Privacy policy
CAM-IT PRIVACY POLICY
Cam-It sells dashcams and installs them professionally. In doing so we process personal data: yours as a customer, and sometimes that of others. In this policy we explain which data these are, why we process them, how long we retain them and what rights you have. In doing so we comply with the General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is Cam-It, Eusebiusbuitensingel 41, 6828 HX Arnhem, KvK 95565531. For all privacy enquiries: info@cam-it.com, telephone +31 85 744 4043. We are not required to appoint a data protection officer and have not appointed one.
2. Which data we process
2.1 Contact and account details: name, address, e-mail address, telephone number, company name, and, if you create an account, your login details and preferences.
2.2 Order and payment details: what you have ordered, order and invoice number, amounts, payment method and payment status. We never see your full card or bank account details; these are processed directly by our payment service provider.
2.3 Vehicle and installation details: make, model, year of manufacture, trim level, registration number, vehicle identification number where necessary, particular features of the vehicle, the chosen installation position and connection points, and the contents of the installation certificate. A registration number may be personal data; we treat it as such.
2.4 Appointment details: the address at which the installation takes place, the date and time, and workshop notes.
2.5 Correspondence: e-mails, WhatsApp and chat messages, telephone notes and complaints.
2.6 Website and device data: IP address, browser and device type, pages visited and click behaviour, collected by means of cookies and similar techniques.
2.7 Visual material: photographs and video recordings we make of a completed installation, and, briefly, the test footage from a camera in order to check that it works.
3. For what purposes and on what legal basis
3.1 Performance of the contract (Article 6(1)(b) GDPR): processing and delivering your order, scheduling and carrying out the installation, drawing up the installation certificate, customer service, and handling warranty matters, returns and complaints.
3.2 Legal obligation (point (c)): keeping our records and retaining invoices pursuant to the statutory tax retention obligation.
3.3 Legitimate interest (point (f)): securing our systems and preventing fraud and misuse; improving our website, products and services; establishing or defending a legal claim; and sending e-mails about similar products and services to existing customers, from which you may always unsubscribe. Where we rely on a legitimate interest, we have weighed your interests against it.
3.4 Consent (point (a)): sending our newsletter if you are not a customer for that purpose, placing analytical and marketing cookies for which consent is required, and publishing photographs or videos in which your vehicle or you yourself are recognisable. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out beforehand.
3.5 We do not take decisions producing legal effects on the basis of automated processing alone, and we do not carry out profiling with such effects.
4. How long we retain data
4.1 Order, invoice and payment data: seven years after the end of the financial year, pursuant to the statutory tax retention obligation.
4.2 Vehicle, installation and warranty data, including the installation certificate: up to five years after completion of the work. We need these for as long as our product warranty and our 24-month installation warranty run, and in order to be able to assess any subsequent claim.
4.3 Customer account: for as long as you maintain the account. After two years without activity we delete or anonymise it, unless we are required to retain data for longer pursuant to 4.1.
4.4 Correspondence and complaint files: two years after closure.
4.5 Newsletter data: until you unsubscribe, plus a limited record of the unsubscription itself so that we do not approach you again.
4.6 Test footage from a camera: we view this only at the moment of the check and do not store it. If visual material is exceptionally required for a warranty investigation, we retain it no longer than is necessary for that investigation.
4.7 Installation photographs for promotional purposes: for as long as we use them and you have not withdrawn your consent.
4.8 Website and cookie data: in accordance with the retention periods set out in our cookie settings, as a rule no more than two years.
5. With whom we share data
5.1 We never sell your data. We share it only with parties that assist us in performing our services, and only in so far as this is necessary. We conclude processor agreements with processors.
5.2 These are the following categories:
- Webshop and hosting: Shopify, which provides our webshop, checkout and customer accounts.
- Payment service providers: for handling your payment and, where applicable, deferred payment.
- Carriers and delivery services: for delivering your order and return shipments.
- E-mail and marketing platform: Klaviyo, for order and service e-mails and, if you have opted in, our newsletter.
- Bookkeeping and accountant: for our records and tax returns.
- Suppliers, importers and manufacturers: solely where this is necessary in order to handle a warranty claim.
- Advisers, insurer and debt collection agency: in the event of damage, a dispute or an unpaid claim.
