May 24, 2018

Bloeise takes your privacy very seriously. Because we are critical consumers ourselves. Because we believe that you can also run your shop without the unsolicited collection and use of personal data. And because we prefer to be successful simply by providing high-quality services.

Privacy officer / Data Privacy Officer
Questions? Comments? Please contact Thomas Lapperre. He likes to start the conversation.

Your personal data at Bloeise
This is such a comprehensive list of how Bloeise collects and stores personal data, and why.
What is personal data? Every piece of information with which you identify a person. Also your business address, an IP address or Twitter handle. That is why privacy applies to B2B (company to company), which Bloeise does, just as much as B2C (company to consumer).

Customers and potential customers

• We must be able to invoice, contact and verify customers. We collect for that Name and address data, contact details (telephone / e-mail), company details (VAT number, Chamber of Commerce number). We lay for the tax authorities this information fixed, for a minimum of seven years as required by law. For this we use the online service WeFact (data processing agreement concluded on April 30).
• We make parties with whom we speak conversation notes and notes about. So that we know what is going on with the customer, or can prepare a quote. This data is not shared with anyone outside of Bloeise.
• Input supplied, command versions and final versions we keep in the customer archive. This allows us to send our customers written texts again, verify a fact or answer a question. It also helps with new assignments. We save this information long time, seven to ten years. We believe we have a foundation for this because in our industry, communication and marketing, it is more common to occasionally hire a freelancer than a regular employee regularly. That loose contact is about many years, with months of silence, and suddenly a repeat of assignments.

As a customer, do you not agree with the above? We would of course like to hear that. Options are:

• If requested, we will sign a non-disclosure agreement or provide a statement by e-mail.
• We send the files that we now have for verification.
• We can explicitly agree that conversation notes, input provided, assignment versions and final versions will be deleted from us from a certain point in time. For this we ask for confirmation by e-mail, because after that we really no longer have a version "somewhere'have standing. Gone is gone.

Bloeise works in the cloud (hip!) Through Dropbox with multi-factor authentication.

• Bloeise has concluded an agreement with Dropbox as a data processor according to the GDPR as of 23 May 2018
• Our accountant has access to our administration, including the invoices that contain personal data. 

Website - Cookies and Google Analytics

A website uses cookies for various reasons. Technically so that your website works, analytically so that you as a website owner have insight into your traffic and commercially so that you can track visitors outside your website and display advertisements.

We use cookies as follows:

• Cookie notification: you are informed that Bloeise.nl uses cookies.
• Disable cookies: if you click on NO then all plugin data will be deactivated.
• Cookie list: below you will find the cookies Bloeise on May 8, 2018 used.

Cookie list Bloom

We sort the Bloeise.nl cookies sorted. Unfortunately, they have unclear names. That is why we explain how they work. Further in our privacy statement, we further explain matters. For example, how MailMunch works.

Cookies or not?
It is crooked, but to register whether or not you accept cookies ... we use a cookie. Otherwise you will be bothered with that cookie message every time. 

• cookie_notice_accepted = Placing other cookies or not.

Server
Our server uses PHP. That is a programming language. The website can run on this.

• PHPSESSID = your session will be registered anonymously on the server.

Cloudflare
Cloudflare protects the website. It works as a secure intermediate step. Is the site on the server flat? Cloudflare ensures that you can still visit the site.

• __cfduid = identifies an individual user of the same IP address without storing personal data.

Google Analytics
Where do visitors come from? Which pages did they visit? For how long? Answers to these types of questions help improve the website.

• _ga = Provides a random unique ID to track user, session, and campaign data.
• _gid = Gives a random unique ID to generate statistical data about how the visitor uses the website.

Autoptimizer
As a user you want a fast site. Google likes that too. Autoptimizer is a WordPress plugin for this.

• autoptimize_feed = registers whether the cache, that is, the downloaded files needed to view a page, has been refreshed. If so, your browser will be told: retrieve again. If not: faster site for a second visit.

Visual Composer
A nice site reads more pleasantly. Visual Composer provides additional functions such as a counter or moving pictures. You can also create a contact form with it.

• vchideactivationmsg_vc11 = This cookie stores your completed fields on the contact form. Are you making a mistake? Then you will not immediately lose everything.

Newsletter
We use MailMunch and MailChimp to collect mail addresses. When you choose to log in, it is noted on your PC via a cookie.

• mailmunch_second_pageview = MailMunch
• mailmunch_subscribed_106792 = MailMunch
• mp_8682fa18b56f3635a641d400aa1fd6b5_mixpanel = MailChimp
• __zlcmid = remembers when you have already registered.

WordPress
Wordpress is our CMS system. With this we maintain the site. These cookies are functional. They ensure that the site runs smoothly.

• wordpress_logged_in_xxxxx = for authors only. (but they also fall under the privacy law)
• wordpress_test_cookie: test.
• wp-settings-3: settings.
• wp-settings-time-3: settings.

Google Analytics

_ga and _gid are the coookies for Google Analytics. This allows Bloeise to measure visitor behavior (visits, time on the page, conversion, browser, country, etc.) and thus improve services, such as writing more articles that are appreciated. Bloeise does not share this information with third parties. See the Google Analytics settings for data sharing from Bloeise.nl:

• Bloeise has concluded an agreement with Google as a data processor according to the GDPR as of March 26, 2018.
• Collected data is not shared with third parties. 

