PRIVACY POLICY

Madurro  is very concerned about your privacy. We only process data that we need to (improve) our services and we handle all information we collect about you and your use of our services with care. Your data will not be shared with third parties for commercial purposes. This privacy policy applies to the use of the website and the services provided by Madurro . This Privacy Policy describes what information we collect about you, what this information is used for, and with whom and under what conditions this information can be shared with third parties. We also explain how we store your data, how we protect your data against misuse and what rights you have with regard to the personal data you provide to us. If you have any questions about our privacy policy, please contact our privacy contact person, you will find the contact details at the end of our privacy policy.

 

About Our Data Processing

Below you can read how we process your data, where we store it, what security techniques we use and to whom  data is visible.

 

Webshop Software

We use web hosting and email services from Shopify, Google G Suite and Klaviyo. For our web hosting we use the services of a web hosting company. Personal data collected when using our website and services are shared with our web host, who needs access to this information to provide (technical) support. They will not use this data for other purposes. Our web host is obliged, based on the agreement we have with him, to take the necessary precautions and security measures with regard to your personal data.

 

Our webshop is developed using Shopify software, we host our webshop on a server under our own management. We have taken the necessary precautions and security measures when it comes to your personal data, such as SSL encryption and a strong password policy.

 

E-Mail and Mailing Lists

For our regular business email, we use the email services of our web host. This party has taken appropriate technical and organizational measures to prevent misuse, loss or modification of your data. Our web host does not have access to our mailbox and we treat our email traffic confidentially.

 

Purpose of Data Processing

General Purpose of Data Processing

We use your data exclusively to provide our services to you. This means that the purpose of processing this data is directly related to the task you offer us. We do not use this data for (targeted) marketing purposes. If you share information with us and we use this information - not based on a request - to contact you later, we will first ask you for your explicit consent. Your data will not be shared with third parties for purposes other than fulfilling accounting and administrative obligations. These third parties are all obliged to maintain confidentiality on the basis of the agreement we have concluded with them, an oath or a legal obligation. Automatically collected data Information that is automatically collected by our website is processed exclusively to serve you and/or to further improve our services. This information (for example your IP address (anonymized), web browser and operating system) is not personal information. Cooperation in tax and criminal investigations In some cases, we may be legally obliged to share your data to assist with a tax or criminal investigation. In such cases we are obliged to comply and provide assistance, but we will object on the basis of the legitimate possibility.

Retention periods

We store your data for as long as you are a customer with us. This means that we maintain and store your customer profile until you inform us that you no longer wish to use our services. Such notification also applies as a request to be forgotten. We are required to store invoices with your (personal) data due to relevant administrative obligations, this information is stored securely as long as the relevant term for these obligations has not yet expired. Employees no longer have access to your customer profile and any documents that have been produced as a result of your assignment or task.

 

Your Rights

Based on the applicable legislation, you as a data subject have certain rights with regard to personal data that is processed by or on behalf of us. Below you will find an explanation of these rights and how you as a data subject can invoke these rights. In order to prevent abuse, we will in principle only send invoices and copies of your data to the e-mail addresses that you have made known to us. If you wish to receive this information at a different e-mail address or, for example, by post, we ask you to identify yourself accordingly. We keep a record of completed requests; in the event of a request to be forgotten, we will keep a record of anonymized data. You will receive all invoices and copies of data in files that are structured in a machine-readable format based on data classifications that we use in our system.

Right of Access

You retain the right at all times to inspect the data that we process and that relate to or can be traced back to you. You can request this inspection from our contact person for privacy. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data via the e-mail address known to us, with an additional list of the processors who process this data, stating the categories under which we store this data.

Right to Correction

You retain the right at all times to have the data that we process and that relate to or can be traced back to you corrected. You can request this correction from our contact person for privacy. You will

receive a response to your request within 30 days. If your request is approved, we will send you an email to our known address, a confirmation that the information has been corrected.

Right to restriction of processing

You have the right at all times to have the data that we process and that relate to or can be traced back to you. You can request such a restriction from our contact person responsible for privacy. You will receive a response to your request within 30 days. If your request is approved, we will send you a confirmation via the e-mail address known to us that the processing of your data will be restricted until you choose to undo this restriction.

Right to Portability

You retain the right at all times to have the data that we process and that relate to or can be traced back to you, processed by a third party of your choice. You can send such a request to our contact person responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send you your (personal) invoices or copies of data that we or third parties have processed on our behalf via the e-mail address known to us. It is very likely that in such a case we can no longer offer you our services, because we can no longer guarantee the previous data security.

Right to Object and Other Rights

You retain the right to object to the processing of your personal data at any time. In the event of such an objection, we will immediately cease all processing of your data while your objection is being investigated and processed. In the event of a justified objection, we will return all invoices and/or copies of the personal data that we or third parties on our behalf have processed up to that point, and cease the processing thereafter. You also retain the right not to be subject to automated decision-making processes or profiling. We process your data in such a way that this right does not apply. If you believe that this right applies, we ask you to contact our Privacy Officer.

Changes to the Privacy Policy

We reserve the right to change our privacy policy at any time. However, this page always shows the most recent version of our privacy policy. Should a new privacy policy have consequences for the way in which we collect new data relating to your person, we will notify you by e-mail.

Email: info@madurrofashion.nl