Privacy Statement

When you visit our website, request information via our website, interact with us by phone or social media, or perform some other service requests with us, then we record personal data of you. We are careful with the processing and protection of your personal data. We respect and uphold the laws and regulations in the field of the protection of personal data, such as the General Data Protection Regulation (GDPR). In this privacy statement you read how we deal with your personal data.

This statement applies only to the platforms that are owned by the UnForUs, and we are not responsible for the privacy practices of other sites and (online) resources available on our platforms. If you have any questions about this privacy policy or have a complaint about the way in which we deal with your personal data you can contact Info@unforus.com

Who is UnForUs?

UnForUs is a sustainable fashion retail company. It is a global D2C upcycling brand making denim completely circular, sustainable and scalable. UnForUs is the controller and responsible for your personal data collected through the www.unforus.com website.

What is personal data and what is meant by processing of personal data?

Personal data is any information about an identified or identifiable natural person. Each piece of information with which a person can be identified, directly or indirectly, is personal data. This could be for example your name, contact details and any other information that is or can be linked to you, including, for example, email address, location information, login code, health data, bank details, etc.

What falls under processing of personal data is defined as any act or set of acts related to or performed on personal data.

Who is the controller of your personal data?

UnForUs is responsible for the processing of your personal data. This means that UnForUs determines the purpose and means of the processing itself and that UnForUs is responsible for regulatory compliance, we can be reached via info@unforus.com

Why do we use your personal data?

• To fulfill your order(s);
• to process your payment;
• send information to you;
• enter into and perform agreements;
• offer a better shopping experience;
• offer deals and the latest trends;
• handle complaints and compliments;
• meet our legal responsibilities

Furthermore, we use your personal data for customer relationship management and activities to our database of customers, and other stakeholders at UnForUs, and to inform you about our activities.

Hereby we try to take into account your preferences. If you no longer wish to receive information of UnForUs, we will always offer you an opportunity to unsubscribe.

Why are we allowed to process your data?

According to the legislation, in particular the GDPR, UnForUs may only process personal data if one of the legal bases applies. UnForUs applies the following legal grounds for the processing of personal data:

1. after obtaining permission from the person whose personal data we process;
2. in the context of the formation and / or execution of an agreement;
3. to comply with the law
4. in connection with the legitimate interests of UnForUs, where UnForUs ensures that the impact on your privacy is as limited as possible.

For example, personal data are processed in the case of:

1. When we receive a request for information from you
2. When we are making you an offer or executing a contract with you
3. For legal purposes (including accounting treatment, tax obligations and obligations in connection with court orders or other mandatory laws and regulations);
4. To keep a database of customers or people we interacted with.

How long do we keep your personal data?

UnForUs does not store personal data for longer than necessary for the purposes for which the data are processed, and in any case for as long as specific regulations require.

In order to establish the suitable duration for storing personal information, we take into account factors such as the quantity, type, and sensitivity of the data, the potential risks associated with unauthorized use or disclosure of your personal data, the specific purposes for which we handle your personal information, and whether we can accomplish those purposes using alternative methods. Additionally, we consider the relevant legal, regulatory, tax, accounting, or other obligations that apply.

We are legally obligated to retain essential details about our customers, including their contact information, identity, financial data, and transaction history, for a period of six years after they stop being our customers. This requirement is for tax purposes. Occasionally, we may de-identify your personal data, removing any association with your identity, for the purpose of conducting research or generating statistical information. In such cases, we may utilize this data indefinitely without providing you with additional notice.

How do we obtain your personal data?

We obtain your personal data because you request information from us, interact with us via our website, email us, phone us or we meet in person. We also obtain information about you when you apply for a job opening at our company or show interest in the job opening by interacting with us.

What personal data is collected by UnForUs?

We collect the following information about you:

• Name(s)
• Billing/delivery address(es)
• Phone number
• Payment card details
• Email address
• IP address
• Information we receive via our contact forms, or via email correspondence
• Job application related documents such as motivation letters and curriculum vitae, your picture and information about and from references

With whom and why do we share your personal data?

We use third parties to manage our Platforms. It is possible that these third parties have access to your personal data. If that is the case, we take appropriate measures to ensure that your data is adequately secured and used exclusively for the intended purposes. Your personal data will under no circumstances be sold to third parties by UnForUs.

The passing on and receiving of personal data within UnForUs

-UnForUs exchanges your (personal) data between the various employees within the organization, insofar as this is necessary in view of the purpose of the data processing.

