PRIVACY POLICY

1. Your Privacy
Your privacy is important to 8848 Altitude BV and we are committed to protecting and safeguarding your rights with regard to the privacy of your data.

2. Our Policy
In this privacy policy, we describe how we handle your personal data and how we comply with our legal obligations when you visit our website (website visitor), purchase goods and/or services from us (customer), supply goods and/or services to us (supplier), or apply for a position with us (applicant).
Based on applicable legislation (the General Data Protection Regulation, the “GDPR”), we ensure that every processing of your personal data complies with the following principles:

We process your personal data only for legitimate purposes. This means that the processing is necessary to achieve specific purposes as defined in the GDPR, or that you have given consent for the processing of your personal data. When it is legitimate to process your personal data, we do so in a proper and responsible manner. We clearly inform you about the purposes for which your personal data are processed and how this is done.

We collect and process your personal data only for specified, explicit and legitimate purposes. If we subsequently wish to use your data for another purpose, we ensure that this purpose is compatible with the original purpose of collection.

We ensure that the personal data we collect and process are adequate, relevant and limited to what is necessary for the purposes for which they are processed. We take all reasonable measures to ensure that your personal data are accurate and up to date. If your data are inaccurate or no longer accurate, we will delete or correct them.

We do not retain your personal data for longer than is necessary for the purposes for which they are processed. When the data are no longer necessary, we will delete or destroy them.

We ensure that your personal data are properly secured and remain confidential. We protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.

We are responsible for compliance with all of the above principles and can demonstrate that the processing of your personal data is in line with these principles.
To ensure fair processing of personal data, the GDPR grants you various rights, which you may exercise against us if you disagree with the way we implement this privacy policy.

3. When This Policy Applies to You
This policy applies to you when:

• You visit our website (Website User);
  
• We supply products and/or services to you as a customer (Customer);
  
• You supply products and/or services to us as a supplier (Supplier);
  
• You apply for a position with us (Applicant).

This policy does not apply to our employees.

4. How to Contact Us as the Controller of Your Personal Data

If you wish to know how to contact us, please refer to Appendix 1 or visit our website. This privacy policy applies not only in the Netherlands, but also in Belgium, Germany, Finland, France, Hungary, Ireland, Italy, Luxembourg, Austria, Poland, Portugal, Spain, Slovenia, the Czech Republic, the United Kingdom (UK) and Sweden.

It is possible that individual countries implement data protection laws differently at a detailed level based on local implementing legislation. Therefore, this privacy policy also contains country‑specific sections. These country‑specific details can be found in Appendix 3. To keep this privacy policy up to date, we may amend it from time to time. The most current version can always be found on our website.

5. Which Personal Data Do We Collect and Use?

Website User Data
We collect and use basic information about our website users, primarily to improve our website. We analyse how you use our website, how often you visit it and when the website is used most. We also use website data to monitor visitor behaviour and optimise our campaigns for remarketing purposes. Please refer to our cookie statement for more information.
When you subscribe to our newsletter, you can choose to share the following data with us:

• Interests;
  
• You mainly shop for;
  
• Which email updates you wish to receive;
  
• Name and address details;
  
• Country;
  
• Date of birth;
  
• Gender;
  
• Purchased items;
  
• Amount spent on purchased items;
  
• Purchase date.

If you have an account, you can modify these details yourself on our website. You can unsubscribe from the newsletter at any time.

Customer Data
We collect and use information about you to provide our products and/or services. We limit data collection to information that is necessary to achieve this purpose. The personal data we may collect and use typically include:

• First name;
  
• Last name;
  
• Street;
  
• House number;
  
• Postal code;
  
• Province;
  
• City;
  
• Country;
  
• Email address;
  
• Telephone number;
  
• Fax number;
  
• Chamber of Commerce (KvK) number;
  
• VAT number;
  
• Credit insurer file number;
• Bank details;
  
• Order number;
  
• Shipping method;
  
• Payment method;
  
• Purchased items;
  
• Amount spent on purchased items.

For customers, the email address is used for two purposes:

• Sending the order confirmation;
• Providing shipping information (such as Track & Trace).

If the ordering process is interrupted, 8848 Altitude BV will send a reminder email containing the contents of the shopping cart (also known as an abandoned shopping cart email).

Supplier Data
We collect and use information about you or individuals within your organisation to communicate with you, receive products and/or services, and make payments within the scope of our agreement with you. The data collected may include:

• Email address;
  
• Telephone number;
  
• Fax number;
  
• VAT number;
  
• Bank details;
  
• Shipping method;
  
• Payment method.

Applicant Data
When you apply for a vacancy through our website, we record the following personal data in our administration:

All information you provide in your CV and motivation letter.

