Privacy policy

This is the privacy statement of the webshop "Mamma Nova", a trade name of the private company Nobel zorgadvies.
Postal and business address: Weteringweg 18, 2641 KM, Pijnacker, Netherlands
Chamber of Commerce number: 8605554
Email address: info@mammanova.com
Website: www.mammanova.com

This privacy statement is available on our website and can be downloaded.
Mamma Nova attaches great importance to privacy and therefore considers it very important that the personal data collected and processed by Mamma Nova are protected as well as possible.
In this privacy statement, we would like to explain which personal data we collect from you through our contacts with you and through our services and products. We also explain how we collect the data, what we use the personal data for, with whom we share the personal data, how long we retain personal data, how you can view and adjust the personal data we store, how your personal data is secured with us, and which cookies we use.

How do we receive and collect personal data?

Certain personal data you actively provide to us, for example by creating a customer account on our website, in correspondence, and by phone. Some personal data are collected automatically and other personal data we receive from external sources.

The table below shows how we receive and collect personal data.

Which categories of personal data are processed by us and what is the purpose of that processing?

In addition to business data (such as company name, address, postal code, city, Chamber of Commerce number, company phone number, bank details), we collect and process various personal data for different purposes.

The table below indicates which categories of data are processed by us and for what purpose.

How does Mamma Nova receive the data?

These data belong to:

Categories of Personal Data	Purpose of the processing
By visiting our website	Website visitors or customer – IP address – To inform you about our products, to offer you the possibility to order our products and/or to create a customer account, to download information.
By placing an order on our website	Customer – First name, last name, email address, delivery address – To deliver the ordered products to you, perform the purchase agreement, process the payment, handle your order, and inform you about its progress.
By creating a customer account	Customer – Name, email address, delivery address, phone number, overview of ordered products – To register and store orders, to enable faster placement of subsequent orders.
Download buttons on our website	Website visitors – Name, email address – To send you a download if you requested it via our website.
Via the contact form on our website, or by phone, email, or correspondence	Everyone – Name, (mobile) phone number, email address (optional: address) – To respond to you when you submit a request, application, or complaint to us.
If you are logged into a third-party service (such as Meta or Google) and visit our website	Website visitor – The published information you provided – For linking the information you want to share.
If you leave a review on the website	Website visitor – Name and email address (email address will not be published) – To be able to post the review and inform you about it.
If you subscribe to our newsletter	Website visitor – Name and email address – To send you the newsletter with discount promotions.
When redeeming a voucher or discount code	Everyone – Name and email address – To allow you to use the discount offered by Mamma Nova on the order.
If you choose post-payment or installment payment via Klarna	Customer – First name, last name, date of birth, salutation, gender, and phone number – This allows Klarna to assess whether you qualify for their payment methods and to apply those payment methods.

Special personal data

Our website and/or service does not intend to collect data about website visitors under 16 years old without parental or guardian consent.
However, we cannot verify if a visitor is over 16 years old. We therefore advise parents to be involved in their children's online activities to prevent data about children from being collected without parental consent.
If you are convinced that we have collected personal data about a minor without that consent, please contact us via the above contact address, and we will delete this information.
In some cases, we also need to process data about your physical characteristics and clothing sizes so that we can deliver the correct product. You provide this data yourself when placing the order. If you choose to provide these personal data to Mamma Nova and/or its suppliers, this is always based on your explicit consent. You can always withdraw your consent afterwards.

Cookies

We use cookies and trackers. Cookies are small files that our website places on the equipment (for example, computer, tablet, or phone) of a website visitor. This allows us to recognize you (and/or your computer) on a subsequent visit.
Cookies can collect or store information about the website visit or about (the device of) the website visitor. We also record information for the purpose of compiling usage statistics and for the security of our website.
The data collected through cookies and trackers is used to gain a better understanding of our customers and to develop and adapt our services and website to your personal preferences.
We use the web analytics services Google Analytics and Meta Pixel Analytics. This service uses cookies to help us analyze how visitors use the website. This means that with the help of the software, combined with the cookie, we track how many visitors the website receives and which pages are viewed the most. This allows us to improve the content and quality of our website.
We have taken measures to protect your privacy in connection with the use of Google Analytics. For example, we have concluded a data processing agreement with Google. In this agreement, we have agreed, among other things, that they use the collected information and statistics only for the website and not for Google's own purposes. Additionally, we have configured the software so that the last part of your IP address is removed before the IP address is stored by Google. This further reduces the risks to your privacy.
To make optimal use of the functionalities of our website, we advise you to configure your internet browser to accept cookies.
We ask you in advance to give us permission to place cookies.
Any cookies placed can be deleted immediately after your visit to our website. Please consult the privacy or settings menu of your internet browser.
By disabling or refusing cookies, you may not be able to use all the features of our website.

Newsletters

By subscribing to our newsletters, you explicitly consent to the collection of your data.
Each newsletter indicates how you can unsubscribe again.

