Privacy Policy

Privacy declaration

Privacy statement 365 Amsterdam B.V.

If you visit our website or order products or services from us, we process your personal data. We consider careful handling of personal data to be of great importance. Personal data is therefore processed and secured by us with care. In our processing we comply with the requirements of the General Data Protection Regulation. In these statements we explain how we do this. We may amend this statement from time to time. We therefore recommend that you review this statement regularly.

This version of our privacy statement is dated December 8th, 2023.

Table of contents:

Who is responsible for processing your personal data?
Whose personal data do we process and how do we obtain the personal data?
Which personal data do we process and what is the purpose and legal basis for processing the personal data?
How is the processing of personal data secured?
Who has access to your personal data?
How long do we process your personal data?
Do we place cookies?
What are your rights?

Who is responsible for processing personal data?

365 Amsterdam B.V. is the controller and processes your personal data. 365 Amsterdam B.V. trades under the names 365amsterdam.nl, registered with the Chamber of Commerce under number 91611091. The address of 365 Amsterdam B.V. is Emmaplein 8, 1075 AW Amsterdam. Our telephone number is 020 – 221 221 1. You can email us to info@365amsterdam.nl.

Whose personal data do we process and how do we obtain the personal data?

We process personal data of our customers and website visitors. In many cases, a website visitor will also be a customer. For us, a customer is someone who has an account with us or someone who has ordered in the past without using or creating an account.

Personal data of customers comes from the customer himself. These are, for example, specified when creating an account or when ordering a product. It is also possible that we have received the personal data because a customer or website visitor has contacted our customer service.

Personal data of website visitors are data that website visitors have not left directly with us. This concerns data that, for example, is related to the use of the website or data that is technically necessary to process in the context of use, such as IP addresses.

Which personal data do we process and what is the purpose and legal basis for processing the personal data?

Personal data obtained when creating an account.

When you create an account, you leave information with us. This concerns the following data: name and address, company name, login details (username and password). You have left this personal data with us when you created an account. The purpose of the account is to have everything together for you at a glance and to facilitate ordering and use of our website. The legal basis for processing personal data is a legitimate interest. We want to respond to the wishes of our customers as best as possible.

In the account you can also view the following:

Which orders placed by you are still open;
Which orders placed by you have been processed by us;
Which invoices we have issued to you are still outstanding;
Which invoices we have issued to you have been paid by you;
Financial statements, such as what expenditure you have made;
Which newsletters you are subscribed to;
Your wish list, which concerns products that you have indicated that you want to have on the wish list;
The download center, if you have ordered digital products, such as e-books, you will find them here so that you can download them;
Links for e-learning, if you have ordered an e-learning module, such as an online course, you will find it here so that you can start the e-learning module with the link;
Your possible participation in the partner program.

Personal data obtained with an order.

If you place an order via our website, you must enter certain information in order to properly process the order you require, namely: name and address details, bank details, details for (handling) the order. In this case, the purpose and legal basis is that we process your personal data in the context of the execution of an agreement. This is the agreement under which you have ordered products and we deliver those products to you.

In addition, the legal basis for processing your data is a legitimate interest, because we want to inform you about this inform orders as best as possible and draw attention to interesting products. If you use an account when placing an order, we collect the data from your account to make the ordering process easier for you.

It is also possible that your details have been provided by someone else. This may be because the customer wishes to send an order to you, as a gift for example. We may also have obtained your data from your employer in the context of the implementation of a personal book budget. In the latter case, we still see ourselves as a controller (and not as a controller on behalf of your employer).

Obtaining personal data from reviews

We offer the opportunity to leave a review for a product on our website and online store. This is a very valuable function for us and our customers. This way, other customers can make better and more informed choices. For this review we ask you to provide certain information. A review is public for everyone. The legal basis in this case is our legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

Personal data for newsletters

We would like you to be informed. We send the following email newsletters as standard:

Magazine, an e-mail version of our magazine;
Events, an email with upcoming events that we organize together with partners and/or authors;
Promotions, an email with promotions for our products and services;
The best, an overview email with the bestsellers of a certain moment;
365 Amsterdam personal, an email with products and services that have been specially selected for you based on your purchase history, wish list and search and surfing behavior.

You can unsubscribe from these email newsletters by using the unsubscribe link. We will no longer send you that type of e-mail newsletter after unsubscribing. You can also unsubscribe by logging into your account and indicating that you no longer wish to receive a particular newsletter. In the same way, you can register for an e-mail newsletter again by logging into your account and indicating that you wish to receive a specific newsletter (again).

In this case, the purpose of processing your personal data is marketing: we keep you informed about your products and services in the hope that you purchase those products and services. In this case, the legal basis is initially legitimate interest, and later - after you have unsubscribed from a newsletter and then registered again - consent. It is important to know that your fundamental rights are taken into account and are not violated.

Personal data that are processed as a result of contact with our customer service

You can always contact us, for example about when a title is available, what the status of your order is, for complaints but also for compliments. We record your details during that contact. This only concerns basic data such as name and address. We can also record what we have done for you and what was discussed or agreed. This way, when you contact us again, our colleagues can see what was discussed or agreed last time. The legal basis for processing personal data in this case is legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

Personal data for contact form for “Title Not Found”

If you search for a title on our website and the title is not found, you can leave your name, email address and telephone number. In that case, we will contact you to see if we can obtain the title somewhere (else) for you, or we can notify you when the title is available (again). The legal basis for processing personal data in this case is legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

Personal data based on your surfing and search behavior

We collect data about your surfing and search behavior. We do this because we can recommend products and services to you on the website that we think you might be interested in. We also use that data to personalize newsletters. The legal basis for processing personal data in this case is legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

Technical cause processing personal data

In addition, we also process data that you do not enter yourself, but which we do collect when you use the website and which can be indirectly traced back to you. This data that we collect and process about you recognize: IP address and transaction ID. The legal basis for processing personal data in this case is legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

Digital content

If you purchase digital content, such as an e-book, we can process your personal data in the watermark. This way it can be determined whether you have unlawfully copied or distributed the digital content. As long as you adhere to the agreements, namely that you only use the digital content yourself, third parties cannot observe and/or process the personal data processed in the watermark. The legal basis for processing personal data in this case is legitimate interest. It is important to know that your fundamental rights are taken into account and are not violated.

How is the processing of personal data secured?

We protect the processing of your personal data against misuse and unauthorized access to personal data. We do this, for example, through SSL secured connections. It is your responsibility to protect the devices with which you visit our website, such as your computer, tablet or mobile phone, for example with a virus scanner.

Who has access to your personal data?

We may engage third parties to process personal data on our behalf. In that case, these third parties are called “processors”. These processors always act under our responsibility and may not use the personal data for their own purposes. We have concluded processing agreements with these third parties. This concerns our hosting provider and suppliers of online tools. Sometimes there are third parties who are also responsible for processing. In that case, we have not concluded a processing agreement with these parties.

Logistics partners

If you place an order, the personal data necessary to have the order delivered to you will be shared with the delivery services. Centraal Boekhuis and PostNL will receive your name, address, place of residence and telephone number from us in order to deliver the order to the location you specified. These logistics service providers can also involve other service providers in taking care of the logistics shipping process. All these delivery services and logistics service providers are bound by the General Data Protection Regulation with regard to the processing of your personal data.

Subscription and content partners

You can also purchase subscriptions to (online) (scientific) magazines or titles on our website. In order to execute the agreement, we must pass on your details to the supplier of the subscription ordered. They will then provide you with access to the magazines or titles.

You can also purchase online courses or e-learning modules on our website. In order to execute the agreement, we must pass on your data to the supplier of the ordered course or e-learning module.

Partners with whom we share responsibility

In some cases we work together with a partner to achieve common or shared goals. In that case, these partners determine the purposes and means of data processing together with us. We and the partner can then be regarded as joint controllers. We have then concluded a mutual arrangement with these partners regarding the processing of personal data. If we are jointly responsible for processing with a third party, you can always contact us to exercise your rights under this privacy policy and the law. We will then act as the first point of contact and will ensure further processing of your request and/or question.

Our partners are:

Prodigi B.V.

Google Analytics

We use Google Analytics. We can analyze the use of the website with Google Analytics. We have a processing agreement with Google and we have set up Google Analytics in a privacy-friendly manner, in accordance with the manual of the Dutch Data Protection Authority.

We process your personal data outside E.U. or E.E.R?

Personal data can be transferred outside the E.U. or E.E.R. are processed. This usually concerns the United States. We ensure that the third parties that process your personal data are Privacy Shield certified or work with the model contracts of the E.U. for transfer.

Third party websites

This statement does not apply to third-party websites or services that are linked to our website by means of links or otherwise, such as YouTube. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements or other (general) terms and conditions of these websites or services before using the websites or services of these third parties.

How long do we process your personal data?

We store your data linked to your account for as long as you have an account. If you delete that account, we will also delete your data. This does not apply to data that we are required to keep by law. We keep these for as long as necessary to comply with the law. Consider, for example, the orders that we keep for seven years.

Do we place cookies?

We also place cookies. Cookies are placed on your devices via our website. We have recorded how we handle cookies in a separate cookie statement.

What are your rights?

For questions about our privacy policy or questions regarding access and changes to (or deletion of) your personal data, you can contact us at any time. To prevent abuse, we may ask you to identify yourself adequately.

You have the following rights under the GDPR:

The right to access to and rectification or deletion of personal data or restriction of processing, as well as the right to object to (further) processing.
The right to take and/or transfer your data.
If the processing of personal data is based on consent, you have the right to withdraw this consent at any time.
You have the right to file a complaint with the Dutch Data Protection Authority about the processing of your personal data by us.