Data at user level and event level is also stored by Google Analytics. Think of IDs that you can trace as a person. These are in particular DoubleClick cookies, Advertising ID from Android, Identifier for Advertisers from Apple. Under the GDPR this may no longer be stored indefinitely. On April 12, 2018, as a website manager with Google Analytics, you have the option to 'data retention' configure.

• Bloeise has data retention in the shortest possible time (14 months)
• With a new activity by the same ID, this period is not reset. That means: personal data in Google Analytics will always be deleted after 14 months. 

Our starting point with Google Analytics is that we gain insight into click behavior in large numbers. We do not want to know at a personal level what someone is doing on the site. Everything we can do to stop the collection and analysis of data at that level, we do. Are we missing something? Which to hear we like.

Remarketing

Are you logged in to Google or Facebook (which everyone does by default) and visit a website that registers that? Then you can then be accessed on other websites. So: those red shoes that they didn't have in your size on the e-commerce site follow you on the news sites.

• Bloeise collects remarketing data on December 3, 2018. 

WordPress

Bloeise uses WordPress and forms. That means that if you make a contact request or participate in a competition, for example, your contact information will be registered in WordPress. The goal is to be able to contact you. The website builder and guest bloggers have access to WordPress, but only the website builder can view the forms.

• We clean competition forms and contact requests once a year. 
• There is still a discussion going on as to whether hosting parties and website builders now have to conclude a data processor agreement with all customers. Bloeise follows this discussion. 

Strossle - appropriate content based on the page

Below each blog you will find a block with 'Read more'. That is filled with a script that tries to determine which content best fits that blog, so that you click on it faster. This is a script from Strossle and it looks at the click behavior. Does not work with a cookie. If you click on Sponsored, Bloeise will receive a payment for it. (because you also leave Bloeise).

• The suggestions at the bottom of each blog page are solely based on the page itself, not on your personal data.
• Strossle amended the conditions on 24 May 2018 and there is a data processing agreement. 

Newsletter - never spam and you can always unsubscribe

Bloeise actively collects e-mail addresses for the monthly newsletter. We do this by offering downloads: super relevant content that gives real tips and explanations. Like the MailChimp manual for example. Do you receive the Bloeise newsletter and do you think you have not signed up for it? You have the following options:

• Sign out. You will find several options as standard in every newsletter: directly with one click, via your preferences or via a request e-mail. When you unsubscribe you can also indicate that you experience this as spam. But beware: Bloeise does not spam. How do you get on the list? Well:
• Request. MailChimp keeps track of how you got on our newsletter list. Do one request and we will find it for you on which download you have requested. Downloads are only for newsletter readers.

Bloeise has concluded an agreement with MailChimp as a data processor according to the GDPR as of 23 May 2018.

In addition, important to remember:

• Are you a Bloeise customer? Then we have a customer relationship and we can inform you about similar products and services. Like via the newsletter. 

MailMunch - where you are on the page 

We use the free WordPress plugin specifically MailMunch (recommended). MailMunch keeps track of how far you are on the page. Are you visiting Bloeise for the first time? Then you get a non-interfering pop-up halfway on the right (this is called non-intrusive) to invite you to the newsletter. MailMunch keeps track of which e-mail address via which form is registered on which date, and communicates that to MailChimp. This data serves no other purpose. Bloeise has concluded an agreement with MailMunch as a data processor according to the GDPR as of 23 May 2018.

Do you see a PDF that you want to read? It is only for newsletter readers. But after receiving the PDF, you can safely unsubscribe, and that on average does one to half a percent. We think that's fine, because we want our newsletter to be appreciated, not just tolerated. 

MailChimp - You email address and click behavior

All mail addresses are in MailChimp. It keeps track of who opens the newsletter and who clicked on what. With this we learn which content is interesting and which is not. We want to remain relevant. With this MailChimp builds a reader profile. A score of 1-5 indicates how you open and click through the newsletter. You can see what you have clicked on for each newsletter.

• With your registration via MailMunch for the newsletter, you give your approval for receiving the newsletters and following your click behavior from the newsletter. 
• You can always unsubscribe. 
• Curious about your click behavior via MailChimp? Do one application. We first request a verification of your email address.

Other

Bloeise uses, like so many companies, the following services where personal data is stored can turn into. That sounds more vague than we want, but we're just a user of it. We do not actively collect personal data and can only report that we use it:

• Twitter
• Facebook
• LinkedIn
• Google Plus 
• Mollie: payment options. Mollie indicates that no data processing agreement is needed.

We do not use a CRM system.

Data breach reporting obligation

Bloeise knows the data breach reporting obligation. Are personal data missing or lost? Then we report that to the Dutch Data Protection Authority. In the event of a serious data breach or danger to the persons behind, we must also inform the persons directly.

• There were no data breaches at Bloeise on November 15, 2017.
• On February 20, 2018, there were no data breaches at Bloeise.
• There were no data breaches at Bloeise on 12 April 2018. 
• There were no data breaches at Bloeise on 8 May 2018.
• On May 23, 2018, there were no data breaches at Bloeise.

Contact

Do you have further questions or suggestions? Take a moment Contact on. We use this as a visitor for you generous to have informed. If you find a more comprehensive privacy statement, we would like to hear from you. Even if you miss something. Or if we have explained something wrong. Privacy must be the starting point for every company. This is how we put the customer first.