privacy statement MilaTonie

about our privacy policy

MilaTonie cares deeply about your privacy. Therefore, we only process data that is necessary for (improving) our services and handle the information we have collected about you and your use of our services with care. We never provide your data to third parties for commercial purposes.

This privacy policy applies to the use of the MilaTonie website and the services offered on it. The effective date of these terms is 07/11/2019, and with the publication of a new version, the validity of all previous versions expires. This privacy policy describes what data we collect about you, how we use this data, and with whom and under what conditions we may share this data with third parties. We also explain how we store your data, protect it against misuse, and what rights you have regarding the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy officer; you can find the contact details at the end of our privacy policy.

data processing

Below, you can find information on how we process your data, where we store it (or have it stored), the security techniques we use, and who has access to the data.

emails and mailing lists

klaviyo

We send our email newsletters through Klaviyo. Klaviyo will never use your name and email address for its own purposes. At the bottom of each email sent automatically through our website, you will find an 'unsubscribe' link. If you use it, you will stop receiving our newsletter. Your personal data is securely stored by Klaviyo. Klaviyo uses cookies and other internet technologies to track whether emails are opened and read. Klaviyo reserves the right to use your data to further improve its services and share information with third parties in that context.

payment processors

mollie

To handle (part of) the payments on our webshop, we use Mollie's platform. Mollie processes your name, address, residence information, and payment details such as your bank account or credit card number. Mollie has implemented appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and share (anonymized) data with third parties in that context. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Mollie's services where they engage third parties. Mollie will not retain your data beyond the legally allowed period.

reviews

webwinkelkeur

We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. If we invite you to leave a review, we will share your name and email address with WebwinkelKeur for that purpose. WebwinkelKeur has implemented appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the purpose of providing its services; we have given WebwinkelKeur permission to do so. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of the services for which WebwinkelKeur engages third parties.

shipping and logistics

dhl

When you place an order with us, it is our task to have your package delivered to you. We use the services of DHL for the deliveries. For this purpose, we need to share your name, address, and residence information with DHL. DHL uses this data only for the purpose of performing the agreement. In case DHL engages subcontractors, DHL also provides these parties with your data.

external sales channels

We sell (part of) our products through various platforms. If you place an order through one of these platforms, the relevant platform shares your order and personal data with us. We use this data to process your order. We handle your data confidentially and have implemented appropriate technical and organizational measures to protect your data against loss and unauthorized use.

purpose of data processing

general purpose of processing

We use your data solely for the purpose of providing our services. This means that the processing purpose is always directly related to the order you provide. We do not use your data for (targeted) marketing. If you share your data with us, and we use this data for contacting you later, other than at your request, we will ask for your explicit consent. We do not share your data with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound to confidentiality based on the agreement between them and us or a legal obligation or oath.

automatically collected data

Data automatically collected by our website is processed to further improve our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.

cooperation in tax and criminal investigations

In certain cases, MilaTonie may be obliged to share your data with regard to tax or criminal investigations, based on a legal obligation. In such a case, we will oppose this sharing within the boundaries of what the law allows us.

retention periods

We keep your data as long as you are a client of ours. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you notify us of this, we will also consider it a forget request. Based on applicable administrative obligations, we are required to keep invoices with your (personal) data, so we will keep this data for as long as the applicable period runs. However, employees no longer have access to your client profile and the documents we have produced based on your order.

your rights

Under applicable Dutch and European legislation, you, as a data subject, have certain rights regarding the personal data processed by or on behalf of us. We will explain below which rights these are and how you can invoke these rights. To prevent abuse, we will send copies and copies of your data only to your already known email address. If you wish to receive the data on another email address or by post, we will ask you to identify yourself. We keep records of completed requests, and in the case of a forget request, we administer anonymized data. You will receive all copies and copies of data in the machine-readable data format that we use within our systems. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data in the wrong way.

right of access

You have the right to access the data that we process and relates to your person or is traceable to you. You can make a request to our privacy officer to that effect. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data along with an overview of the processors that possess this data, stating the categories under which we store this data.

right to rectification

You have the right to rectify the data that we process and relate to your person or is traceable to you. You can make a request to our privacy officer to that effect. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address we have on record that the data has been adjusted.

right to restrict processing

You have the right to restrict the data processing that we do that relates to your person or is traceable to you. You can make a request to our privacy officer to that effect. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address we have on record that the data will no longer be processed as long as you do not lift the restriction.

right to data portability

You have the right to have the data that we process and relates to your person or is traceable to you, carried out by another party. You can make a request to our privacy officer to that effect. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of all data about you that we have processed or that has been processed by other processors or third parties on our behalf. Most likely, we will no longer be able to continue providing our services in such a case, as the secure linking of data files cannot be guaranteed anymore.

right to object and other rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of MilaTonie. If you object, we will immediately cease data processing, pending the handling of your objection. If your objection is well-founded, we will provide you with copies and/or copies of data that we process, and the processing will be permanently discontinued. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.

cookies

google analytics

We place cookies from the American company Google as part of the "Analytics" service through our website. We use this service to track and receive reports on how visitors use the website. This processor may be obliged based on applicable laws and regulations to provide access to these data. We have not allowed Google to use the obtained analytics information for other Google services.

third-party cookies

In the event that third-party software solutions use cookies, this will be stated in this privacy statement.

changes to the privacy policy

We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy has consequences for the way we process data that we have already collected about you, we will notify you by email.

contact information

milatonie

privacy officer contact person

Ralph Stoffels

Privacy Statement