Based on this analysis, we determine what information and channels are relevant and which moments are best suited to provide information or establish contact. We do not process special categories of personal data for marketing activities.
- Recruitment & Selection.

On what legal grounds do we process personal data?

Andsome processes personal data based on one of the following legal grounds:
- Consent: If we have requested your consent to process your personal data and you have granted this consent, you also have the right to withdraw it at any time. You can withdraw your consent by sending an email to info@andsome.nl. Withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.
- In connection with entering and/or performing an agreement with you: If you intend to engage us or have engaged us to provide services or goods, we process the personal data necessary to carry out the assignment/agreement.
- Compliance with a legal obligation: By law, Andsome may be required to provide certain personal data, for example to the Tax Authority or other governmental bodies.
- Legitimate interest: We may also process personal data if Andsome or a third party has a legitimate interest, the processing is necessary to serve that interest, and the interest in processing outweighs yours, or at least does not disproportionately infringe upon your privacy. In these cases, we have conducted a balancing of interests in advance. For example, we use your contact information to send newsletters and promotional materials.

Third Parties Engaged by Us
Andsome may engage service providers (processors) to process your personal data exclusively on our behalf, such as a hosting provider. We sign a data processing agreement with each contractor as required by Article 28 of the AVG.

Sharing Personal Data with Third Parties
In the course of its services and in line with the above processing purposes, Andsome may need to share your personal data with third parties. Personal data may be shared with third parties in the following cases: when executing an assignment/agreement with you, or if Andsome is legally obligated to provide certain personal data to supervisory authorities or other public authorities, including the Tax Authority.

This Privacy Statement does not cover information processed by third parties acting as data controllers for their purposes (including via their services, applications, websites, or advertisements) as part of or associated with the Services. This includes but is not limited to, Pin Direct (which processes payments on your behalf), Zenoti (which schedules appointments on your behalf), and social media pages. The collection or receipt of your information by such third parties is subject to their privacy policies and practices, for which we are not responsible or liable

Cookie Policy

Andsome uses cookies on its website. A cookie is a small text file stored on your computer, tablet, or smartphone upon your first visit to our website. Cookies are also intended to understand how Andsome’s website performs, how visitors interact with it, to deliver advertisements to visitors, and to provide an enhanced user experience.

Andsome uses essential cookies. These cookies are necessary for the technical operation of the website, enabling basic functions such as page navigation and access to secure areas. Without these cookies, the website cannot function properly. No prior consent is required for the use of essential cookies.

Andsome also uses analytical cookies, which may include Google Analytics. These cookies give us insight into how our website is used, allowing us to optimize the user experience. Google Analytics records visitor, session, and campaign data and tracks site usage for website analytics reports. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. It also logs how visitors use the website and generates a report on website performance. Data collected include the number of visitors, their source, and the pages they visit anonymously. Andsome requests your prior consent to use analytical cookies if required.

In addition, Andsome uses marketing/tracking cookies. These cookies are used to create user profiles, display advertisements, or track users on our website or across other websites for similar marketing purposes. Andsome seeks your prior consent for the use of marketing/tracking cookies.

Finally, with your consent, we place cookies from social media partners for social media and advertising purposes.

You can always view the cookies currently used by Andsome in the notification at the bottom of your screen upon first visiting our website. Andsome also has a cookie policy, accessible at https://andsome.nl/cookies/. You can change or withdraw your cookie consent at any time. To adjust or remove your cookie preferences, you can do so via the browser settings on your smartphone, tablet, or computer.

Retention Periods

Andsome does not retain personal data longer than necessary to fulfill assignments/agreements unless Andsome is legally required to retain data for a longer period. In that case, the legal retention periods apply.

We retain the personal data of parties with whom we have entered into an agreement for seven years.

For personal data of (contacts of) customers, Andsome retains data for up to two years after the end of the customer relationship, following the last contact with the (contact of) customer.

For personal data of (contacts of) prospective customers/prospects, Andsome retains data for up to two years after the last contact with the (contact of) potential customer/prospect.

For personal data of (contacts of) suppliers, Andsome retains the data for as long as the agreement with the supplier exists and the relevant contact remains in that position with the supplier, up to two years after the relationship ends.

For job applicants, personal data is deleted four weeks after the recruitment process ends unless Andsome has requested the applicant's permission to retain the data for a longer period. In that case, Andsome retains the data for up to one year following the obtained consent.

Security

Andsome has implemented appropriate technical and organizational measures to ensure a security level appropriate to the risks, considering the state of the technology, implementation costs, the nature, scope, context, processing purposes, and the varying risks to individuals' rights and freedoms.

Andsome does not guarantee that the measures taken are effective under all circumstances.

Rights of Data Subjects

Every individual has certain rights regarding their personal data under the law. You have the right to access (Article 15 AVG), rectify (Article 16 AVG), and delete (Article 17 AVG) your personal data. Sometimes, you may also have the right to restrict processing (Article 18 AVG) and the right to data portability (Article 20 AVG).

If Andsome is the data controller regarding your personal data processing, you may exercise the above rights by emailing info@andsome.nl.

If Andsome is a data processor for your personal data, Andsome will forward your request to exercise the above rights without undue delay to the relevant data controller.

If your data processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information about your rights can be found on the Dutch Data Protection Authority website: https://autoriteitpersoonsgegevens.nl

Andsome does not use automated decision-making, including profiling, which has legal consequences or significantly affects you. These are decisions made by computer programs or systems without human involvement (e.g., a staff member from Andsome).

For questions about the above, please contact us at 020 776 0776 or via info@andsome.nl.

Complaints Procedure

If you have questions or complaints about how we handle your personal data, you can contact us by emailing info@andsome.nl or calling 020 776 0776. We will try to assist you in finding a solution. If this is unsuccessful, you may file a complaint with the Dutch Data Protection Authority.

Updating the Privacy Statement

Andsome may update this privacy statement from time to time. Changes or updates may be made to reflect technological advancements or legal and regulatory changes. If Andsome modifies its privacy statement, an updated version will be published on its website. Andsome will also notify you of changes by updating the date of “Last modified on” at the bottom of this page. We recommend you regularly check our website for the latest version of this privacy statement.

Last modified in November 2024