Privacy statement

The General Data Protection Regulation ("GDPR") is a law designed to protect individuals' privacy. The GDPR allows third parties to use your personal data under certain conditions. It should be clear who processes which personal data and for what purpose.

Vitaminstore Online B.V. (hereinafter "Vitaminstore.nl") processes various personal data, for example, when you visit our website or place an order via our website.

Vitaminstore.nl values your privacy and handles your personal data with care. In this privacy statement, we explain (among other things) why we need your personal data and what you can do if you have any questions or comments about the processing of your personal data.

The personal data Vitaminstore.nl processes When you place an order via the Vitaminstore.nl website, we ask you to fill in some details. We ask for your name, billing and delivery address(es), email address, phone number, payment details, and date of birth. These are personal data because they are traceable to you as an individual.

If you create an account we process the following personal data: your name, email address, billing and delivery address(es), phone number, payment details, gift vouchers/cards, your points balance, and date of birth (if you have filled it in); your order details/purchase history and chosen delivery option and (if applicable) your favourites list and email and personalisation preferences.

If you contact us via our customer service we process your email address and a transcript of the chat when you contact us via chat or your email address and email message when you contact us via email.

If you visit our website we process your IP address/domain name.

If you participate in a promotion or competition we process your name, address, and/or email address. We need this information to execute the promotion and announce the winner(s). We collect this data with your consent. In the terms and conditions of the relevant competition or promotion, you can find out exactly what your data is used for and how long we keep it.

How do we obtain your personal data? Vitaminstore.nl obtains your personal data because:

• you provide it to us yourself;
• you visit our website;
• you send us a private message via social media;
• someone who wants to send you a gift provides it to us;
• you have given someone else/another company permission to provide your personal data to us.

Purpose Vitaminstore.nl processes the mentioned data for the following reasons:

• to handle the agreement that customers enter into with Vitaminstore.nl (financial and administrative)/to handle your order;
• to send your (ordered by someone else) gift;
• to reach (potential) customers if necessary;
• to answer your questions or respond to your message;
• to help you even better/to further develop/optimise our product and service offering;
• to personalise our pages for each unique visitor/to make personalised offers (if you do not appreciate our personalised offers, you can tick the 'turn off marketing' box at the start of your visit to Vitaminsitore.nl);
• to keep customers/interested parties informed of the latest developments of our products;
• to ask you for a review after placing an order (via/with the help of our service provider 'Trustpilot', see also under the heading 'provision of your personal data to third parties');
• to investigate, prevent and combat unauthorised access and fraud.

Vitaminstore.nl sends a newsletter We are allowed to send you the newsletter because you are a customer with us or because you have indicated that you want to receive the newsletter.

If you no longer wish to receive our newsletter, you can, of course, unsubscribe. The easiest way to unsubscribe is by using the link at the bottom of the newsletter. You can also send an email to privacy@vitaminstore.nl. We will do our best to remove your email address from the mailing list as soon as possible.

Use of tracking links in transactional emails and service messages Vitaminstore.nl uses tracking links in transactional emails and service messages to measure and improve the performance of our communication. These links collect information such as click behaviour to give us insight into how our customers interact with our communication. This helps us further optimise our service.

If you object to the use of tracking links, you can indicate this by contacting our customer service via privacy@vitaminstore.nl.

We sometimes also contact you via post or phone In some cases, this is necessary to handle the agreement with you. But sometimes we do this to make you an offer. If you object to this, we would like to hear from you. You can report your objection to us via privacy@vitaminstore.nl.

Personalised email messages/personal preferences We can also send you other information, such as competitions or personal recommendations. We do this with your consent based on your personal preferences, which are based on your order and visit history from up to 2 years ago. In this way, we want to make the content of our messages more relevant and personal for you.

There are various possibilities to indicate your preferences with us. For example, you can subscribe to our newsletter, indicate that you want to receive our cool magazine, or add items to your favourites list. You can adjust or disable these preferences yourself at any time in your account.

Improving shopping experience when you view an item on Vitaminstore.nl, you can also see other items we recommend (under the heading "Others also viewed"). These recommendations are not personal but based on statistics. Everyone who views that item sees the same recommendations, just like in physical stores, where certain items of the same type or category are also grouped together.

