Terms & Conditions

General Terms & Conditions Real Solutions Haarlem. Version 20-02-2026.

Click here for a printable version.

Article 1. General

Article 2. Personal data

Article 3. Use of the website & webshop

Article 4. Retention of title

Article 5. Offers and conclusion of agreements

Article 6. Prices

Article 7. Payment

Article 8. Delivery, delivery time, loss and/or damage

Article 9. Warranty and liability

Article 10. Return conditions

Article 11. Reasons for returns

Article 12. Force majeure

Article 13. Applicable law and disputes

Article 14. Retention of title (Nur Deutsche Kunden / Only for German customers)

EIGENTUMSVORBEHALT

Additional terms and conditions regarding WarrantyCare service products

Always make a backup of your data.

Additional terms for Real Solutions Haarlem OUTLET items

Outlet items and the corresponding stock levels are maintained almost in real time. Prices are per unit excluding VAT ex Haarlem.

Where the Outlet Conditions deviate from the General Terms & Conditions, the Outlet Conditions apply.

Data Processing Agreement

Version 20-02-2026

This data processing agreement is an appendix to the "General Terms & Conditions Real Solutions Haarlem. Version 20-02-2026." (hereinafter: the Main Agreement) between Customer (hereinafter: Controller) and Real Solutions Haarlem B.V. (hereinafter: Processor).

Article 1. Purposes of processing

  1. Processor undertakes, under the terms of this Data Processing Agreement, to process personal data on behalf of the Controller. Processing will take place exclusively within the framework of the Main Agreement and for handling orders and payments for products or services of the Controller, plus purposes reasonably related thereto or determined with further consent.
  2. The personal data processed by Processor under the activities referred to in the previous paragraph and the categories of data subjects from whom such data originates are included in Appendix 1. Processor will not process the personal data for any purpose other than as determined by the Controller. The Controller will inform the Processor of the processing purposes insofar as these are not already stated in this Data Processing Agreement.
  3. The personal data to be processed on behalf of the Controller remain the property of the Controller and/or the relevant data subjects.

Article 2. Processor obligations

  1. With regard to the processing referred to in Article 1, the Processor shall ensure compliance with applicable laws and regulations, including in any event the laws and regulations in the field of personal data protection, such as the General Data Protection Regulation (GDPR).
  2. The Processor shall, upon the Controller's first request, inform the Controller about the measures taken to meet its obligations under this Data Processing Agreement.
  3. The Processor's obligations arising from this Data Processing Agreement also apply to those who process personal data under the authority of the Processor, including but not limited to employees, in the broadest sense of the word.
  4. The Processor shall immediately notify the Controller if, in its opinion, an instruction from the Controller violates the laws referred to in paragraph 1.
  5. The Processor shall, insofar as within its power, provide assistance to the Controller for carrying out data protection impact assessments (DPIAs).

Article 3. Transfer of personal data

  1. The Processor may process personal data in countries within the European Union. In addition, the Processor may transfer personal data to a country outside the European Union, provided that country ensures an adequate level of protection and the Processor complies with the other obligations under this Data Processing Agreement and the GDPR.
  2. In particular, when determining an adequate level of protection, the Processor will take into account the duration of the intended processing, the country of origin and the country of final destination, the general and sectoral rules of law applicable in the relevant country, as well as the professional rules and security measures observed in those countries.

Article 4. Allocation of responsibilities

  1. The permitted processing will be carried out by employees of the Processor within an automated environment.
  2. The Processor is solely responsible for the processing of personal data under this Data Processing Agreement, in accordance with the Controller's instructions and under the Controller's express (final) responsibility. For other processing activities, including but not limited to collection of personal data by the Controller, processing for purposes not communicated by the Controller to the Processor, processing by third parties and/or for other purposes, the Processor is expressly not responsible.
  3. The Controller guarantees that the content, use and instruction to process personal data as referred to in this Data Processing Agreement are lawful and do not infringe any third-party rights.

Article 5. Engagement of third parties or subcontractors

  1. The Processor may use only the third parties listed in Appendix 2 in the context of this Data Processing Agreement without additional consent of the Controller, which consent may be subject to additional conditions.
  2. The Processor shall ensure that these third parties undertake in writing at least the same obligations as agreed between the Controller and the Processor.
  3. The Processor warrants proper compliance by these third parties with the obligations under this Data Processing Agreement and, in case of faults by such third parties, the Processor shall be liable for all damage as if it had committed the fault(s) itself.

Article 6. Security

  1. The Processor shall use best efforts to take sufficient technical and organisational measures with regard to the processing of personal data to protect against loss or any form of unlawful processing (such as unauthorised access, alteration or disclosure).
  2. The Processor does not guarantee that security will be effective under all circumstances. If an expressly described level of security is absent, the Processor shall use best efforts to ensure a level of security that is not unreasonable in view of the state of the art, the sensitivity of the personal data and the costs of implementing security measures.
  3. The Controller shall only provide personal data to the Processor for processing if it has ensured that the required security measures have been taken. The Controller is responsible for compliance with the measures agreed between the parties.

