Privacy policy

SANA Amsterdam (The Lowlands Company B.V.) respects the privacy of visitors to its website, in particular the rights of visitors with regards to the (automated and non-automated) collection, use, processing and sharing of: any information that can uniquely identify an individual such as a name, identification number, phone number, e-mail address, address or other location data, payment information such as a bank account number, an online identifier or one or more elements characteristic of the physical, physiological, genetic, psychological, economic, cultural or social identity (hereinafter: “Personal Information”). Due to complete transparency with our customers, we have therefore formulated and implemented a Privacy Policy with regard to the (automated and non-automated) collection, use, processing and sharing of Personal Information, its purposes and the possibilities for visitors to exercise their rights in the best possible way. For all additional information about the protection of personal data, you can visit the website of the Personal Data Authority: https://ec.europa.eu/info/index_en

This Privacy Policy describes how sana.amsterdam (hereinafter also “Site” or “we”): collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site. The legal person responsible for the processing of Personal Information (hereinafter also: “The administrator”) is: The Lowlands Company B.V. (Sana Amsterdam), registered at Prinsengracht 769, 1017JZ Amsterdam, Dutch Chamber of Commerce number: 80300685.

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The current version of the privacy policy available on the Site is the only version that applies as long as you visit the Site, until a new version replaces the current version. By continuing to visit the Site you accept the following terms of use.

Section 1 - Access to the Site

The access to and the use of the Site is strictly personal. You will not use the Site as well as the data and information provided on it for commercial, political or publicity purposes, or for any commercial offers and in particular for unsolicited electronic offers.

Section 2 - The content of the Site

All brands, images, texts, comments, illustrations, (animation) images, video images, sounds, as well as all technical applications that can be used to make the Site work and, more generally, all parts used on this site are protected by law through intellectual property rights. Any reproduction, repetition, use or adaptation, in any way whatsoever, of the whole or only part thereof, including the technical applications, without the prior written permission of the responsible party is strictly prohibited. If the administrator does not immediately take action against any infringement, this cannot be interpreted as tacit consent or the refusal to prosecute.

Section 3 - The management of the Site

For the proper management of the Site, the administrator can at any time: suspend, interrupt or limit access to a certain category of visitors to all or part of the Site; remove any information that may interfere with the functioning of the Site or that is in violation of national or international legislation or in violation of internet etiquette; and, have the Site temporarily unavailable in order to be able to perform updates.

Section 4 - Responsibilities

The administrator is in no way responsible for failures, malfunctions, difficulties or interruptions in the functioning of the Site, as a result of which the Site or one of its functionalities is not accessible. The way in which you connect to the Site is your own responsibility. You must take all appropriate measures to protect your equipment and your data against, for example, virus attacks on the internet. You are also responsible for the websites and the data that you consult on the internet.

The administrator is not liable for legal proceedings that are conducted against you because of the use of the Site or services accessible via the internet for violating the terms of this privacy policy. The administrator is not responsible for any damage that you incur yourself or third parties or your equipment as a result of your connection to or use of the Site. You will refrain from any action against the administrator as a result. If the administrator becomes involved in a dispute as a result of your use of the Site, he is entitled to recover from you any damage that he consequently suffers and will still suffer.

If you – a visitor – encounter any Personal Information during a visit of the Site, you must refrain from collecting it or from any other unauthorized use and any act that constitutes a violation of the privacy of those person(s). The administrator is in no way responsible in the above situations.

Section 5 - The collection of Personal Information

When you visit sana.amsterdam, certain information is collected by SANA Amsterdam (The Lowlands Company B.V.) and external processor(s)/third parties about your device, your interaction with the Site, and information necessary to process your purchases. The personal information that is collected on the Site is mainly used by the administrator for maintaining relationships with you and for processing your orders. We may also collect additional information if you contact us for customer support or other purposes. We do not intentionally collect Personal Information from minors. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at support@sana.amsterdam to request deletion.

See the list below for more information about what Personal Information we collect and why.

Device information

  • Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: shared with our processor Shopify.

Order information

  • Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, bank account numbers, paypal address or other payment information), email address, and phone number.
  • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: shared with our processor Shopify, payment gateways or other payment service providers (including Shopify Payments, Stripe, Mollie, Paywhirl and Coinbase), and, if required for your order, with local and international shipping and fulfillment companies (including DHL and PostNL).

