Privacy Statement

By Max B.V. attaches great importance to your privacy. We process personal data carefully and only insofar as this is necessary for our services, our business operations and compliance with legal obligations.

In this privacy statement, we explain which personal data we process, why we process this data, with which parties we may share data, how long we retain data and what rights you have.

This privacy statement applies to the By Max website, our webshop, orders placed via our webshop or other sales channels, our contact with customers and other services provided by By Max.

By Max B.V. is responsible for the processing of your personal data as described in this privacy statement.

When you place an order with us, contact us, subscribe to our newsletter or use our website, for example, we may process your personal data.

We determine the purposes for which your personal data is processed and how this is done.

For certain services, we use external parties that process personal data on our behalf. Where legally required, we make agreements with these parties about the protection and security of personal data.

Contact details

Order and customer data

Communication data

When you contact us, we may retain the content of your message and the contact details provided with it in order to deal with your question or request. This may include communication we receive via email, telephone, Facebook Messenger, WhatsApp, Instagram or other communication channels used by By Max.

Email and Gmail

For our business email communication, we use Google's Gmail. The email address info@bymaxshop.com is hosted and managed via Gmail.

When you contact us by email, your email address, the content of your message and any other data you provide in it are processed in order to deal with your question or request. Email correspondence may also be retained where this is necessary for our business administration, the performance of an agreement, the handling of a complaint or dispute, or compliance with a legal obligation.

For the technical processing and storage of email data, Google may process personal data in accordance with Google's terms and privacy policy.

Data for legal and administrative obligations

Insofar as necessary, we may process data that forms part of our financial administration, tax administration and administration relating to the legal origin and transfer of animals, animal parts and other natural history products.

Data about website use

When you visit our website, depending on your cookie settings, technical and analytical data may be processed, such as information about your device, browser, IP address, pages visited and interactions with our website.

We use your personal data for the following purposes:

We do not process personal data for purposes that are incompatible with the purposes for which this data was originally collected.

We process personal data only where there is a legal basis for doing so.

Performance of an agreement

When you place an order, for example, we need your personal data to perform the agreement with you. Without this data, for example, we cannot invoice or deliver your order.

Legal obligation

We must process and retain some data because we are legally obliged to do so. This applies, for example, to our tax records.

Legal obligations may also apply to recording and retaining data about the origin and transfer of certain protected animals and animal products.

Legitimate interest

We may process personal data where this is necessary for a legitimate interest of By Max, for example to secure our website, prevent fraud, improve our services or maintain our business records.

In such processing, we balance the interests involved and take your privacy interests into account.

Consent

For certain processing activities, we ask for your consent in advance. This applies, for example, to certain cookies, analytical and marketing techniques, and to receiving our newsletter where consent is required for this.

Where processing is based on consent, you may withdraw this consent at any time.

When you place an order with us, we need personal data in order to process your order.

We use this data for, among other things:

We retain this data for as long as this is necessary for the performance of the agreement and thereafter for as long as we are legally obliged to do so or have a legitimate interest.

For processing payments, we use MultiSafepay.

When you make a payment, the data necessary to execute and verify the payment is processed by MultiSafepay.

Depending on the payment method you choose, this may, for example, relate to your name, email address, order number, payment amount and data necessary for the relevant payment method.

We do not automatically receive all the data you use with your bank or payment method.

For more information about the processing of personal data by MultiSafepay, we refer you to MultiSafepay's privacy policy.

In order to deliver your order to you, we share the necessary delivery details with the carrier used for your order.

By Max works with, among others:

Depending on the size, weight, destination and nature of your order, one of these carriers may be used.

We share only the data necessary to deliver the order, such as your name, address details and, where necessary, contact details.

The relevant carrier then processes this data in accordance with its own privacy policy and terms.

By Max is affiliated with Trusted Shops.

We may use data relating to your order for the services of Trusted Shops, including offering buyer protection and inviting customers to post a review of their purchase.

Depending on the Trusted Shops service used, your name, email address, order number, order amount and information about the time of your order may be processed for this purpose, for example.

When you leave a review, the data you provide in doing so, such as your name and the content of your review, may be made visible as part of the review service.

Trusted Shops also processes personal data for its own purposes and under its own responsibility where this is applicable according to its services and terms.

We send newsletters about, among other things, new stock, stock uploads and special products.

For sending and managing our newsletters, we use Mailchimp.

When you subscribe to our newsletter, we process your email address and, where applicable, your name.

We use this data to send you the newsletter.

Every newsletter contains an option to unsubscribe easily. After unsubscribing, you will no longer receive regular newsletters from us.

We may retain certain data about your newsletter subscription where this is necessary to demonstrate that you subscribed or to register your unsubscribe request.

We use various Google services to analyse, improve and promote our website.

These include:

Google Analytics

With Google Analytics, we gain insight into the use of our website. This allows us, for example, to see which pages are visited, how visitors navigate through our website and which parts of our website function well.

Google Ads and remarketing

We use Google Ads to display advertisements for By Max. We also make use of remarketing options.

