Privacy declaration

Introduction

1. This is the privacy statement of the webshop “Babylatte”, a trade name of the private company Babylatte.

Mailing address:           
Ambachtsweg 85, 2641 KW, Pijnacker, Netherlands
Chamber of Commerce number:                               
8605554
E-mail address:                                 
klantenservice@babylatte.nl
The website:                                   
https://www.babylatte.nl
Phone number:                        
+31 (0)15 2024380

2. This privacy statement is available on our website and can be downloaded.
3. Babylatte attaches great importance to privacy and therefore believes it is very important that the personal data collected and processed by Babylatte are protected as best as possible.
4. In this privacy statement we would like to explain which personal data we collect from you through our contacts with you and through our products. We also explain how we collect the data, what we use the personal data for, with whom we share the personal data, how long we keep personal data, how you can view and adjust the personal data we store, how your personal data is secured with us. and which cookies we use.

How do we receive and collect personal data?
You actively provide certain personal data to us, for example by creating a customer account on our website, in correspondence and by telephone. Some personal data is collected automatically and other personal data we receive from external sources.

The table below shows how we receive and collect personal data.

Which categories of personal data do we process and what is the purpose of that processing? 
In addition to business data (such as company name, address, postal code, location, Chamber of Commerce number, company telephone number, bank details), we collect and process various personal data for various purposes.

 The table below indicates which categories of data are processed by us and for what purpose.

  
Special personal data

1. Our website and/or service does not intend to collect special personal data or to collect data about website visitors who are younger than 16 years of age, without their permission from parents or guardians.
2. However, we cannot check whether a website visitor is older than 16. We therefore recommend that parents be involved in their children's online activities to prevent data about children from being collected without parental consent.
3. If you are convinced that we have collected personal data about a minor without this consent, please contact us at the contact address above and we will delete this information.

Basis for the processing

1. We may only process personal data if there is a legal basis. Which basis applies depends on the data we use and what we use it for.
2. We have stated the applicable basis(s) for each of the processing operations in our processing register.
3. There is always at least one of these situations:

• The use of personal data is necessary for the execution of an agreement. This may be an agreement between you and Babylatte or to be able to do something at your request to conclude an agreement.
• There is permission to use the personal data. We have then expressly asked you for permission.
• There is a legal obligation to use the personal data.
• The use of the personal data is necessary for the pursuit of our legitimate interest.

Cookies

1. We use cookies and trackers. Cookies are small files that our website places on the equipment (for example computer, tablet or telephone) of a website visitor. This allows us to recognize the website visitor (and/or your equipment) on a subsequent visit.
2. Cookies can be used to collect or store information about the website visit or about (the device of) the website visitor. We also record information for the purpose of compiling usage statistics and for the security of our website.
3. We use the data collected through cookies and trackers to get a better picture of our website visitors and to develop and adapt our services and website to their personal preferences.
4. We use web analysis services Google Analytics -most Meta Pixel Analytics. These services use cookies to help us analyze how visitors use the website. This means that we use the software, in combination with the cookies, to keep track of how many visitors the website receives and which pages are viewed the most. This allows us to improve the content and quality of our website.
5. We have taken measures to protect your privacy in the context of the use of Google Analytics -most Meta Pixel Analytics. So we both have Google as with Meta concluded a processing agreement. We have agreed, among other things, that they will only use the collected information and statistics for the benefit of our website and not for their own purposes. In addition, we have set the software in such a way that the last part of your IP address is deleted before the IP address is transmitted Google Ugh Meta is being saved. This further limits the risks to your privacy.
6. In order to make optimal use of the functionalities of our website, we advise you to program your internet browser in such a way that it accepts cookies.
7. We ask the website visitor in advance to give us permission to place cookies.
8. Placed cookies can be deleted immediately after your visit to our website. Consult the privacy or settings menu of your internet browser.
9. By disabling or refusing cookies you may not be able to use all the features of our website.

Disclosure to third parties
With whom can the personal data be shared?

