Privacy policy
Version 1.0
This policy applies to the webshop of Camera-tweedehands.nl B.V.. Version 1.0.
Who we are
Camera-tweedehands.nl B.V. buys and sells second-hand cameras, lenses and photographic accessories. We are the controller for the personal data described in this policy.
Camera-tweedehands.nl B.V., Kerkstraat 47-Bis, 4191 AA Geldermalsen, The Netherlands. Chamber of Commerce 80564674, VAT NL861717971B01.
You can reach us about your data at klantenservice@camera-tweedehands.nl or 085 301 83 32. We respond to requests about your privacy rights within one month.
What we store in your browser, and how you control it, is set out in the cookie policy.
What we record, why, and for how long
We only record what we need to sell you something, buy something from you, or run the shop. Below you will find, per purpose, the legal basis under the GDPR and the retention period.
Most periods come out at seven years. That is not our choice: Dutch tax law requires us to keep our administration for seven years, and an order, invoice, payment and shipment are all part of it. After those seven years we delete them.
| What | Details |
|---|---|
| Your account | Name, e-mail address, password (encrypted) and your language and market preference, so you can sign in and find your orders. You can also sign in with your Google account; we then receive your name, e-mail address and Google account id from Google, not your password. Legal basis: performance of the contract. Retention: until you ask us to delete your account. |
| Orders and invoices | Name, address, e-mail address, telephone number, order lines, invoice and payment status. Legal basis: performance of the contract and a legal obligation for our administration. Retention: seven years. |
| Quotes, trade-ins and purchases from you | The details of the equipment you offer, your contact details, our offer and the bank account we pay out to. Legal basis: performance of the contract and a legal obligation for our administration. Retention: seven years. |
| Warranty, repair and returns | Order number, serial number, description of the complaint and the correspondence about it. Legal basis: performance of the contract and our statutory obligations towards you as a consumer. Retention: seven years, so we can still handle a warranty claim later on. |
| Customer service | Your e-mails, chat messages and telephone notes, together with the order they relate to. Legal basis: performance of the contract and our legitimate interest in handling questions properly. Retention: with the order, so seven years. That is deliberate: for a warranty question about a four-year-old camera we want to be able to read back what was agreed at the time. |
| Chatting with Camy | Camy is the AI assistant in the chat on our website. What you type goes, together with the page you chat on, to the service that runs Camy; the answer is written by an AI language model from Anthropic. If you are signed in, your customer number and e-mail address go along too, and from your account the order or quote you ask about, so Camy can look up your own details. Your IP address goes along to limit abuse; we do not keep it. If you ask for a colleague, the conversation so far goes with your name and e-mail address into our customer service platform, and from there the Customer service row applies. Legal basis: our legitimate interest in answering questions quickly, and for a question about your own order or quote the performance of the contract. Retention: the course of a chat with Camy is kept for 90 days. |
| Payments | Your payment runs through Pay.nl. We see the payment method, the status and the amount; your full card number never reaches us. Legal basis: performance of the contract. Retention: seven years, as part of our administration. |
| Shipping | Name, address, e-mail address and telephone number go to Sendcloud, which passes them on to the carrier delivering your parcel (PostNL, DHL, DPD or FedEx, depending on the destination). Legal basis: performance of the contract. Retention: seven years, with the order. |
| E-mail we send you | Order confirmations, shipping notices and messages about quotes are sent through Mailgun. We keep a copy of the messages we send in our e-mail overview, so customer service can see what you received. That copy is stored encrypted and falls under the retention period of the row below. Legal basis: performance of the contract. |
| Delivery of that e-mail | To see whether our messages arrive, we record the recipient address, the subject and the delivery status for each e-mail sent. If that address belongs to an account, we link the record to it, so we can see what was sent to you when you have a question. If you open a message or click a link in it, we record that too, along with the IP address at that moment, the approximate location derived from it and the program you read it in. We use this to notice when an address is wrong or our messages are caught by a spam filter, and to check whether a message reached you when you have a question - not to follow what you do elsewhere, and not to build a profile of you. Legal basis: our legitimate interest in deliverable e-mail and in customer service that can look back; you can object to this. Retention: 90 days, after which the record and the stored copy of the message are deleted. |
