i value our relationship

I love that you are interested in my work • I understand your need for privacy • I honor your trust

privacy policy

0.
introduction

This Privacy Policy describes what information about you is collected on hermienvos.com, why, and how this information is shared with third parties. It also explains how your data is stored, how it is protected against misuse, and what rights you have with regards to the personal data you provide us with.

From time to time, this privacy policy will be updated. For instance, in order to comply with new privacy laws. If you receive my newsletter or have an account on hermienvos.com, I will notify you of any significant changes via email, but you’re welcome to come back and check it whenever you wish.

1.
about hermien vos and hermienvos.com

I am a one-woman business. I create hand-drawn illustrations. I use my website hermienvos.com as a medium to showcase, promote and sell original illustrations and limited prints. As well as share what I learn on my journey.

In order for hermienvos.com to function optimally, the website and third-parties I use to help me run and improve my website and business collect data. I am a big believer in transparency, so I think it is good that you know what data is collected and how it is being used and what choices you have in that matter.

I care about my customers. I care about our relationship. And as such, I care about your privacy. It is my intention to have a website that helps me run my business as effectively as possible AND at the same time values your privacy as much as possible. I only process data I need for (improving) the services I offer on my website. I handle the information I have collected about you and your use of my services with the utmost care and respect. And, you can rest assured that I will never sell your data or make it available to third parties for commercial use.

If you have any questions about this privacy policy, or want to make a privacy-related request,  you can send an email to privacy (at) hermienvos (dot) com

Hermien Vos | +31 6 46 18 28 73
Alfred Smithlaan 11 | 5302 VE Zaltbommel | Netherlands
VAT nº NL NL003641115B33  |  CoC nº 82094403

2.
personal data

I receive personal data from you, when you

    • comment on my blog or review a product  -  your name, your gravatar.
    • contact me via a contact form, email, or phone - your name, email address, phone number, the reason for your inquiry.
    • buy a product or service in my webshop -  your name, billing/delivery address, email address, telephone number and payment information
    • create an account - your name, billing / delivery address, your orders and receipts, email address, telephone number, your payment information, an encrypted record of your login password. 
    • commission an artwork - your name, billing / delivery address, email address, telephone number, your payment information, and the information I need to make the artwork.
    • sign up for my newsletter or enter a prize draw - your name, your email address.
    • engage with me on social media - your social media account name, any other information you share freely and publicly.

3.
purpose

I process your personal data, alone or with the help of third parties, in compliance with GDPR. for the following reasons:

Comments
Generally, when you leave a comment or review on my website, this data will be on my website for as long as hermienvos.com exists, unless the blog post or product are deleted or when you request the deletion of your personal data. 

It may be that I have a legitimate interest to leave these comments on the website, especially when I or someone else has reacted to your comment. If that turns out to be the case, I will do find a win/win solution, meaning that I delete your personal data and keep the comment or review.

Contact
When you contact me via email, the contact form on my website, phone or social media, your data is collected and stored so that I can respond effectively to your inquiry. I will keep your data, the reason for your inquiry, as well as your response to my response for a maximum of two years after our last contact, depending on the nature of the interaction.

Purchases
When you buy a product or service in my web shop, I need your data to effectively process your order, to send you an invoice and to send you the item you purchased. Under Dutch law, I am required to store invoices for a period of 7 years.

Account
You are not required to create an account in order to purchase a product or service on my website, but if you do so, I store your information for as long as you keep your account. I also keep an encrypted record of your login password, so you can access your account.

Commissions
When I make a commissioned artwork for you, I will use your personal data to process your payment, to send you an invoice and the item you commissioned. Under Dutch law, I am required to store invoices for a period of 7 years.

As for the reference materials used to create the artwork, say a picture, I will return these to you together with the artwork, or in the case of digital photos, I will delete these after I’ve finished working on the project. If I wish to use them at a later date to market my work, I only keep them (or a copy of them) with your explicit permission for an agreed upon timeframe.

