You have the right of access. This means you can request an overview of your personal data and what they are used for.
To respect everyone's privacy, we can only provide access to data that concerns you.
What does GDPR mean for me?
What is GDPR?
The General Data Protection Regulation (GDPR) has been in force since 25 May 2018. This is the privacy legislation to better protect the personal data of European citizens. What does that mean to you?
- Our Privacy Policy is more transparent and simpler than ever.
- You can easily manage your personal data and exercise your rights.
- You decide how we may use your personal data. You can make this choice easily via your privacy settings.
- Our Cookie Policy has also been changed to give you more control.
More about....
Your data belongs to you. Period. And to give you more control over your personal data, you can easily manage it by submitting a request to exercise your privacy rights.
There are five types of requests
You can have your personal data corrected, by exercising your right to rectification. You can also object to or request a restriction of the processing of your personal data. This can only be done in exceptional situations. Details about this can be found in our privacy policy. Do you want to change your general data (e.g. your address or telephone number)? You can only do this by contacting customer service at telephone number 1999.
Deletion of your personal data. This is also known as the right to erasure or 'right to be forgotten'. You must understand that we require some information to provide your services. There are also data we are legally required to retain. So we cannot honour a request to erase such data.
Delete which data?
You have the right to have your personal data erased, without undue delay, in the following cases:
- your personal data are no longer needeed for the purposes for which they were collected or processed by BASE.
- you withdraw your previously granted consent for processing and BASE has no other legal grounds for processing.
- you object to the processing of your personal data and there are no overriding legitimate grounds for further processing by BASE.
- your personal data have been unlawfully processed.
- your personal data must be erased for compliance with a legal obligation.
- your personal data was collected when you were still a minor.
Good to know
We cannot always erase all the requested personal data, for example when
- the processing thereof is necessary to establish, exercise or defend a legal right
- or because we are required to retain the data about our customers' mobile telephone traffic for 12 months for the legal authorities and State security.
We will provide you with more information about this in our reply if you submit a request for erasure of your data.
Requesting access to or transfer of your data. You can request access to the personal data that you have given us. You can also request that it be transferred to a third party. You will receive the data in a structured, readable format that is easy to transfer. This is the right to portability of your personal data.
You can expressly choose not to receive any more commercial communication from BASE.
What happens, exactly, if you exercise your right to object?
- You can see that your right to object is active in My BASE.
- You are automatically assigned the most protective privacy level: ‘opt out’.
- You will no longer receive any promotional and/or campaign offers from us by telephone, post, SMS or email. In other words, we shut off all your communication channels.
- We will only contact you in connection with the execution of your contract and when we are required to by law.
And if you change your mind?
If you change your mind in the future and decide that you do want to receive commercial communication from BASE after all, you can...
- deactivate your right to object in My BASE.
- change your privacy level to ‘opt in’.
Good to know
Have you unsubscribed from all commercial communication, yet you are still receiving newsletters or/and magazines from BASE? Then we have more than one email address on file for you. Unsubscribe via the unsubscribe option at the bottom of these communications.
Who can submit a request?
Everyone has privacy rights and can submit a request. This includes customers and former customers, as well as those who have never been a BASE customer. Only the procedure differs. How, exactly, is explained below.
Note: You can only submit a request for yourself or your minor children.
How?
To exercise your privacy rights (such as requesting what data BASE has from you or wanting to see your data deleted) you can go to My BASE as a customer. If you do not have access to My BASE or are not a customer, we will be happy to help you in in our BASE Shops.
More information about your privacy rights and the formalities for exercising your rights (e.g. verification of your identity) can be found in point 8 of this privacy policy.
Do you have a pending request? What now?
You will receive an answer to your request via email or the post within 30 calendar days. We can extend the period by up to an additional 60 calendar days if...
- your request is unclear or complex and we require more information.
- we receive more requests within that period than we are able to process.
If this applies to your request, you will receive an email or letter about this within the 30 calendar days.
Manage your privacy settings
You naturally retain control over your data. So you choose which personal data you share with us for our commercial purposes. You make this choice by opting in or opting out for personalized advertising via My BASE.
You receive personalized advertising, for both BASE products you already have and for BASE products and services you don't yet have. To do this, we use your data as described in the privacy policy , including your traffic data (such as your IP address) and your commercial profile.
What does this mean for you?
We also keep you informed when we expand a product, and we help you get the most out of your products. And when a new product is introduced that may interest you? We send you a mail, of course.
You do not receive personalized advertising. We only inform you about the BASE products and services you already have. To do this we use the personal data specified in our privacy policy, with the exception of your traffic data (e.g. your IP address) and your commercial profile.
What does this mean for you?
We also keep you informed when we expand a product, and we help you get the most out of your products.
Checking and changing your privacy setting
You can check and change your privacy setting via My BASE. If you change your setting, it may take up to 72 hours before the change takes effect.
Privacy for minors
BASE has a strict policy with respect to the processing of minors' personal data. If we know or could know that you are under 16 years of age, for example when you create a personal login, your personal data will always be automatically processed in accordance with the most protective privacy level (‘opt out’). Otherwise, to the extent required by law, BASE will seek the prior consent of your parent(s) or guardian.
So, are you under 16 years of age and we know this or could know this (e.g. by your date of birth at registration)? Then your privacy setting is automatically ‘opt out’. This is the most private level. No one can change this until you turn 16.
Manage your cookie preferences
Read more about cookies and our Cookie Policy in our FAQ 'How to manager your cookie preferences'.
You can always change your cookie preferences via the ‘Cookie preferences’ link in the footer (at the bottom) of the website.