- Government authorities: where we are required to do so by law.
6. Transfers outside the European Economic Area
6.1 A number of our service providers are established in the United States or process data there, including Shopify and Klaviyo.
6.2 For those transfers we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on the standard contractual clauses adopted by the Commission, supplemented by appropriate safeguards. On request we will tell you which safeguard applies in a specific case.
7. Security
7.1 We take appropriate technical and organisational measures: encrypted connections (TLS), two-factor authentication on our principal systems, access on a need-to-know basis, and periodic updates of the systems we use.
7.2 Have you discovered a vulnerability, or do you suspect that something is wrong with the security of your data? Please let us know at info@cam-it.com. In the event of a data breach posing a risk to your rights and freedoms, we report this to the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) and inform you where we are required to do so.
8. Cookies
8.1 We use functional cookies that are necessary in order for the website and the shopping basket to work. No consent is required for these.
8.2 We use analytical cookies in order to see how the website is used, and marketing cookies in order to make advertisements more relevant and to measure their effect. For these cookies we ask for your consent in advance by means of the cookie notice.
8.3 You may change your choice at any time through the cookie settings on our website or through your browser settings. Disabling functional cookies may limit the functioning of the website.
9. Dashcam footage: who is responsible for what
9.1 The footage your dashcam records goes to you and not to us. For that footage you are the controller, not Cam-It.
9.2 Recordings of the public road may contain personal data of other people. Whether the exemption for purely personal or household use applies depends on the circumstances; the Court of Justice of the European Union has held that camera surveillance which also covers public space does not automatically fall within it. Be cautious, therefore, about publishing or sharing footage.
9.3 If you deploy dashcams for a vehicle fleet or for employees, you are the controller for that yourself. Among other things, you then need a valid legal basis, you must inform drivers and passengers, you must limit retention periods and access, and you may need the agreement of the works council.
9.4 Recording sound inside the vehicle is generally more intrusive than recording images. We advise you to switch off the audio function unless you genuinely need it, and to inform passengers about it.
9.5 We never ask for your footage on our own initiative. If you send us footage yourself in support of a complaint or warranty claim, we use it only for that purpose and delete it once the matter has been concluded.
10. Photographs and videos of installations
10.1 We sometimes produce visual material of a completed installation for our own channels, such as Instagram, TikTok and YouTube.
10.2 In doing so we obscure registration numbers and other data traceable to individuals.
10.3 If the vehicle or you yourself are recognisable, we publish only with your consent. That consent is voluntary, has no bearing on the price or on the performance of the work, and you may withdraw it at any time. Following withdrawal we will remove the material from our own channels within a reasonable period. We have no control over material that others have shared in the meantime.
11. Your rights
11.1 You have the right of access to the data we process about you, and to a copy of it.
11.2 You may have inaccurate or incomplete data corrected or completed.
11.3 You may request the erasure of your data, unless we still need it or are required by law to retain it.
11.4 You may have the processing restricted, for example while we assess an objection or a request for rectification.
11.5 You have the right to portability of the data you have provided yourself and which we process on the basis of consent or in performance of the contract.
11.6 You may object to processing based on a legitimate interest. You may object to direct marketing at any time; we will then stop immediately.
11.7 You may withdraw consent you have given at any time.
11.8 Please send a request to info@cam-it.com. We respond within one month. If your request is complex, we may extend that period by two months; we will then let you know within the first month. In order to prevent misuse, we may ask you to prove your identity; in doing so we do not ask for more data than is necessary.
12. Lodging a complaint
12.1 If you are not satisfied with the way we handle your data, please let us know first — we usually resolve matters quickly.
12.2 You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority), Postbus 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl.
13. Children
Our webshop and services are not directed at children under the age of sixteen. We do not knowingly collect data from them. If we discover that this has nevertheless happened, we delete that data.
14. Changes
We may amend this privacy policy, for example if our services or the applicable rules change. The current version is always available on our website, together with the date on which it takes effect. In the event of significant changes we will inform you actively.
Contact
Cam-It · Eusebiusbuitensingel 41, 6828 HX Arnhem · info@cam-it.com · +31 85 744 4043 · KvK 95565531 · VAT NL867183214B01
In the event of any discrepancy or ambiguity, the Dutch version prevails in the interpretation of this text.
