Privacy policy
Introduction
SLA B.V. (SLA) places the highest priority on the security and confidentiality of your personal data. In this privacy policy, we explain how we safeguard your privacy and protect your personal data. This privacy policy applies to the data we process from customers of our SLA stores, website and mobile applications, including the IloveSLA app.
All data you provide will be treated by us as strictly confidential and always in accordance with the applicable laws and regulations. We only process your data for the purpose for which we obtained it. That purpose may be to inform you about SLA offers, but also to allocate the correct SLA loyalty points.
Data Controller
SLA Holding B.V. is the data controller responsible for the processing of your personal data as described in this privacy policy. Our company details are:
Amstelveenseweg 124, 1075 XL Amsterdam
Chamber of Commerce: 57641188
VAT number: NL852670941B01
Contact details: info@ilovesla.com.
Changes
We may amend this privacy policy from time to time, for example when we introduce new services. The most recent version of this privacy policy can be found at www.ilovesla.com (Website) under the heading privacy policy.
This privacy policy was last amended on 22 July 2021.
Recipients
Certain data you provide to us may be shared with third parties engaged by us, such as printers and email and postal processors. These parties process your personal data exclusively on behalf of and for the benefit of SLA. SLA ensures that contractual provisions are in place to ensure that such third parties do not use your personal data for purposes other than those described in this privacy policy and that they have implemented the security measures necessary to protect your personal data against unauthorised processing and against accidental loss, destruction or damage.
Under 16?
If you are under the age of 16, you may only provide us with personal data if you have obtained permission from one of your parents or a legal representative who has read this privacy policy.
Security and retention period
The personal data we collect via the Website or app is protected using current customary techniques. SLA stores personal data for as long as you have an account or as long as required by law. In securing and storing your personal data, SLA will always comply with the applicable laws and regulations.
SLA (loyalty) app
By registering for SLA loyalty, you give SLA permission to store your personal data – including your name, postcode, email address, date of birth and telephone number – in a secure database and to keep you informed of all SLA activities and offers. By participating in SLA loyalty, SLA builds a profile about you. In this context, your purchase frequency is recorded in order to allocate the correct SLA points to you. We primarily use this data in order to perform the agreement to which you are a party, namely to enable your participation in the SLA loyalty programme.
Through SLA loyalty, we may also track which purchases you have made. Based on your purchase frequency and purchasing behaviour, your profile is built up.
Your profile is also used to send you personal offers (by email or via messages in the app) and to grant you discounts on subsequent purchases.
We process your date of birth in order to possibly give you a free product or surprise on your birthday. We carry out these processing activities because you have given your consent for them. If you no longer wish to participate in SLA loyalty, you can notify SLA via info@ilovesla.com.
When building your profile and making personal offers, SLA uses automated individual decision-making. Based on your choices and use of SLA, we determine which offers are most suitable for you. In this way, you are shown offers that are specifically tailored to you. We display offers based on automated individual decision-making on the basis of the consent you have given.
SLA Newsletter
We would like to keep you informed of our activities and offers. You may therefore subscribe to our SLA Newsletter. The use of your email address for direct marketing purposes may be considered to be carried out on the basis of SLA’s legitimate interest.
If you no longer wish to receive the newsletter, you can unsubscribe via the link included in the newsletter. An option to unsubscribe is always included in every email sent to you by SLA.
Website
Each time you visit the Website, our web server automatically recognises your IP address. When you visit the Website, we also store:
– your email address if you post questions on the Website;
– your email address if you communicate it to us;
– the domain name of other websites you consulted to reach the Website;
– all information relating to the pages you consulted on the Website.
We use this information exclusively to:
– improve the content of the Website and better tailor it to the wishes of our visitors;
– determine the number of visits to the Website.
Cookies
We use cookies on the Website. Cookies are small pieces of (text) information that are stored on the hard drive or in the memory of your mobile phone, computer or tablet (hereinafter: “Device”) when you visit the Website. The cookies placed via the Website cannot damage your Device or the files stored on it. Both SLA and other parties may place cookies.
What does SLA use cookies for?
SLA uses technical and functional cookies to provide the Website in a user-friendly way or to obtain information about the quality or effectiveness of the Website. For example, functional cookies ensure that after logging into the Website you do not have to log in again on every page, and these functional cookies remember the settings you have entered, such as your language preferences.
To collect web statistics on the use of and visits to the Website, SLA uses Google Analytics. Google Analytics places a permanent cookie on your Device on the basis of which the use of the Website is recorded. This data is subsequently analysed by Google and the results are provided to SLA. In this way, SLA gains insight into the traffic to and from the Website and the way in which the Website is used. On the basis of this data, SLA may make adjustments to the Website or its services where necessary. The data SLA obtains in this context is transferred to Google and stored by Google on servers in the United States. We have concluded a data processing agreement with Google which sets out agreements on the handling of the data collected. SLA has not allowed Google to use the information obtained for other Google services. More information about data processing by Google Analytics can be found in the Google Analytics privacy policy.
Deleting cookies
You can configure your browser so that installed cookies are deleted and so that you do not receive cookies during your next use of the Website.
Warning: if you disable or delete cookies, you may not be able to access (parts of) the Website or the Website may not function optimally. To learn more about these functions, please consult your browser instructions or the Help function of your browser.
How is your personal data protected?
SLA takes appropriate technical and organisational measures to protect your (personal) data against loss or against any form of unlawful processing.
What are your rights?
Under privacy legislation, you as a data subject have a number of rights. This chapter of the privacy policy explains which rights these are and how you can exercise them.
Response
We aim to respond to your requests as quickly as possible and in any event within one month. However, it is possible that we may need more time. If this is the case, we will inform you before the expiry of the aforementioned one-month period. The additional time will not exceed two months.
Requests may be submitted via: info@ilovesla.com.
Please note that if we reject your request, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Right of access
You have the right to submit a request to find out whether we process personal data relating to you. If this is the case, we will provide you with a copy of the personal data collected about you in accordance with the law.
Right to rectification
You have the right to submit a request for rectification of inaccurate personal data relating to you. Where possible, you also have the right to provide additional personal data in order to complete the collection of your personal data.
Right to be forgotten
You have the right to request the erasure of (certain) personal data relating to you (the right to be forgotten). If your request is granted, we will delete the relevant personal data.
Right to restriction
You have the right to submit a request for restriction of the processing of your personal data. This means that, if the request for restriction is granted, we will not further process your personal data during the period of restriction unless this is nevertheless permitted by law.
Right to object
You have the right, under certain circumstances, to object to the processing of your personal data, for example if we process your personal data on the basis of legitimate interest. If you object, we will balance your privacy interests against our business interests. If your interest outweighs ours, we will no longer process your personal data.
If your personal data is used for direct marketing, you may always object to the processing. In that case, we will no longer process your personal data for that purpose.
Right to data portability
You have the right to submit a request for data portability. We will provide the data covered by this right to you in a structured, commonly used and machine-readable format so that you can transfer it to a third party.
How long is your personal data retained?
Your personal data will be carefully retained and not kept longer than necessary for the purpose for which it was processed, unless SLA is legally obliged to retain your data for a longer period.
Questions or complaints?
If you have any questions about our privacy policy or the use of cookies, you can always contact us by email at info@ilovesla.com. If you have a complaint about the use of your personal data and we are unable to resolve it together, you may also submit your complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).