Tyres in Stock Privacy Statement

Through the online service, data are processed that are privacy-sensitive and can be traced to a natural person, i.e. personal data. TYRES IN STOCK (hereinafter referred to as TIS) attaches great importance to the careful handling of personal data. Accordingly, we process and protect personal data with the greatest possible care. TIS processes personal data in accordance with the General Data Protection Regulation (GDPR).

We comply with the requirements set out in privacy legislation when processing personal data. This means – among other things – that:

• We state clearly for which purposes we process personal data. We do so by means of this privacy statement.
• We limit our collection of personal data to only those personal data that are required for legitimate purposes.
• We ask for your express consent before processing your personal data in those cases in which your consent is required.
• We take appropriate security measures to protect your personal data and require parties that process personal data on our instruction to do the same.
• We respect your rights with regard to your personal data.

TIS is the controller for the data processing. This privacy statement sets out which personal data we collect and use, and for what purpose. We recommend that you read this carefully.

Use of personal data

When you use our online service, we obtain certain data from you, which may include personal data. We retain and use the personal data that we receive directly from you, in connection with the service requested by you or of which it is clear at the time of receipt that these data are provided to us for the purpose of processing. Personal data can also be processed to comply with a statutory obligation or a need for due care. We use the following data for the purposes stated in this privacy statement:

• name and address details;
• telephone number;
• billing address and invoices;
• delivery address;
• email address;
• payment details;
• nationality;
• date of birth;
• IP address;
• company details;
• overview of orders/previous purchases;
• customer and user number;
• login details;
• registration number in the Trade Register;
• credit/tax data;
• savings/loyalty data;
• other personal data that you actively provide, for example by creating a profile on this website, in correspondence and by telephone.

Registration

Certain parts of our online service require you to register first. Following registration, we store the personal data provided by you, via a user name assigned by us. We store those data so that you do not have to re-enter them every time and so we can contact you in connection with the performance of the agreement.
We will not disclose the data linked to your user name to third parties, unless doing so is necessary in connection with the performance of the agreement you conclude with us or if this is required by law. In the event of suspected fraud or misuse of our online service, we may pass on personal data to the competent authorities.

Platform for access

Via our platform, you can obtain access to a management environment where you have access to your data and can request changes.

Contact details

In addition to the information provided on our website, we may also inform you of our products and services and contact you:

• by post;
• by email;
• by telephone.

Contact requests

Via our online service, we offer you the option to ask questions by means of a contact form, on which you are asked to fill in various data to enable us to answer your question. You decide yourself which data you provide to us in this connection. The data you send to us will be retained for as long as needed, according to the nature of the form or the contents of your email, for the purpose of answering and dealing with it in full.

Newsletter

We also offer you a newsletter with which we want to inform interested parties about our products and/or services. Every newsletter contains a link with which you can unsubscribe. Your email address will only be added to the list of subscribers with your express consent.

Sharing of personal data with third parties (processors)

TIS shares your personal data with various third parties if this is required for the performance of the agreement and in order to – where applicable – comply with statutory obligations. We enter into a processing agreement or make mutual agreements with the companies that process your data on our instruction, to ensure that your data are treated with the same level of security and confidentiality. TIS remains responsible for the processing.

Cookies

Our online service uses cookies. Third parties engaged by us place cookies on your device as well.

When you visit our online service for the first time, you will be shown a notice in which we explain to you why we use cookies. If you continue to use our online service, we will view this as consent for this use of cookies.

You are free to disable cookies in your browser. Please note that doing so could mean that our website will no longer function optimally.

We have entered into agreements with the third parties that place cookies about the use of the cookies and applications. However, we do not have full control over what the parties offering these applications do with the cookies when they read these out. For more information about these applications and what they do with cookies, please refer to the privacy statements of these parties (note: these may change from time to time).

Google Analytics

We use Google Analytics to keep records of how visitors use our online service. We have concluded a processing agreement with Google to make agreements on how our data are handled. Also, we did not permit Google to use the Analytics information obtained for other Google services. Lastly, we arranged for the IP addresses to be anonymised.

Hotjar

TIS uses Hotjar to analyse how our online platform is used. Hotjar only collects data on the general use of our online platform. For instance, via Hotjar, TIS collects heatmaps of pages with information on the buttons that are clicked and on how far visitors scroll down.

In order to collect data in Hotjar, we place JavaScript tracking code on our website that sends information to Hotjar servers in Ireland. Read Hotjar's Privacy Policy for more information. Hotjar Terms & Conditions of Use (https://www.hotjar.com/terms) and Privacy Policy (https://www.hotjar.com/privacy/)

Security

We take security measures to limit the misuse of and unauthorised access to personal data. In particular, we take the following measures:

• Access to personal data is restricted by means of a user name and password.
• After receipt, the data are stored in a separate, protected system.
• We put physical measures in place to protect access to the systems in which personal data are stored.
• We make use of secure connections (SSL) that protect all information exchanged between you and our website.
• HTTPS website security.
• Data are sent and stored in encrypted form.

Retention periods

The personal data described above are stored for as long as is necessary to provide the requested services to you or until, with a view to the purpose for which they are collected or subsequently processed, they are no longer adequate, no longer relevant or excessive. Thereafter, we store data for a maximum of five years for statistical or administrative purposes. The data are then erased, unless there is a statutory obligation requiring longer retention (such as the mandatory seven-year retention period for tax purposes for payment data).

Third-party websites

This privacy statement does not apply to third-party websites that are connected to our online service through links. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We therefore recommend that you read the privacy statements relating to these websites before using them.

Amendments to this privacy statement

We reserve the right to amend this privacy statement. We recommend that you check this privacy statement regularly, to ensure that you are aware of these changes.

Access to and requests concerning your data

If you have any questions about our privacy policy or about access to and amendment (or removal) of your personal data, you may contact us at any time using the contact details below.

You can send us a request to access, amend or remove those data. You can also submit a request to ask for a data export for data that we use with your consent, or indicate, giving reasons, that you wish to restrict the processing of personal data by us.

In the interests of preventing misuse and fraud, we may ask that you provide proper identification. If you wish to inspect personal data linked to a cookie, please make sure to include a copy of the relevant cookie. You will find the cookie in your browser settings. If any data are incorrect, you can ask us to amend your data or have it deleted. We will not act on requests if your request proves to be impossible or entails disproportionate effort.

You can address your question or request to:

Tyres in Stock Europe B.V.

Antonie van Leeuwenhoekstraat 9
3261 LT Oud-Beijerland

+31 (0)78 - 68 233 33
Fax: +31 (0) 78 - 68 164 16
E-mail: info@tyresinstock.com

info@tyresinstock.com

Dutch Data Protection Authority

Naturally, we are happy to help you if you have any complaints about the processing of your personal data. Pursuant to privacy legislation, you also have the right to submit a complaint concerning the processing of your personal data by our company to the Dutch Data Protection Authority. You may contact the Dutch Data Protection Authority for this purpose.

Dutch Data Protection Authority
Attn: the complaints coordinator
P.O. Box 93374
2509 AJ THE HAGUE