This means that visitors to our website may, depending on their consent and settings, encounter relevant By Max advertisements again later.

Insofar as consent is required for this, these techniques are used only after you have given your consent.

Google Tag Manager

We use Google Tag Manager to technically manage various scripts and measurement and marketing services on our website.

Google Tag Manager is therefore primarily a technical tool with which other services can be loaded or managed.

The processing of data by Google takes place in accordance with Google's terms and privacy policy.

We use Google Shopping to bring our products to attention within Google.

We also have a Google Business Profile through which customers can find information about By Max, such as our company details, location and opening hours.

When you communicate with By Max via Google or view our products and business information, Google may process personal data. This processing is subject to Google's privacy policy.

Insofar as we receive personal data as a result of an interaction with Google, we use it solely for the relevant service, communication or business operation.

By Max uses various social media channels and messaging services, including Facebook, Facebook Messenger, WhatsApp, Instagram and Pinterest.

When you contact us via one of these channels, we may process personal data that you share with us via the relevant platform. This may include, for example, your name, username, profile picture, telephone number, email address and the content of your message, depending on the platform and the data you make available yourself.

We use this data solely to communicate with you, answer your questions, make arrangements, discuss orders or products and provide our services.

The relevant social media platforms and messaging services also process personal data themselves. This processing takes place under the responsibility of the relevant platform and is subject to that platform's privacy policy and terms.

When you use social media or messaging services, we recommend that you also consult the privacy policy of the relevant platform.

In addition to our own webshop, we may offer products via external sales platforms.

We currently use, among others:

Via these platforms, personal data necessary for communication, sales, payment and delivery may be processed.

In the past, we have also used platforms such as:

The use of these platforms may be resumed in the future.

When you place an order via an external platform or communicate with By Max, both By Max and the relevant platform may process personal data. The platform's own privacy policy applies to the processing of personal data by the platform itself.

By Max trades in, among other things, taxidermy animals, animal hides, animal parts and other natural history objects.

For certain animals, animal parts and products from protected species, legal rules may apply with regard to possession, trade, transfer, origin and record-keeping.

We may therefore process and retain personal data that is necessary to record and demonstrate the legal origin and transfer of certain products.

This may, for example, relate to:

We may therefore retain this data for as long as this is necessary to comply with legal obligations or to demonstrate the legal origin and lawful transfer of a product.

Where a statutory retention obligation applies, we cannot delete this data upon request for as long as that obligation continues.

Our website uses cookies and similar technologies.

We use these technologies for, among other things:

For managing cookie preferences, we use Cookie Confirm.

Cookie Confirm records your choices regarding cookies and can ensure that certain analytical or marketing techniques are activated only after you have given your consent.

Functional cookies that are necessary for the functioning of the website may be used without consent. For cookies and technologies for which consent is required, we ask for this consent before the relevant technologies are used.

You can adjust or withdraw your cookie preferences via the cookie banner.

For tracking cookies, prior information and consent are required where the law prescribes this.

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a statutory retention obligation or another legitimate interest requires a longer retention period.

The retention period therefore differs according to the type of data.

Order and invoice data

Data that forms part of our financial and tax records is retained for as long as the statutory retention obligation requires.

For basic records, a retention period of 7 years generally applies.

Newsletter data

When you unsubscribe from our newsletter, we no longer use your email address to send regular newsletters.

We may retain limited data about your subscription or unsubscribe request where this is necessary to respect your choice or to demonstrate that we comply with our legal obligations.

Order and customer data

We may retain data for as long as this is necessary for the performance and settlement of an agreement, for example for warranty, returns, disputes or administration.

Animal legality records

Data and documents relating to the legal origin and transfer of protected animals, animal parts and other relevant products may be retained for as long as a legal obligation or the need to demonstrate lawful origin makes this necessary.

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unlawful use, alteration or disclosure.

We restrict access to personal data to persons and parties who need this data for their work.

However, no method of storage or transmission via the internet can guarantee complete security. Therefore, despite our measures, we can never guarantee absolute security.

Under the GDPR, you have various rights in relation to your personal data.

Under certain conditions, you can:

These rights are not unlimited. For example, we cannot always delete data where we are legally obliged to retain it, such as certain data from our tax records.

When you submit a request, we may verify whether the request actually comes from you. In doing so, we do not ask for more data than is necessary to establish your identity.

You can address your request to:

We handle requests within the statutory period. In principle, we respond within one month. In certain situations, this period may be extended in accordance with the GDPR.

Do you have a complaint about the way we handle your personal data? Please contact us first. We will try to resolve your complaint as well as possible.

You also always have the right to lodge a complaint with the Dutch Data Protection Authority if you believe that we are not processing your personal data in accordance with the applicable privacy legislation.

We may amend this privacy statement if our services, business operations, systems used or legal obligations change.

On this page, you will always find the most recent version of our privacy statement.

If a change has significant consequences for the way in which we process personal data already collected, we will inform you about this where we are legally obliged to do so.

Do you have questions about this privacy statement or about the way By Max handles your personal data? Please contact us.