Privacy

PRIVACY POLICY

This is the privacy statement of DTS Autosport. (Trading under registered trade name Paddock Store). This statement provides information about the processing of your personal data when you visit our websites and/or when you buy items on said websites, why we do this and what rights you have when we process your personal data. DTS Autosport will hereinafter be referred to as "Paddock Store", "we" or "us".

  1. SCOPE, DATA CONTROLLER AND DEFINITIONS  

1.1. Scope of this privacy statement
This privacy statement applies to the use of the Paddock Store websites, including the online shop, and to all actions and measures related to the execution and cancellation of an online purchase, creating a customer account, sending newsletters, other informational emails, contact with customer service and for our marketing activities on third party websites.

1.2. The controller for the processing of your personal data
Unless otherwise stated in this privacy statement, the controller for the processing of your personal data is:  

  • DTS Autosport.
  • Trade name: Paddock Store

E-mail: info@paddockstore.nl (Note: to exercise your data processing rights, 
you can use the e-mail address from article 5 to 7).

1.3. Definitions
This privacy statement is based on the terms below from the General Data Protection Regulation, which we have defined to facilitate understanding.  

  • AVG refers to Regulation (EU) 2016/679 of the European Parliament and of the European Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and the revocation of Directive 95 /46/EC (General Data Protection Regulation). 
  • Receiver is a natural or legal person, public authority, agency or other body to which the personal data is disclosed, regardless of whether this is a third party or not. However, public authorities which may receive personal data in accordance with Union or Member State law in the context of a particular investigation shall not be regarded as recipients; the processing of this data by public authorities must comply with the applicable data protection rules and the purposes of the processing;  

Examples of possible recipients: banks/payment service providers, logistics companies and shipping service providers and IT service providers; for more information, see article 4)

  • Personal data refers to any information relating to an identified or identifiable natural person (“data subject data”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements/factors specific to the physical, physiological , genetic, psychological, economic, cultural or social identity of that natural person.  

Examples of personal data: name, contact details, bank or credit card details.

  • Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for appointment may be governed by Union or Member State law. For the data processing activities described in this privacy statement, Paddock Store the controller, unless otherwise specified (see article 1.2.).  
  • Processing refers to any operation, operation or series of operations performed on personal data or a series of personal data, whether or not by automated means, such as collecting, registering, organizing, recording, storing, updating or modifying, retrieving, consulting, using, providing by transmission, distribution or otherwise making available, alignment or combination, blocking, erasure or destruction of data.
  • Processor a natural or legal person, a public authority, a service or other body that processes personal data on behalf of the controller; 
  1. PURPOSES, LEGAL BASIS AND RETENTION TERMS REGARDING OUR PROCESSING OF YOUR PERSONAL DATA  

We may only process personal data for a reason stated in the GDPR and only for as long and to the extent that this is necessary for the purposes mentioned in this article of the privacy statement or on the basis of legal requirements. Such a reason is called a foundation. The possible bases are set out in Article 6 of the GDPR. Below is indicated for each processing purpose on the basis of which legal basis we process, for what purposes and how long we (must) keep your personal data for that purpose.

2.1. Processing of your data when you visit our websites
If you visit our websites to learn more about our products and services, without registering for a customer account, purchasing products from our online store or otherwise actively transferring information to us (purely for informational purposes), we process your personal data for the following purposes and based on the following legal bases: 
 
2.1.1. Providing websites and IT security
We process your personal data that is technically necessary to enable us to make our websites available and to guarantee stability and security when you visit our websites. This includes the following personal data:  

  • IP address
  • Browser type and version
  • Operating system and platform  
  • The full Uniform Resource Locator (URL)

This personal data is stored for security purposes in server log files, which are automatically deleted after thirty days. This data processing is technically necessary to enable you to use our websites (legal basis: Article 6(1)(b) GDPR) and for our legitimate interest in ensuring IT security (Legal basis: Article 6(1)(f) GDPR) .

2.1.2. Making localized websites available
We also process your personal data which is technically necessary to enable us to provide you with a localized version of the websites, in particular with regard to the language. This data processing is necessary for our legitimate interest in adapting our website to your needs (legal basis: Article 6(1)(f) GDPR). This personal data is stored for security purposes in server log files, which are automatically deleted after thirty days.