Customer support information

  • Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, bank account numbers, paypal address or other payment information), email address, and/or phone number.
  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: shared with our processor Shopify, payment gateways or other payment service providers (including Shopify Payments, Stripe, Mollie, Paywhirl and Coinbase), and, if required for your order, with local and international shipping and fulfillment companies (including DHL and PostNL).

Section 6 - Use, sharing & processing Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to any lawful request for information we receive from authorities, or to otherwise protect our rights. In the event of any violation of any laws or regulations that the visitor is suspected of and for which the authorities request personal information that the administrator has collected, that personal information will be provided to the authorities.
  • We may share your Personal Information with payment gateways to be able to process your payment.
  • We may share your Personal Information with local and/or international shipping and fulfillment companies to be able to process and ship your order and/or return.
  • If certain information is necessary to gain access to certain functionalities of the Site, or if the responsible party will indicate the mandatory nature of this information at the time of requesting the data.

Section 7 - Behavioural Advertising

We may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

  • You can get commercial offers from the administrator. If you no longer wish to receive it, send an email to the following address: support@sana.amsterdam.
  • You can get commercial offers via ads on Google, Facebook, Instagram or other search engines and/or social media websites and platforms.
  • We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Section 8 - Your rights with regard to your data

GDPR

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms.

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us via email at support@sana.amsterdam.

Every request to this end must be accompanied by a copy of a valid proof of identity, on which you have signed and stated the address where you can be contacted. You will receive a reply to your request within 1 month of the submitted request. Depending on the complexity of the requests and the number of requests, this period can be extended by 2 months if necessary.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Automated decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
  • Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us via email at support@sana.amsterdam.

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.

Section 9 - Data retention period

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. If there is a maximum duration determined by law, the information collected by the Site / the administrator will only be used and stored for the duration as determined by law. For more information on your right of erasure, please see the ‘Your rights’ section below.

Section 10 - Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies.

Cookies make your browsing experience better by allowing a website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use a website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

 

Cookies Necessary for the Functioning of the Store

Name

Function

_ab

Used in connection with access to admin.

_secure_session_id

Used in connection with navigation through a storefront.

cart

Used in connection with shopping cart.

cart_sig

Used in connection with checkout.

cart_ts

Used in connection with checkout.

checkout_token

Used in connection with checkout.

secret

Used in connection with checkout.

secure_customer_sig

Used in connection with customer login.

storefront_digest

Used in connection with customer login.

_shopify_u

Used to facilitate updating customer account information.

 

Reporting and Analytics

Name

Function

_tracking_consent

Tracking preferences.

_landing_page

Track landing pages

_orig_referrer

Track landing pages

_s

Shopify analytics.

_shopify_s

Shopify analytics.

_shopify_sa_p

Shopify analytics relating to marketing & referrals.

_shopify_sa_t

Shopify analytics relating to marketing & referrals.

_shopify_y

Shopify analytics.

_y

Shopify analytics.

 

Other cookies

Tracking cookies, such as advertising cookies that are intended to display relevant advertisements. Personal interests can be deduced from the information about websites visited. This allows organizations to show their website visitors targeted advertisements, for example. Tracking cookies make it possible to create profiles of people and to treat them differently. Tracking cookies usually process Personal Information.

More specifically, we use the following cookies:

  • Facebook (tracking cookie)
  • Google Adwords (tracking cookie)

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of the Site may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org. For more information about the use, management and deletion of cookies, please also consult the following link: https://ec.europa.eu/info/law/law-topic/data-protection_nl

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Section 11 - Visual material and products offered

No rights can be derived from the images that belong to the products offered on the Site.

Section 12 – Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Section 13 - Applicable law

Dutch law applies to these conditions. The court of the administrator’s place of business has exclusive jurisdiction in the event of any disputes regarding to these terms and conditions.

Section 14 - Contact

For more information about our privacy practices, if you have any questions, or if you would like to make a request, please contact us by e-mail at support@sana.amsterdam or by mail using the details provided below:

The Lowlands Company B.V., Prinsengracht 769, 1017 JZ Amsterdam, Netherlands

Last updated: 8 September 2021

 

In case of a complaint regarding your data, if you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap