About Us Subcontractors for members

Subprocessors

On this page, you will find an overview of the sub-processors that WebwinkelKeur works with to offer you our services. These parties help us with, for example, providing daily customer service, technical developments, legal rulings, and much more. We believe it is important that the parties we work with adhere to certain requirements and rules when it comes to processing your data. The security requirements have been laid down with these parties in a processing agreement, which confirms that your data is properly secured.

For statistics

Google Analytics
We use Google Analytics to give us a clear picture of visitor flows, traffic sources, and page views, among other things. Based on these statistics, we can make improvements to our website. We have a processing agreement with Google for Google Analytics.

Hotjar
Hotjar helps us gain insight into how our website is used. They help us track browser behavior and, based on this information, we can make improvements to our website. In this way, we make visiting our website a pleasant experience. They do not process personal data, so we do not have a processing agreement with this party.

For communication

Mailchimp
Mailchimp helps us set up email campaigns and send automated messages on behalf of our quality mark. Examples include our newsletter and automated messages about an inspection. You can unsubscribe from many of these messages via a link at the bottom of the email. There are also messages that you must receive as a member for our services, such as inspection results. We have a processing agreement with Mailchimp.

Mandrill
Mandrill is part of Mailchimp and is an application that enables the automatic sending of emails. We have a processing agreement with Mailchimp, the new owner of Mandrill.

Help Scout
We use Help Scout for our customer service and communication with members and visitors. We use Help Scout to handle email correspondence, customer questions, and support requests. We also use Help Scout to gain insight into the quality of our services, for example by collecting feedback after contact moments. This may involve the processing of personal data such as name, email address, IP address, and the content of messages. This data is used exclusively to perform and improve our services. We have a processing agreement with Help Scout that specifies how they handle this data and how it is secured. Data is not stored for longer than is necessary for the provision of our services.

For administration

Moneybird
We use Moneybird for administration and accounting. We use it to keep track of expenses and income. Personal data is collected in order to provide our services. We are required by the tax authorities to retain certain administrative data for seven years after receipt. Data is not retained longer than necessary. Moneybird also sends letters regarding payments by post. We have a processing agreement with Moneybird.

For legal matters

Digidispuut
We are affiliated with the Digidispuut disputes committee. This committee assists us in disputes where a legal ruling is required by appointing an independent lawyer. Only the consumer can request a ruling in the event of a dispute, but they must provide personal data. This data is, of course, processed with the utmost care. We are currently busy drawing up a processing agreement with Digidispuut.

For hosting

Hetzner Online
Our website is hosted on servers belonging to Hetzner Online, which does not store any personal data. Hetzner Online's serveris located in Germany. We have a processing agreement withHetzner Online.

The data you share with us is important, and our sub-processors recognize this. We only share personal data with sub-processors that we list on our website. All of these sub-processors:

• process their data only within the EU or have taken appropriate technical and organizational security measures or have concluded a model contract with us (SCCs);

• take the necessary steps to ensure proper data protection. The level of data protection is related to a risk assessment.

We may not share data with a sub-processor that does not meet the above requirements without your explicit written consent. By only working with parties that meet these requirements, we ensure that your data is also processed correctly and is well secured by these sub-processors.