2.1.3. Website analysis
2.1.3.1. Google Analytics
In order to continuously optimize our service, we use Google Analytics, which statistically evaluate our websites. Google Analytics a website analysis service of Google Inc. (“Google”). Google Analytics uses analytical cookies (for more information about cookies, see article 2.1.6 and our cookie statement) that enable an analysis of the use of our websites. The information generated by the cookie when using our websites is usually transferred to a Google server in the USA, where it is stored. However, since we use Google Analytics with the supplement “anonymizeIP()”, Google will pre-determine the IP address of the website visitor within the member states of the European Union (EU) or in other states party to the Agreement on the European Economic Area (EEA), excluding any direct association with you. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Commissioned by Paddock Store Google will use this information to evaluate the use of the websites, to compile reports on the activities on the websites, to analyze the effects, to improve the adaptation of our digital advertisements and to provide further services to you. Paddock Store in connection with the use of the websites and the internet. The IP address transmitted from the user's browser related to Google Analytics will not be merged with other data by Google. More information about Google's terms of use and data protection can be found at:

This data processing is necessary for our legitimate interest to carry out analyzes to improve our website and products, and to advertise our products on the internet in an appropriate and effective manner (legal basis: Article 6 (1) (f) of the GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.  
To opt out of Google Analytics: 
You can generally prevent your personal data (including your IP address) from being processed by Google Analytics by downloading and installing the browser add-on available at the following link: 

In addition, you can prevent Google Analytics from collecting your usage data on our websites by clicking on the following link:

In this case, a permanent opt-out cookie (name: “ga-disable-UA-[…]”) will be set in the browser you are currently using, which prevents your data from being recorded in the future when you use our visit websites using this particular browser. If you use another browser, Google Analytics is in principle enabled, unless the opt-out cookie is also set in this browser. Please note that Google Analytics will be re-enabled if you delete the aforementioned opt-out cookie from your browser

2.1.4. Individual recommendations on our websites
When you visit our web pages, we use Google AdWords to process data about your user behaviour, such as products viewed, contents of your shopping cart, etc. in order to show you individual recommendations on our websites based on this data. For more information about data processing by Google AdWords, you can consult Google's privacy policy under the following link:

This data processing is necessary for our legitimate interest to create a better user experience by providing tailor-made recommendations (legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.  
To unsubscribe from individual recommendations:
You can object to this data processing by clicking on the following unsubscribe link:

2.1.5. Displaying ads/retargeting on third party websites  
When you visit our websites, tags and cookies are set by our retargeting service provider(s) to keep track of the products you have viewed or purchased on our websites. With the help of this information we can then send you individual offers of the products of Paddock Store display on third-party websites through our retargeting service provider(s), and analyze the results to further improve our advertising activities. For more information about the data processing by our service provider(s) for retargeting, please refer to the respective privacy policy below and you can opt-out via the following links:  

This data processing is necessary for our legitimate interest to advertise our products on the Internet in an appropriate and efficient manner (Legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.  

To opt out of retargeting:
You can object to this data processing by clicking on the following unsubscribe link(s) from the respective retargeting service provider(s):

2.1.6. Use of cookies  
We use cookies on our website. Cookies are small text files that are stored in the browsers of your end devices when you visit our websites. Cookies allow your actions and settings on our websites to be tracked, stored and recognized for the duration of the browser session or even afterwards. In addition, cookies and their respective cookie identifiers ensure that your browser is recognized. For example, after leaving the website, you can restore the contents of your shopping cart or see products last viewed. For more information about the use of cookies on our websites, the cookie categories and for individual settings, please see our cookie settings. This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

2.1.7. Customer service  
Depending on the subject matter of your request, we rely on your personal data which is stored in our systems in the context of other data processing activities (e.g. data provided by you during a purchase or when approaching our customer service team for any reason). We will also collect data from third party sources (for example, logistics providers as part of your shipment tracking or inquiry request), if and to the extent necessary to respond to your inquiry. In the context of requests relating to a (pre)contractual relationship with you, this data processing is necessary for the performance of a contract (provision of customer service) with you (legal basis: Article 6(1)(b) GDPR) . If you want to exercise your rights against us, the corresponding data processing method is necessary for compliance with a legal obligation (legal basis: Art. 6 para. 1 lit. c GDPR). If you want to receive information or make a complaint about our products and services, the respective data processing is necessary for our legitimate interest to respond to your information request/complaint (legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 12 months.

