GDPR & your privacy rights

01Our role: controller & processor

For the data of your own account and website usage, Tradavia acts as the data controller. For the sales data you process via your connected bol.com account within the platform, Tradavia acts as a processor acting on your instructions.

Please note — this is a draft version as a starting point. Have the final text reviewed by a lawyer before publication.

02Your rights under the GDPR

You have the following rights regarding your personal data:

• Right of access — request which data we process about you.
• Right to rectification — have incorrect or incomplete data corrected.
• Right to erasure — have your data deleted (“right to be forgotten”).
• Right to restriction — have processing temporarily suspended.
• Right to data portability — receive your data in a common format or have it transferred.
• Right to object — object to processing based on legitimate interest.

03How to exercise your rights

You can submit a request via info@tradavia.com. We respond within the statutory period of one month. To protect your identity, we may ask you to verify your request. There are generally no costs associated with a request.

Do you disagree with how we handle your data? Then you have the right to file a complaint with the Dutch Data Protection Authority.

04Data Processing Agreement (DPA)

When Tradavia processes personal data on your behalf as a processor, we record the agreements in a data processing agreement. This includes, among other things, the subject and duration of the processing, the categories of data subjects, and the security measures. A copy is available on request via info@tradavia.com.

05Sub-processors

We engage sub-processors to deliver our service, such as hosting and infrastructure partners. With each sub-processor we enter into agreements that provide at least the same level of protection as these terms. An up-to-date overview of sub-processors is available on request.

06International transfers

We prefer to process your data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards, such as the European Commission's standard contractual clauses.

07Data breaches

In the event of a data breach posing a risk to your rights and freedoms, we report this in accordance with the GDPR within 72 hours to the supervisory authority and, where required, to you. We document every incident and take measures to prevent recurrence.

08Contact

For all privacy and GDPR-related questions, you can reach us via info@tradavia.com. We're happy to help.