| Stock alerts | Your e-mail address and the product you want to hear about. Legal basis: your consent. Every message contains an unsubscribe link; if you unsubscribe, we delete the address within thirty days. |
| Newsletter | Your e-mail address and the language you signed up in. Legal basis: your consent when you tick the newsletter box yourself (on the website, in your account or when you accept our trade-in offer - that box is never pre-ticked). When you buy something from us we may also send you our newsletter about similar products on the basis of the customer relationship (Telecommunications Act, article 11.7, paragraph 3); we tell you so next to your e-mail address in the checkout, where you can tick "I'd rather not" - then you receive nothing, and an earlier subscription for that address ends as well. Every newsletter contains an unsubscribe link; if you unsubscribe, we delete the address within thirty days. To be able to prove this, we record for each subscription, unsubscription and refusal the date, the page it happened on, the legal basis, your language and the IP address at that moment - linked to a hashed version of your e-mail address, not the address itself. Retention of that record: five years. |
| Search in the shop | What is searched for, how many results that returned and which product was clicked, so we can see where our search falls short. No name, e-mail address or IP address is stored with it; we cannot link a search to a person. A search in the trade-in wizard is also part of that wizard's record (next row). Legal basis: our legitimate interest in a working shop. Retention: 180 days. |
| The trade-in wizard | What you do in the wizard before you send a quote: that you started it, what you search for and how many results that gave, which equipment you add, change or remove (with its condition and shutter count or operating hours), a remark you add, which step you reach, the offer we show you and - once you send it - the quote number. With each step we record the IP address and the browser you use (user-agent), and a random code that stays with the draft in your browser, so a later visit continues the same session. No name or e-mail address: those are only in the quote you send. We use this to see where the wizard falls short and to recognise requests from the same sender. Legal basis: our legitimate interest in a working trade-in process and in preventing misuse; you can object to this. Retention: the IP address and browser are deleted after twelve months, the rest stays. |
| Page visits | Per day we count how often each page of the shop is opened, in which language, on a phone, tablet or computer, from which website a visit came and which page was opened next. No IP address, no code and no cookie is kept, so a visit cannot be linked to a person or to an earlier visit. Legal basis: our legitimate interest in a working shop. Retention: 25 months. |
| Where your visit came from | When you send a quote or place an order, we store with it how you reached the shop: the campaign in the link (utm tags), an ad click id (such as gclid), the website that referred you, the page you landed on and when. A link in our own e-mails about your order or quote does not count as a source; the newsletter does. With consent for marketing, the campaigns, ad clicks and websites that brought you here in the last 90 days go along too (from the cth_attribution_touches cookie). With your account we keep where your first quote or order came from, and never change it afterwards. We use this to see which channels bring customers, not to approach you. Legal basis: our legitimate interest in knowing which channels work, and your consent for the visits of the last 90 days. Retention: with the quote or order, so seven years; with your account until you ask us to delete it. |
| Security and availability | Our hosting and security providers record in their own logs which requests come in, including IP address, in order to fend off attacks and investigate outages. We do not store website visitors' IP addresses ourselves - the only exceptions are described above: when you open our e-mail, the IP address in the newsletter consent record and the trade-in wizard - and we do not use these logs to build a profile. Legal basis: our legitimate interest in a secure and available shop. Retention: that of the provider concerned. |
Deleting your account
If you ask us to delete your account, we will. Your sign-in details, preferences and profile are removed.
What we cannot fully discard are the invoices and the orders belonging to them. Those have to be kept for seven years because tax law requires it, and an invoice without a name and address is not a valid invoice. What we do instead: everything that does not need to be in that administration is disconnected from you. Your account disappears, your correspondence and preferences are removed, and the remaining order data is used only for our administration and no longer to contact you. Once the seven years are up, that goes too.
Backups
Every night we make a backup of the database. It is kept on our own server and, together with the uploaded files, sent encrypted to two storage providers in the EU: Cloudflare R2 and Hetzner. We keep a backup for 30 days; after that it is deleted. Whatever you ask us to delete is therefore gone from the backups too within 30 days at most. We use backups only to restore the shop after a failure and to check that restoring works.