1. We only provide your data to third parties if this is necessary for the execution of our agreement or to comply with a legal obligation.
2. We have entered into a processing agreement with companies that process your data on behalf of Babylatte to ensure the same level of security and confidentiality of personal data. We record these processing agreements in our processing register. We remain responsible for the processing of the personal data provided.
3. We use external marketing parties for marketing purposes. We only accept data that has been demonstrably obtained by them after explicit consent from the person concerned.
4. Personal data may be passed on to:

• The companies contracted by us, such as the marketing company, the IT company (web hosting), online store software, administration and accounting, the parcel delivery service (carrier), the e-mail service provider and the external payment services and sales channels;
• The social media companies, if you use them.

5. You will find further information about this further in this privacy statement.

Transfer of personal data to countries outside the EEA.

1. In principle, we do not transfer personal data outside the Netherlands or the European Economic Area (EEA).
2. If we do transfer personal data outside the Netherlands or the EEA, we will only do so to the extent permitted by law. This means that we require those processors to provide an adequate level of protection and to implement the European standard contractual clauses.
3. It may also be necessary for technical and operational reasons that your personal data is transferred (to servers of) to other countries where privacy regulations may offer less protection than in the EEA. Even in that case, we will always take appropriate measures to ensure that your personal data is protected as best as possible.

Shipping and logistics

1. If you place an order with us, it is our job to have your package delivered to you. We use the services of the carrier DHL for carrying out the deliveries. It is necessary for us to share your name, (delivery) address and residence details with the carrier.
2. The carrier only uses this information for the purpose of executing the agreement. If it engages subcontractors, it will also make your data available to these parties.

Newsletters, email and mailing lists

1. If you register for our newsletters, in which you can find our discount codes, among other things, you explicitly consent to the collection of your data.
2. Each newsletter indicates how you can unsubscribe.
3. Our website uses Shopify, a third party that handles e-mail traffic from our website and sending newsletters.
4. All confirmation emails you receive from our website and web forms are sent via the servers of Shopify. Shopifywill never use your name and email address for your own purposes.
5. At the bottom of every email sent automatically via our website you will see the 'unsubscribe' link. If you click on this you will no longer receive e-mails from our website. This can seriously reduce the functionality of our website!
6. Your personal data will be passed on Shopify stored securely. Shopify uses cookies and other internet technologies that provide insight into whether emails are opened and read. Shopify reserves the right to use your data to further improve the services and to share information with third parties in this context.
7. We use the services of for our regular business e-mail traffic Shopify Mail. This party has taken appropriate technical and organizational measures to prevent misuse, loss and corruption of your and our data as much as possible. Shopify Mail has no access to our mailbox and we treat all our e-mail traffic confidentially. 

Reviews Webwinkelkeur

1. We collect reviews via the platform WebwinkelKeur Foundation. If you leave a review there, you are required to provide your name, place of residence and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name and place of residence on its own website.
2. In some cases it is possible WebwinkelKeur contact you to provide an explanation of your review. In the event that we invite you to leave a review, we will share your name and email address with WebwinkelKeur. They only use this information for the purpose of inviting you to leave a review.
3. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data.
4. WebwinkelKeur reserves the right to engage third parties to provide services, for which we require WebwinkelKeur permission given. All the above-mentioned guarantees with regard to the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

External payment services

1. Payments on our website are made via an external payment service and with a secure link. The data you enter for payment will therefore not be visible or visible on our servers. We only receive a positive or negative message whether the payment was successful. We refer you to the website of that external payment service for their own privacy statement.
2. We use the platform to process (part of) the payments in our online store Shopify Payments(ShopPay). Shopify Payments processes your name, address and residence details and your payment details such as your bank account or credit card number.
3. Shopify Payments has taken appropriate technical and organizational measures to protect your personal data.
4. Shopify Payments reserves the right to use your data to further improve the services and in this context to share (anonymized) data with third parties.
5. Shopify Payments In the case of an application for a deferred payment (credit facility), it shares personal data and information regarding your financial position with credit rating agencies.
6. All the above-mentioned guarantees with regard to the protection of your personal data also apply to the components
   by Shopify Payments's services for which they engage third parties.
7. Shopify Payments does not store your data for longer than is permitted by the legal periods.
8. If you choose the post-payment or spread payment options Klarna to offer, we must pass on your personal data (contact and order details) during checkout to Klarna Bank AB (publ), Stockholm, Sweden.
9. Also processed Klarna then your first name, last name, date of birth, salutation, gender and telephone number. This is possible Klarnaassess your eligibility for their payment methods and Klarna may apply those payment methods.
10. The personal data transferred by us and the personal data you provide will then be processed in accordance with Klarna's own privacy statement and which can be found on the website of Klarna. 