2.2. Email Marketing
2.2.1. Sending the email newsletter to subscribers
If you have subscribed to our email newsletter, we will send you newsletters from time to time to inform you about our products, services and offers. This data processing is based on your consent (Legal basis: Article 6(1)(a) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

Withdrawing consent:
You can withdraw your consent and subscription to our newsletter at any time by sending an e-mail with your request to unsubscribe to our customer service (info@autosportfashionbrands.nl) and/or by clicking on the “Unsubscribe” link at the bottom of each newsletter. This data will be processed until consent is withdrawn. 

2.2.2. Direct Marketing Emails to Existing Customers
After purchasing items, whether or not you have subscribed to our newsletter (see Section 2.2.1), we may send you marketing emails for similar products and services. This data processing is based on our legitimate interest to advertise our products and services (legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

Objection to direct marketing emails:
You can object to this processing of personal data at any time and unsubscribe from our direct marketing emails by sending an email with your unsubscribe request to info@autosportfashionbrands.nl mand/or by clicking on the “Unsubscribe” link included in each direct marketing email.

2.2.3. Personalize emails with targeted marketing for existing customers
If you are a customer, we may personalize our targeted marketing emails sent to you based on your preference/interest profile, derived from data from your previous purchase(s) over the past two years. This data processing is necessary for the purpose of our legitimate interest in tailoring our targeted marketing emails to your preferences and interests and thus making our email marketing efforts more efficient (legal basis: Art. 6 para. 1 lit. f GDPR. This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

Objection to our newsletter/targeted marketing
You can object to this processing of your purchase data for our newsletter/targeted marketing emails to special audiences at any time by sending an email with your unsubscribe request to info@autosportfashionbrands.nl and/or by clicking on the unsubscribe link found in each targeted marketing email. In that case you will no longer receive newsletters from us.  

2.3. Product Ratings & Reviews
We offer you the opportunity to review any (purchased) products on our websites where we work with Trustpilot as a third party acting as our processor. Your feedback helps other customers make the right purchase decision and allows us to continuously improve our products. If you would like to submit a review for one of our products, you will receive an invitation from Trustpilot and the following data will be processed: your email address, under which name providing the review and also the content of your review (e.g. the product reviewed, the star rating, title and text of rating, recommendation). Your email address is processed to verify and establish your identity. If you have given your consent to Trustpilot before submitting your review, you agree to Trustpilot's terms and conditions and an account will be created. In that case, Trustpilot is the data controller for the data you provide. See also Trustpilot Legal - Privacy Policy. Since your (star) rating and the content of your review may be published alongside your provided name with your consent, please ensure that you do not include any personal information in it that you do not want to be made public.
This data processing in providing this feedback opportunity is necessary for our legitimate interest to provide customer service and recommendation marketing (Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made. The data processing when you agree to the publication of the review is based on your prior consent to publication (Article 6(1)(a) GDPR). This data will be kept until the consent is withdrawn.

2.4. Registration and creating a customer account
When you visit our websites, you can create a customer account. Registration for a customer account requires that you provide personal data. Mandatory fields are marked as such in the form. This data processing is necessary for the performance of a contract (provision of a customer account) with you (Legal basis: Article 6(1)(b) GDPR). We keep this data as long as you are an active customer with us. By law we must keep the data related to contractual relationship for 7 years, if you have not been logged in for 7 years, your account will be automatically deleted. In addition, you can view, adjust or delete your provided data in the account environment or make a request to that effect as described in Articles 5 to 7.  

2.5. Data processing in the case of orders in the online store
In addition, we process your personal data in connection with the purchase of items in our online store. 

2.5.1. Purchase and payment of goods in the online store  
We process your personal data (such as contact details, shipping and payment information) when you purchase items from the online store. If you purchase items for another person (a third party), we will process that third party's personal data (name and contact details) for the purpose of shipping the items to that third party. Make sure you are authorized to provide such information. This data processing is necessary for the performance of a contract with you (legal basis: Article 6(1)(b) GDPR). By law, we must keep the data related to contractual relationship for 7 years.

2.5.2. Abandoned Cart Emails  
If you have started an order process with your customer account, but have not yet completed it, we will send you a reminder email to the email address stored in the customer account, regarding the purchase process initiated by you. This data processing is necessary for our legitimate interest to remind you of any purchase processes that you have not yet completed (Legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

Object to abandoned cart emails:
You may object to this processing of personal data and unsubscribe from our cart delivery emails at any time by sending an unsubscribe email to info@autosportfashionbrands.nl and/or by clicking on the “Unsubscribe” link at the bottom of each shopping cart delivery email.

2.5.3. Fraud and Credit Control
We check, based on your device and predefined rules, whether the order should be categorized as suspicious for fraud. In addition, if there is a suspicion of fraud, we will carry out an individual check of the order. The result of this manual fraud check could be positive, which would lead to the order being approved. However, if the suspicion of fraud persists, we may decide to cancel the order, depending on the specific case. This data processing is necessary for our legitimate interest to prevent payment default and fraud (Legal basis: Article 6 paragraph 1 letter f GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

2.5.4. Cancellation of the purchase
In all cases of cancellation of the purchase (e.g. withdrawal of contract), we will process your personal data for the return of the items and refund of the purchase price. This data processing is necessary for the performance of a contract with you (Legal basis: Article 6(1)(b) of the GDPR) and/or compliance with a legal obligation (Legal basis: Article 6(1)(c) of the GDPR). By law, we must keep the data related to contractual relationship for 7 years.

2.5.5. Product Rating & Review Invitation Emails
We would like to know if you are satisfied with your purchased items from Paddock Store† For this purpose, we process your e-mail and purchase data (e.g. products purchased and date of purchase) in order to be able to send you an e-mail within one month of purchase, in which we invite you to rate the purchased products (further information on data processing regarding the submission of product reviews can be found in article 2.3). This data processing is necessary for our legitimate interest to provide good customer service and marketing (Legal basis: Article 6(1)(f) GDPR).
You can object to invitation emails for product ratings and reviews by sending an email to info@autosportfashionbrands.nl† If you have already received an email inviting you to evaluate the product, you may decline future receipt of such emails by clicking the “Unsubscribe” link in each invitation email. This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

2.6. Other processing
2.6.1. Conducting internal audits 
Your personal data can be used in the context of audits carried out with regard to the organization of Paddock Storeare processed both at home and abroad. During this process, depending on the case, we also rely on data from other sources (eg credit bureaus).  
Your data may also be processed appropriately under certain circumstances to identify and correct misconduct within the Company and to implement compliance programs and measures. This data processing is necessary to comply with our legal obligations (legal basis: Article 6(1)(c) GDPR) and/or for our legitimate interest to improve the processes and efficiency within the Paddock Store to monitor, to correct misconduct and cases of fraud, to enforce and/or defend our rights, and to discover any criminal offenses (Legal basis: Article 6(1)(f) GDPR). By law, we must keep the data related to contractual relationship for 7 years. 

2.6.2. Conducting analyses  
We can carry out analyzes based on your data, which we process on the basis of the meaning of Article 2 of this privacy statement. These serve as the basis for our business decisions, to improve our products and services, to tailor them to the needs of our customers and to conduct marketing activities. The analyzes made on this basis no longer have a personal preference, so it is no longer possible to trace them back to you. This data processing is necessary for our legitimate interest to improve our products and services and to carry out marketing activities (Legal basis: Article 6(1)(f) GDPR). This data will be kept for a maximum of 24 months or until a decision to unsubscribe as described below is made.

  1. STORING AND ERASING YOUR PERSONAL DATA  

We will only keep your personal data for as long and only to the extent necessary for the purposes stated in this privacy statement (article 2) or for as long and to the extent that we are legally obliged to do so, legal retention periods can in some cases last up to 10 years.