Cookies: The Vitaminstore.nl website uses cookies. A cookie is a small file that our website places on the device you use to visit the website, such as your phone or computer.

Vitaminstore.nl uses functional cookies. These cookies ensure that the website functions properly and, for example, remembers your login and the items you place in your shopping cart. No consent is required to place such cookies.

Vitaminstore.nl also uses cookies for which consent is required. They do not place these cookies without first asking for your consent. You can find information about the cookies used by Vitaminstore.nl/the cookie policy here.

Provision of your personal data to third parties Vitaminstore.nl does not provide personal data to third parties unless there is a specific reason/necessity to do so.

Handling the agreement you have with Vitaminstore.nl. You can think of delivering an order you placed via our logistics partner PostNL and providing payment services.

Customer surveys and reviews Vitaminstore.nl greatly values your opinion as a customer and would like to know how we can take our service to an even higher level. Therefore, we may use your data for a customer survey. Since we do not always do this ourselves, Vitaminstore.nl sometimes provides personal data to external service providers who support us in this. Through our service provider 'Trustpilot', we ask you to do a review about 1 week after your order. For this reason, we provide your personal data to 'Trustpilot'. Reviews are (of course) only posted with your consent. You can also choose to post a review under your own name or using an alias.

Legal obligation Sometimes Vitaminstore.nl is legally obliged to pass on personal data to government bodies such as the tax authorities or police/justice (to carry out the tasks assigned to these services). Vitaministore.nl will comply with its legal obligations in that case.

Agreements with third parties (data processing agreement) If Vitaminstore.nl engages third parties for the processing of your personal data, it makes -if necessary- agreements with those third parties to ensure that these parties also handle your personal data with care and in accordance with the law.

Vitaminstore.nl does not provide/sell personal data to other organisations for commercial purposes.

(Logging in via) Social media If you send us a private message via social media (such as Facebook, Instagram, and Twitter), we do not know what is kept from these messages.

You can log in to your Vitaministore.nl account with your Facebook account and share products and services you are a fan of on social media. This depends on the settings of your social media account.

We refer you to the privacy statements of the relevant social media for how they handle your personal data.

Vitaminstore.nl protects your personal data/retention period Vitaminstore.nl protects your personal data in the following ways:

• your personal data can only be accessed by authorised persons;
• employees of Vitaminstore.nl have a personal password to log into the digital (customer) system;
• employees of Vitaminstore.nl have a duty of confidentiality regarding all personal data provided to Vitaminstore.nl;
• Vitaministore.nl has taken technical measures to secure the system it uses against external breaches, for example, we use encryption technologies that are recognised as common standards within the IT sector when transferring/receiving your data on our website.
• Vitaminstore.nl regularly has its security tested by external security agencies;
• your personal data is only processed within the organisation and within the European Economic Area ("EEA");
• your personal data is not kept longer than necessary for the described purposes.
• the law may prescribe a retention period. If so, Vitaminstore.nl will comply with the prescribed legal retention period. For instance, we are legally obliged to retain data related to your order for 7 years.

Your rights Under the GDPR, you have a number of rights. These rights help you protect your privacy.

• the right to information: the right to know whether and which of your personal data is processed and for what purpose;
• the right to correct, supplement, or delete your personal data;
• the right to object: the right to object to the processing of your personal data in certain cases;
• the right to data portability: the right to receive the personal data you have provided to us in a machine-readable format;
• the right to restrict the processing of your personal data;
• the right to be forgotten.

Tips and complaints Vitaminstore.nl does its utmost to handle your personal data with care. If you have a tip for us about how we process your personal data, we would love to hear it. We also hope you let us know if you have a complaint. We would be happy to work with you to find a solution.

Contact details If you wish to respond to our privacy policy, exercise your rights, or have a tip/complaint, you can contact us. You can do this by sending an email to privacy@vitaminstore.nl. Vitaminstore.nl aims to respond within 4 weeks of receiving your message. If you want to inquire about the status of your question/tip/complaint, you can, of course, always call us. We are available via phone number 020 303 39 65.

Amsterdam, 24 May 2018