Rights of data subjects

1. European privacy legislation gives its citizens certain rights with regard to their personal data. If you are located in Europe, you can ask us to take the following actions in relation to the personal data we hold about you:

• Insight. To provide you with information about our processing of your personal data and to give you access to your personal data.
• Correctness. Update or correct inaccuracies in your personal data.
• To delete. Delete your personal data. Deletion of personal data may only be possible if that data is no longer relevant. In response to a request for deletion, we will weigh our interests against your privacy interests. In the event of a decision to delete, we will inform you of the consequences.
• Handover. Transfer a machine-readable copy of your personal data to you or to a third party of your choice.
• To limit. Restrict the processing of your personal data.
• Objection or withdrawal. Object to our reliance on our legitimate interests as a basis for our processing of your personal data that affects your rights. You also have the right to withdraw your consent to data processing.

2. You can submit these requests using the contact details above. We will respond to your request as quickly as possible, but within four weeks. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to deny your request. If we deny your request, we will tell you why, subject to legal restrictions.
3. You can always view your own data and personal settings and change them if necessary by logging in to your customer account.

1. We will not store your personal data for longer than is strictly necessary to achieve the purposes for which your personal data is collected or for as long as this is required by law.
2. The retention periods we use are recorded in our internal privacy policy. Some parts of this are:

• in the case of a completed order: until the warranty period expires, with a maximum of 24 months after the order;
• in the case of a customer account: until the customer cancels the account or the account has otherwise expired. Inactive customer accounts will be deleted 24 months after the last action.

3. After the retention period has expired, we will delete your data or make your data anonymous. If we make your data anonymous, we will delete all data that refers to you. The data can no longer be linked to you. The anonymous data helps us get a better picture of our products and services.

Bulletin
How are the personal data stored by us?

1. We store personal data in, among others, the following secure databases:

• a cloud storage;
• a CMS.

2. This list of the most important databases is based on the situation at the time this privacy statement was drawn up and may change in the meantime. 

Security
How do we protect personal data?

1. We take the protection of personal data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification.
2. Our website is secured with SSL, we have a strong password policy and we ensure that the extensive virus protection is always up to date.
3. Our employees have a confidentiality clause in their contract. We have made clear agreements about the protection and confidentiality of personal data. We also invest in the awareness of our employees in the field of information security and data privacy.
4. If you feel that your data is not properly secured or there are indications of misuse, please contact us at the contact address above.

External links on social media

1. Our website contains links to other external websites. We cannot be responsible for the content of those websites and the way in which your personal data is handled there.
2. We make every effort to keep the external links up to date and to refer to the correct websites.
3. Our websites may contain buttons and links from social media providers, such as Facebook, YouTube or Instagram.
4. Our privacy statement does not apply to these social media channels. The use of social media is your own responsibility.
5. We recommend that you read the privacy rules of the associated companies carefully, so that you know what happens to your data.
6. Many social media providers are also located outside the EEA and store personal data there. As a result, personal data may not be protected at the same level as we are used to within the EEA.
7. If we have a page on one of the social media channels (such as on Facebook), our privacy statement does apply to the content of that page.

Questions and complaints

1. If you have any questions about this privacy statement or about (the exercise of) your rights, you can contact us at the contact address above.
2. If you have complaints about how we handle privacy, you have the right to file a complaint with the Dutch Data Protection Authority. For the Netherlands this is: Dutch Data Protection Authority, PO Box 93374, 2509 AJ The Hague.
3. In that case, we ask you to contact us first. We will of course do everything within reason to reach an agreement with you. 

Changes to our privacy statement

1. From time to time it may be necessary to adapt our privacy statement to current events and new insights into data protection.
2. We will notify you of any such changes in a timely and reasonable manner. Changes will be announced on our website.
3. Using our services means that you accept our privacy statement.
4. We recommend that you read the most recently updated version of our privacy statement.

This privacy statement was last changed on: 10.01.2023.