  1. TRANSFER OF PERSONAL DATA AND THE CATEGORIES OF RECIPIENTS

Your personal data may be transferred/disclosed to the following categories of recipients:
IT service providers and marketing services service providers who, among other things, prepare the platforms, databases and tools for our products and services (e.g. our website, sale of articles, sending newsletters and informational emails), analyze user habits on our websites, carry out marketing campaigns and process your personal data on our behalf during the purchase process.
In connection with the use of Google Analytics and Google AdWords, including tags and cookies, your personal data may be transferred to the US. In the case of the US, the European Commission has not decided that there is an appropriate level of data protection within the meaning of the GDPR; no such decision (Article 45 GDPR) as regards suitability has been taken. However, Google LLC is subject to the EU-U.S. Privacy Shield. This means that adequate protection of your personal data is guaranteed. You can download the full text of the U.S. Request the Privacy Shield Framework from the following link: 
https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg
In order to provide you with localized versions of our websites, we transfer your personal data to a third party service provider in the US. In the case of the US, the European Commission has not decided that there is an appropriate level of data protection within the meaning of the GDPR; no such decision (Article 45 GDPR) as regards suitability has been taken. However, the third-party service provider is subject to the EU-U.S. Privacy Shield. This means that adequate protection of your personal data is guaranteed. You can download the full text of the U.S. Request the Privacy Shield Framework from the following link:  
https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg
For the delivery of your purchased products on our website (including notifications about the delivery status of the orders), we transfer your personal data to our contracted handling and shipping providers (e.g. DHL, UPS, TNT, etc.). The transfer of your personal data is based on the performance of a contract with you (legal basis: Article 6(1)(b) GDPR).
In addition, we only transfer your personal data if we are legally obliged to forward such data (for example to the authorities in the context of a criminal investigation or to the data protection supervisory authorities (Personal Data Authority)). This transfer of personal data is necessary to comply with a legal obligation (legal basis: Article 6(1)(c) GDPR).

  1. RIGHT TO OBJECT TO DATA PROCESSING ON THE BASIS OF LEGITIMATE INTERESTS

We process your personal data within the meaning of Article 2, based on our legitimate interest to guarantee IT security on our websites, to adapt our website to your needs, to carry out analysis and marketing activities, to inform you about our products and services, to remind you of purchases that have not yet been completed, to increase the reach of our products and marketing activities, to prevent fraud and abuse, to prevent payment defaults, to take care of our customers, to keep us legitimate to safeguard, strengthen and improve interests (including in court if necessary) and to carry out our international management and cooperation. Contact info@autosportfashionbrands.nl for information on balancing the interests by Paddock Store† Despite the specific possibilities to object to the processing of data described in Article 2 (such as e.g. the unsubscribe links), you have the right to object at any time to the processing of your personal data based on of our legitimate interests in accordance with Article 6(1)(f) GDPR for reasons related to your particular situation by sending an email to info@autosportfashionbrands.nl† We will then no longer process your data for these purposes, unless our legitimate interests in the processing outweigh or the processing is for the establishment, exercise or defense of legal claims. If you object to the processing of your data, we will process the personal data collected in this context to respond to your request. This data processing is necessary to comply with a legal obligation (Legal basis: Article 6(1)(c) GDPR).

  1. RIGHT TO WITHDRAW CONSENT  

If you have given us permission to process your personal data, you can withdraw this permission at any time. Withdrawal of your consent is effective for the future and will not affect the lawfulness of processing based on consent before its withdrawal.  
Unless specifically stated in Article 2, please send the withdrawal of your consent to info@autosportfashionbrands.nl.
If you withdraw your consent, we will process your personal data collected in this regard to respond to your request. This data processing is necessary to comply with a legal obligation (Legal basis: Article 6(1)(c) GDPR). 

  1. YOUR OTHER DATA PROTECTION RIGHTS  

Under the GDPR, you can at any time require us to:

  • provide you with information about your personal data that we process (Article 15 GDPR)
  • rectify your personal data stored on our systems (Article 16 GDPR)
  • delete (Article 17 GDPR), 
  • restrict (Article 18 GDPR) and/or  
  • export (Article 20 GDPR)

Send your request with at least your first and last name, either by e-mail to info@paddockstore.nl or in writing to Paddock Store PO Box 8501, 9403DA Assen, The Netherlands. If you exercise these rights against us, we will process your personal data to respond to your request. This data processing is necessary to comply with a legal obligation (Legal basis: Article 6(1) GDPR). Regardless of your rights mentioned above, you can lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data by Paddock Store is contrary to the GDPR (Article 77 GDPR).

  1. CHANGES TO THIS PRIVACY STATEMENT

The provisions of this privacy statement, including the information about cookies referred to, apply to the version in force at the time the online store is used. We reserve the right to supplement and change the content of this privacy statement. The updated privacy statement is effective from the time it is posted on our websites. In case of substantial or material changes to the privacy statement, in particular changes that affect the processing of your personal data already collected by us, we will inform you in advance (e.g. by e-mail or via our websites). .