Datenschutzerklärung

Introduction

Udoc Publishing Systems respects the privacy of its customers, suppliers, partners and employees. We have therefore formulated and implemented a policy on complete transparency regarding the processing of personal data, its purpose(s) and the possibilities to exercise your legal rights in the best possible way. 


This privacy policy is related to processing by Udoc Publishing Systems B.V. and its subsidiaries, in particular in relation to its e-commerce activities whereby Udoc provides you with the products you have requested or purchased on one or more of Udoc’s websites and/or webshops. These websites and webshops include:

If you require any additional information about the protection of personal data, please visit https://autoriteitpersoonsgegevens.nl/en

Definitions

  1. Party responsible for processing personal data: Udoc Publishing Systems B.V., trading as Udoc Publishing Systems B.V., Car Manuals and Autoboekjes.nl, and its subsidiaries. Udoc Publishing Systems B.V. is registered at Vlamingstraat 4, 2712BZ Zoetermeer, Netherlands, with registration number 60207639 (hereinafter: the “Controller”).
  2. Data Protection Authority: Autoriteit Persoonsgegevens Netherlands
  3. Data Protection laws: 
    1. The EU GDPR 2018;
    2. The EU e-privacy directive 2002 (soon to be replaced by the EU e-privacy regulation);
    3. The Dutch Implementation Act GDPR 2018 and Telecommunications Law 1998.

 Collection of data

  1. Your personal data will be collected by the Controller and its data processors. 
  2. Personal data means any information relating to an identified or identifiable natural person (‘data subject’).
  3. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Type

Legal Basis

Purpose

Customer Identification Information

Consent

Customer management,, direct marketing, administration

Supplier or partner Identification Information

Consent

Supplier management,, administration

Customer Financial Information

Consent

Customer management, administration


How we collect, store or otherwise process your data

  • Through collecting your information on our websites, which are hosted through our third party Processor Shopify (see below for details)
  • By selling products through our webshops
  • By providing the services as part of our contract with customers
  • By emailing with you about your requests, questions and orders
  • By using carrying out business administration, for instance, invoicing and sending receipts


Storage and protection of data

Your data is protected by the Controller and its processors in pursuance to all legal requirements set by the relevant data processing laws. The Controller has taken technical and organisational security measures to protect your data and requires its data processors to meet the same requirements. The Controller has signed processing agreements with its processors to ensure an adequate level of data protection.


Third party Processors

Google Workspace

Function

Email provider, Document storage service, Appointment scheduling tool

Business process

Email, Digital storage of documents, Administration

Data categories

Identification data

Data subjects

Customers

Security measures

Physical security such as access controls, clean desk policy and CCTV; Access controls and prevention of unauthorised access on the basis of roles and strong authentication methods; All data is encrypted at rest and access is only permitted via encrypted channels (e.g. SSL); Data is minimised and regularly deleted according to national retention periods.

 

Shopify

Function

Webshop provider

Business process

Delivery of goods

Data categories

Identification data, financial data

Data subjects

Customers

Security measures

Physical security such as access controls, clean desk policy and CCTV; Access controls and prevention of unauthorised access on the basis of roles and strong authentication methods; All data is encrypted at rest and access is only permitted via encrypted channels (e.g. SSL); Data is minimised and regularly deleted according to national retention periods.


Your rights regarding information

  1. Pursuant to Article 13 paragraph 2 sub b GDPR each data subject has the right to information on and access to, and rectification, erasure and restriction of processing of his personal data, as well as the right to object to the processing and the right to data portability.
  2. You can exercise these rights by contacting us at the following email address: info@udoc.com and put “GDPR request” in the subject line of your email.
  3. Each request must be accompanied by a copy of a valid ID, on which you put your signature and state the address where we can contact you.
  4. Within one month of the submitted request, you will receive an answer from us. We will not charge you for submitting your request unless the request is manifestly unfounded or otherwise unreasonable in its nature.
  5. Depending on the complexity and the number of the requests this period may be extended to two months. 

Marketing

  1. You may receive commercial offers from the Udoc. If you do not wish to receive them (anymore), please send us an email to the following address: info@udoc.com.
  2. Your personal data will not be used by our partners for commercial purposes.
  3. If you encounter any personal data from other data subjects while visiting our website, you are to refrain from collection, any unauthorized use or any other act that constitutes an infringement of the privacy of the data subject(s) in question. The collector is not responsible in these circumstances.

Data retention

The collected data are used and retained for the duration determined by law. You may, at any time, request your data to be deleted from any Udoc account, system or other data processing medium in accordance with the process described above.

Applicable law

These conditions are governed by Dutch and European law. The court in the district where the controller has its place of business has the sole jurisdiction if any dispute regarding these conditions may arise, save when a legal exception applies.  

Contact

For questions about this privacy policy, product information or information about the website itself, please contact: privacy@carmanuals.com.