Newsletter
I periodically send a newsletter via email. You can subscribe to my newsletter via clearly designated forms or check boxes on hermienvos.com. I may also ask in you to subscribe to my newsletter in an email I send you in response to an email you sent me, or if you visit an exhibition or fair. I will only send you a newsletter after you’ve explicitly indicated you want to receive it. I store your personal data, so I can address you personally and send the newsletter via email.

You can unsubscribe at any time, by clicking the unsubscribe button at the bottom of the newsletter. Your data will then be deleted from the subscriber list. 

Legitimate interest
Legitimate interest applies whenever an organization uses personal data in a way that a data subject, a customer, you in this case, would expect. 

For example, I have a legitimate interest to protect my legal position and secure evidence, if a situation asks for it. If that is the case, I will only process the data needed to safeguard my legitimate interest and take necessary action.

4.
receivers

I share your personal data with third parties, which include our processors:

    • Easyhosting - web and mail hosting provider
    • Moosend - the online service I use to send newsletters
    • WooCommerce - the online service I use to sell products and services
    • Mollie - the online service I use to process web shop payments
    • Delivery Services 

All these receivers are GDPR compliant, which means they have taken appropriate organizational and technical measures to protect your personal data against loss, destruction, damage and against unauthorized or unlawful processing. Personal data are processed in the European Economic Area where possible. 

5.
protection

I have taken appropriate organizational and technical measures to protect your personal data against loss, destruction, damage and against unauthorized or unlawful processing.

I make no physical copies of your personal data. Your data are only accessible via and managed in the systems and software mentioned in this policy. These systems and software are protected by a password and if possible by two-step verification during login. Two-step verification is a secured login procedure: the software automatically generates a code which it sends to me on another device. I then have to enter that code to get access to the data.

The number of devices that has access to your data is limited to the necessary devices. These devices are protected by a password and / or face ID.

Your visit to hermienvos.com is secured by an SSL-certificate. This means that your connection to my site is private. You can recognize this security measure by the lock icon placed before the URL.

6.
your rights

The main goal of the GDPR is to protect the personal data of all EU citizens. It clearly defines what your individual rights are regarding your data. You have the following rights:

The right to be informed
A key principle of the GDPR is transparency. This means that it should be you that personal data are collected, used, consulted or otherwise processed, and to what extent the they are, or will be, processed. That is the whole basis for this privacy policy.

The right of access
You have the right to request a copy of any of your personal data which are being used.

The right to rectification
If your personal data is inaccurate, you have the right to have the data rectified or completed.

The right to erasure
This is also known as the right to be forgotten. In certain cases, you have the right to have your data erased. You can find the form here.

The right to withdraw consent
If you have consented to us using your data for specific purposes, then you can at all times withdraw your consent. Withdrawing consent does in no way undo the legitimacy of processing your data before the withdrawal.

The right to object
You have the right to object to certain types of processing of your personal data. If you object to the use of your personal data for the purpose of direct marketing, then I will not process your data for that purpose. 

The right to restricted processing
You have the right to request restricted processing of your personal data, for instance when 

  • I no longer need your personal data, 
  • your data are inaccurate, 
  • the data processing is unlawful, 
  • or when awaiting the decision of an objection to data processing.

The right to lodge a complaint
If you have a complaint about how I process your personal data. For instance, if your request takes more than four weeks to process or you are not satisfied with how I handled your request, you can lodge a complaint with the Dutch data protection commission, the Autoriteit Persoonsgegevens at www.autoriteitpersoonsgegevens.nl.

7.
obligations

As said before, I will not share your information without your consent. There is one exception: I will share your information when I am obligated by law, but only insofar is needed.

questions?

If you have any questions about this privacy policy, or want to make a privacy-related request,  you can send an email to privacy (at) hermienvos (dot) com

Zaltbommel, The Netherlands, April 2021