The passing on and receiving of data outside UnForUs

-The purpose of processing your personal data may involve sharing personal data with other organizations. Insofar as there is no explicit consent or legal obligation, this exchange of information will only take place based on the execution of the agreement between you and UnForUs or when UnForUs has a legitimate interest.

-third party service providers that we engage to provide IT systems and software, and to host our website;

-third party payment processing services (including Paypal and Stripe) to process your payment to us. UnForUs does not store your payment information. Your payment details are provided to the payment processing service you have selected, who are compliant with necessary regulations;third party service providers that we engage to deliver goods you have ordered and to manage any returns;

-if we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or

-to our professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

No commercial use

-UnForUs will not sell your personal data to third parties without your permission.

Personal data transfer outside the European Economic Area.

We ensure that our third parties do not simply process your data outside the European Union. If this is the case, we have concluded an agreement with this party in which the level of protection of the GDPR is secured. Furthermore, we will not disclose the information you provide to other parties, unless this is necessary in the context of the performance of the agreement you conclude with us or if it is legally required or permitted, if you consent , or if we have a legitimate interest in doing so.

Security

UnForUs has taken appropriate technical and organizational measures to protect the personal data against loss or against any form of unlawful processing. We have established an information security policy and taken physical, organizational and electronic measures with due observance thereof. Your data is transmitted over secure internet connections over the internet. We contractually commit third parties who are engaged in the management and development of the Platforms to respect the confidentiality of your data.

Subscribing to Newsletter

You can subscribe to the newsletter of UnForUs. Through the newsletter we keep you informed with news about our company and our relevant offers. In every newsletter that you receive, there is a link with which you can unsubscribe from receiving this newsletter.

Your rights as a data subject

Data Subjects have the following rights with regard to their personal data and its processing:

• Right of access (Art. 15 GDPR) by the data subject to obtain the information about how the personal data is processed, including:

a)the purposes of the processing;

b)the categories of personal data concerned;

c)the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries, and information on the respective safeguards in place relating to the transfer to a third country;

d)where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e)the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f)the right to lodge a complaint with a supervisory authority;

g)where the personal data are not collected from the data subject, any available information to their source;

h)the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The data subject shall also be provided a copy of the personal information in a commonly used electronic form.

• Right to rectification (Art. 16 GDPR) of inaccurate personal data, as well as, taking into account the purposes of the processing, the right to have incomplete personal data completed.
• Right to erasure (be forgotten) (Art. 17 GDPR) of personal data where:

a)the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;

b)the data subject has withdrawn consent and there are no other legal grounds for the processing;

c)the data subject exercises the right to object and there are no compelling legitimate grounds for processing;

d)the personal data have been unlawfully processed; or

e)the personal data have to be erased for compliance with a legal obligation applicable to UnForUs.

• Right to restriction of processing (Art. 18 GDPR) (i.e., data will be blocked from normal processing but not erased) where:

a)the data subject contest the accuracy of the personal data, for a period enabling us to verify the accuracy;

b)the processing is unlawful, and the data subject oppose the erasure of the personal data and requests the restriction of their use instead;

c)the personal data is no longer necessary for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;

d)the data subject has exercised the right to object pending the verification whether UnForUs has legitimate grounds that override those of the data subject.

• Right of data portability (Art. 20 GDPR). Where processing is based on consent or on a contract, the data subject shall have the right to obtain a copy of the data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance.
• Right of objection (Art. 21 GDPR) to the processing of personal data based on [ADD CUSTOMER NAME]’s legitimate interests, provided that there are no compelling legitimate grounds for the processing that would override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
• Right not to be subject to automated individual decision-making, including profiling (Art. 22 GDPR). This right does not apply when processing is based on explicit consent and is not applicable to UnForUs at this moment.

 

Right to withdraw consent.

Where processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing prior to such withdrawal.

 

View, delete and change: what are your privacy rights?

You have the right to access your personal data, the right to request correction, limitation or removal of your personal data and you can also request the transfer of your data. Finally, you can object to the use of your data.

If the processing of your data is based on permission, you can withdraw it at any time. You can send your written requests or questions related to privacy-related matters to: info@unforus.com To identify you we will call you and ask you verification questions to correctly verify that you are who you state that you are. You will then receive an answer from us within 30 days.

You are also entitled to submit a complaint about the use of your data with the Dutch Data Protection Authority. You can do so here:submit a complaint

Changes

We reserve the right to make changes to this privacy statement. Therefore, check the Privacy Statement regularly for the latest version of our privacy policy.

Questions?

If you have any questions about our privacy policy, please contact us via e-mail organization.

This privacy statement was last modified on July 2nd , 2023.