Article 7. Data breach notification

  1. The Controller is at all times responsible for notifying a security incident and/or personal data breach to the supervisory authority and/or data subjects where and insofar as a legal obligation applies. In order to enable the Controller to comply with such obligation, the Processor shall notify the Controller without undue delay of suspected security incidents and/or personal data breaches and shall provide the information reasonably necessary to enable (where required) notifications.
  2. The notification obligation includes at least notifying the fact that an incident has occurred. In addition, the notification obligation includes:
    • the nature of the personal data breach, where possible indicating the categories and approximate number of data subjects and personal data records concerned;
    • the name and contact details of the data protection officer or other contact point where more information can be obtained;
    • the likely consequences of the personal data breach;
    • the measures proposed or taken by the Processor to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

Article 8. Handling data subject requests

  1. If a data subject submits a request to exercise their statutory rights to the Processor, the Processor shall forward the request to the Controller, and the Controller shall handle the request further. The Processor may inform the data subject thereof.

Article 9. Confidentiality

  1. All personal data received by the Processor from the Controller and/or collected by the Processor itself in the context of this Data Processing Agreement is subject to a duty of confidentiality towards third parties. The Processor shall not use this information for any purpose other than that for which it was obtained, even if it has been put into a form that does not allow attribution to data subjects.
  2. This duty of confidentiality does not apply insofar as the Controller has given express consent to provide the information to third parties, where disclosure is logically necessary given the nature of the instruction and the performance of this Data Processing Agreement, or where there is a legal obligation to disclose information to a third party.

Article 10. Audit

  1. The Controller has the right to have audits carried out by an independent third party bound by confidentiality to verify compliance with all provisions of the Data Processing Agreement and everything directly related thereto.
  2. Such audit may take place once per year.
  3. The Processor shall cooperate with the audit and shall make all reasonably relevant information available in a timely manner, including supporting data such as system logs, and personnel.
  4. The findings of the audit shall be assessed by the parties in mutual consultation and, based thereon, may be implemented by one of the parties or jointly by both parties.
  5. The costs of the audit shall be borne by the Controller.

Article 11. Liability

  1. The Processor's liability for damage resulting from an attributable failure to perform the Data Processing Agreement, tort or otherwise, is excluded. To the extent such liability cannot be excluded, it is limited per event (a series of successive events counts as one event) to compensation of direct damage, up to a maximum of the fees received by the Processor for the activities under this Data Processing Agreement over the month preceding the damage-causing event. The Processor's liability for direct damage shall in total never exceed EUR 10,000.00.
  2. Direct damage shall exclusively mean all damage consisting of:
    • damage directly caused to tangible property ("property damage");
    • reasonable and demonstrable costs to urge the Processor to properly perform the Data Processing Agreement;
    • reasonable costs to establish the cause and extent of the damage insofar as relating to direct damage as referred to herein; and
    • reasonable and demonstrable costs incurred by the Controller to prevent or limit direct damage as referred to herein.
  3. The Processor's liability for indirect damage is excluded. Indirect damage means any damage that is not direct damage and includes, but is not limited to, consequential damage, lost profit, missed savings, reduced goodwill, business interruption damage, damage from failure to determine marketing purposes, damage related to the use of data or files prescribed by the Controller, or loss, corruption or destruction of data or files.
  4. The exclusions and limitations in this article do not apply if and insofar as the damage is the result of intent or deliberate recklessness of the Processor or its management.
  5. Unless performance by the Processor is permanently impossible, liability of the Processor for an attributable failure to perform the Agreement arises only if the Controller promptly puts the Processor in default in writing, granting a reasonable period to remedy the failure, and the Processor remains in default after that period. The notice of default must contain as complete and detailed a description of the failure as possible to enable the Processor to respond adequately.
  6. Any claim for damages by the Controller against the Processor that has not been specified and explicitly reported shall lapse by operation of law after twelve (12) months from the moment the claim arose.

Article 12. Term and termination

  1. This Data Processing Agreement is concluded by the Controller's acceptance of the Processor's General Terms & Conditions.
  2. This Data Processing Agreement is entered into for the duration as determined in the Main Agreement between the parties and, failing that, in any case for the duration of the cooperation.
  3. Once the Data Processing Agreement has ended for any reason and in any manner, the Processor shall, at the Controller's choice, return all personal data in its possession in original or copy form to the Controller and/or delete and/or destroy such original personal data and any copies thereof.
  4. This Data Processing Agreement may be amended in the same manner as the Main Agreement.

Appendix 1: Specification of personal data and data subjects

Personal data

In the context of Article 1.1 of the Data Processing Agreement, the Processor will process the following personal data on behalf of the Controller:

Of the categories of data subjects:

The Controller warrants that the personal data and categories of data subjects described in this Appendix 1 are complete and correct, and indemnifies the Processor against any defects and claims resulting from an incorrect description by the Controller.

Appendix 2: Third parties

Engagement of third parties

The Processor has permission to engage third parties in the following categories in the context of performing the agreement.