If your application does not result in employment, we will delete your application file after four weeks, unless you have given us consent to retain it for one year.

6. How Do We Collect Your Personal Data?

Website Users
We collect your data automatically through cookies when you visit our website, based on the cookie settings selected in our cookie banner. When you contact us via the website, we will also collect your details.

Customers
We collect customer personal data in three ways:

• Personal data you provide to us;
  
• Personal data we receive from other sources;
  
• Personal data we collect automatically.

Suppliers
We collect your personal data during our contractual relationship with your organisation.

Applicants
We collect your personal data in order to offer you a position, subject to suitability.

7. How Do We Use Your Personal Data?

Website Users
Website user data help us improve your user experience.

Customers
We use customer data for:

• Delivering products and/or services;
  
• Marketing activities;
  
• Financial activities;
  
• Customer analysis.

The primary reason for processing customer data is to ensure compliance with contractual agreements so that the relationship runs smoothly. In exceptional cases, we may use your personal data in criminal legal proceedings.

Suppliers
The primary reason for processing supplier data is to ensure compliance with contractual agreements so that the relationship runs smoothly.

Applicants
We process applicant data to offer you a position, subject to suitability.

8. With Whom Do We Share Your Personal Data?

Where appropriate and in accordance with applicable laws and regulations, we may share your personal data with:

• All business entities under 8848 Altitude BV;
  
• Tax authorities, audit bodies or other authorities where required by law;
  
• Third parties such as service providers performing functions on our behalf;
  
• Outsourced IT providers and data storage providers with whom we have concluded data processing agreements;
  
• Marketing technology platforms and suppliers.

With regard to marketing technology platforms and suppliers, 8848 Altitude BV has entered into an affiliate marketing advertiser agreement and a related data processing agreement with AWIN. In this agreement, both parties acknowledge that they are joint data controllers with respect to personal consumer data processed in connection with the services. The processing of personal data by or on behalf of AWIN is described in their data privacy policy. This list is not exhaustive.

9. How Long Do We Retain Your Personal Data?

We remove your personal data from our systems as follows:

Website Users
User‑level and event‑level data linked to cookies, user IDs and advertising IDs are retained in Protest Sportswear’s Google Analytics environment for 26 months, after which they are automatically deleted.
If a customer unsubscribes from the newsletter, all personal data in both Emark and Emark Open will be deleted.
We inform financial institutions, carriers and other external platforms to which we have provided personal data of such deletions.

Customers
If we have not had meaningful contact with you for a period of five years, we will delete your data, unless we are legally required to retain them for a longer period.
For consumers specifically:

All personal data relating to an order that enters the backend of our website (Shopify) are automatically anonymised after 30 days. This is because delivery of a parcel may take several days, and consumers have the right to return products within 14 days without providing a reason. Once the return is received, the amount will be refunded. We require the personal data in Shopify to manage this process.

Suppliers
If we have not had meaningful contact with you for a period of five years, we will delete your data, unless we are legally required to retain them longer.

10. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding the personal data we hold about you. You can exercise these rights by contacting us, and we will address your request within the applicable statutory timeframe.

You have the right to:

• Be informed;
  
• Access your data;
  
• Rectification of inaccurate data;
  
• Erasure and the “right to be forgotten”;
  
• Restriction of processing;
  
• Object to processing;
  
• Data portability;
  
• Not be subject to automated decision‑making, including profiling.

11. What Are Cookies and How Do We Use Them?
A “cookie” is a small piece of code stored on your computer’s hard drive. Cookies are used by almost all websites and are not harmful to your system. We use cookies to track your activity and provide the best possible experience when you visit our website.
You can manage your cookie preferences via the cookie banner. Appendix 4 explains which cookies we use, why we use them and what type of cookies they are.

12. Legal Basis for Processing Your Data

Legitimate Interests
Pursuant to Article 6(1)(f) GDPR, we may process your data when it is necessary for the purposes of the legitimate interests pursued by us or a third party, unless your interests or fundamental rights and freedoms override those interests.
You have the right to object to processing based on this ground.

Consent
In certain cases, we require your consent to process your personal data. This consent may be opt‑in or soft opt‑in consent, depending on the circumstances.
You may withdraw your consent at any time.

Legal Claims
We may process personal data, and where appropriate special categories of personal data, for the establishment, exercise or defence of legal claims, as permitted under Article 9(2)(f) GDPR.

Glossary

GDPR (General Data Protection Regulation) – EU regulation harmonising data protection laws, effective from 25 May 2018.
Customers – individuals or entities to whom we supply products and/or services.
Suppliers – partners, companies, independent contractors and freelancers supplying products and/or services.
Applicants – individuals applying for a vacancy through our website.
Website User – any individual visiting one of our websites.