Analytics and advertising, only with your consent
Apart from the cookie-free count of page visits and the trade-in wizard's record described above, the shop works without any form of measurement. The tools below are only switched on after you have accepted the relevant category in the cookie banner, and they stop the moment you withdraw that consent.
Analytics. With consent for analytics we use Google Analytics 4 to see how the shop is used: which pages are visited and where people drop out of checkout. Your IP address is truncated in the process. We also use Microsoft Clarity, which records how a page is clicked and scrolled; what you type into form fields is masked, so your details do not end up in the recording.
Advertising. With consent for marketing we use the Meta pixel and the Meta Conversions API to measure which advertisement leads to a purchase. Through the Conversions API we send Meta a hashed version of your e-mail address and telephone number (the em and ph fields) together with the values of the _fbp and _fbc cookies. Hashing means Meta receives an irreversible fingerprint rather than the address itself, but Meta can still match it to an existing Facebook or Instagram account. We also remember which campaign first brought you here, in the cth_attribution_first cookie, and which campaigns, ad clicks and other websites brought you here in the last 90 days, with the date and the page you landed on, in the cth_attribution_touches cookie.
Affiliates. When a TradeTracker partner site sends you to us, TradeTracker counts that click. With consent for marketing we place TradeTracker's two cookies (TT2_ and TTS_ followed by the campaign number) and, when you then place an order, our server reports the sale to TradeTracker: the order number, the amount excluding VAT and shipping, and the click code from the link - no name, address or e-mail address. That way the partner site earns its commission.
Map. With consent for marketing we show an embedded Google Maps map on the showroom page. Google then receives your IP address, among other things, and may set cookies. Without that consent we do not load the map and you only see our address with a link to Google Maps.
Videos. Embedded YouTube videos likewise load only with consent for marketing. YouTube (Google) then receives your IP address, among other things, and may use cookies or similar storage. Without that consent you see a notice in their place with a button to your cookie settings.
Where this data goes. Google, Microsoft and Meta process this data partly in the United States. That transfer relies on the EU-US Data Privacy Framework, to which these parties are certified, and on the European Commission's standard contractual clauses for cases falling outside it.
What is switched on right now. Google Analytics 4, Microsoft Clarity and the Meta pixel are not yet in use; they are described here because they will be switched on shortly, and then too never without your consent. Of the tools above, only the campaign attribution (cth_attribution_first and cth_attribution_touches) is already active, and that too only after consent for marketing. The TradeTracker affiliate links are active as well; their cookies and the sale report likewise only after consent for marketing. The same goes for the Google Maps map on the showroom page and for embedded YouTube videos. The current state is always shown in the table on the cookie policy.
We do not take automated decisions about you on the basis of this data, and we do not sell your data.
Cookie consent and the record of it
Your cookie choice is stored for six months in the cc_cookie cookie, with an anonymous identifier in cth_consent_anon_id. We record that choice - which categories, the time, and the version of this policy - because we must be able to demonstrate that consent was given. That log contains no name or e-mail address. Retention: five years.
You can change or withdraw your choice at any time via the cookie preferences at the bottom of every page. Withdrawing does not change anything about what happened while the consent was in place.
Who else sees your data
We share personal data only with parties that need it to do work for us: the shipping platform and the carriers, the e-mail service, our customer service platform, the service behind our chat assistant Camy and the AI language models it uses, our hosting and IT providers and - with your consent - the analytics and advertising parties named above. Processor terms forming part of our agreement with them apply to those parties.
Our payment service provider holds a separate position. It processes your payment data not only for us, but also to meet its own statutory obligations as a payment service provider, and is responsible for that itself.
Beyond that, we share data only where the law obliges us to, for instance with the Dutch tax authority, or where it is necessary to bring or defend a legal claim.
Your rights
You may ask us for a copy of the data we hold about you, have it corrected or deleted, have its use restricted, receive it in a portable format, or object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time.
Send your request to klantenservice@camera-tweedehands.nl; we respond within one month. If you are not satisfied with how we handle it, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.