Reviews

WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review through WebwinkelKeur, you are required to provide your name, place of residence, and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name and place of residence on their own website. In some cases, WebwinkelKeur may contact you to provide clarification on your review. If we invite you to leave a review, your name and email address will be shared with WebwinkelKeur. They use this information solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide the service, for which we have given WebwinkelKeur permission. All the above-mentioned guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

Provision to/by third parties

We only provide your data to third parties if this is necessary for the execution of our agreement or to comply with a legal obligation.
With companies that – on behalf of Mamma Nova – process your data, we have concluded a processor agreement to ensure the same level of security and confidentiality of personal data. We record these processor agreements in our processing register. We remain responsible for the processing of the provided personal data ourselves.
For marketing purposes, we use external marketing parties. We only accept data that they have demonstrably obtained after explicit consent from the data subject.
Personal data may be shared with:

the suppliers contracted by us who deliver the products you ordered;
the other companies contracted by us: marketing company, IT company, parcel delivery service, email service provider, and external payment service;
social media companies, such as Meta (if you use it).
Payments on our website are handled via an external payment service and a secure link. The data you enter for the payment will therefore not be visible or accessible on our servers. We only receive a positive or negative message indicating whether the payment was successful. We refer you to the website of that external payment service for their own privacy statement.

Legal basis for the processing

We may only process personal data if there is a legal basis. Which basis applies depends on the data we use and what we use it for.
In our processing register, we have listed the applicable legal basis(es) for each processing activity.
At least one of these situations always applies:

The use of the data is necessary for the performance of a contract. This may be a contract between you and Mamma Nova and/or our suppliers or to do something at your request in order to enter into a contract.
There is consent to use the data. We have explicitly asked you for consent.
There is a legal obligation to use the data.
The use of the data is necessary for the protection of a legitimate interest.

Transfer of personal data to countries outside the EEA

In principle, we do not transfer personal data outside the Netherlands or the European Economic Area (EEA). All suppliers of Mamma Nova are located within the EEA.
If we do transfer personal data outside the Netherlands, we will only do so to the extent permitted by law. This means, for example, that we require those processors to maintain an appropriate level of protection and to implement the European model contract clauses.
For technical and operational reasons, it may be necessary to transfer your personal data (to servers) to other countries where privacy protection regulations may offer less protection than in the European Economic Area (EEA). Even in such cases, we will always take appropriate measures to ensure that your personal data is protected as well as possible.
To offer you Klarna's payment methods, we must pass your personal data (contact and order details) to Klarna Bank AB (publ), Stockholm, Sweden, at checkout. Your transferred personal data is then processed in accordance with Klarna’s own privacy statement, which can be found on Klarna’s website.

Rights of data subjects

European privacy legislation grants its citizens certain rights regarding their personal data. If you are located in Europe, you can ask us to take the following actions regarding the personal data we hold about you:

Access: To provide you with information about our processing of your personal data and to give you access to your personal data.
Accuracy: To update or correct inaccuracies in your personal data.
Delete: To delete your personal data. Deletion of personal data may only be possible if that data is no longer relevant. We will weigh our legitimate interest against your privacy interest upon a deletion request. In case of a decision to delete, we will inform you to what extent this limits or prevents your use of our services.
Transfer: To transfer a machine-readable copy of your personal data to you or to a third party of your choice.
Restrict: To restrict the processing of your personal data.
Objection or withdrawal: To object to our reliance on our legitimate interests as the basis for our processing of your personal data that affects your rights. In addition, you have the right to withdraw any consent you have given for data processing.

You can submit these requests via the contact details above. We will respond to your request as soon as possible, but within four weeks. We may ask you for specific information to help us confirm your identity and process your request. Applicable legislation may require or allow us to refuse your request. If we refuse your request, we will tell you why, subject to legal restrictions.
You can always view and, if necessary, change your own data and personal settings by logging into your customer account.

Retention periods

We will not keep your personal data longer than strictly necessary to achieve the purposes for which your data is collected or as long as required by law.
The retention periods we apply are recorded in our internal privacy policy. Some parts of it are:

In the case of a completed order: until the warranty period expires, with a maximum of 24 months after the order;
In the case of a customer account: until the customer cancels the account or the account otherwise expires. Inactive customer accounts are deleted 24 months after the last action.

After the retention period expires, we delete your data or anonymize your data. If we anonymize your data, we remove all data that refers to you. The data can no longer be linked to you. The anonymous data helps us get a better understanding of our products and services.

Storage

Personal data is stored by us, among other places, in the following databases:

A cloud storage;
A CMS.

This list of the main databases is based on the situation at the time of drafting this privacy statement and may change in the meantime.

Protection

We take the protection of personal data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration.

Our website is secured with SSL and we ensure that comprehensive virus protection is always up to date.
Our employees have a confidentiality clause in their contract. In addition, we invest in raising awareness among our employees regarding information security and data privacy.
We have made clear agreements with our suppliers about the protection and confidentiality of personal data.
If you feel that your data is not properly secured or there are indications of misuse, please contact us via the contact address above.

External links and social media

Our website contains links to other external websites. We cannot be responsible for the content of those websites and how your personal data is handled there.
We strive to keep the external links up to date and to refer to the correct websites.
On our websites, there may be buttons and links from social media providers, such as Facebook, YouTube, or Instagram.
Our privacy statement does not apply to these social media channels. The use of social media is your own responsibility.
We recommend that you carefully read the privacy policies of the associated companies so that you know what happens to your data.
Many social media providers are located outside the EEA and store personal data there. As a result, it is possible that personal data is not protected at the same level as we are used to within the EEA.
If we have a page ourselves on one of the social media channels (such as Facebook), then our privacy statement does apply to the content of that page.

Questions and complaints

If you have questions about this privacy statement or about (the exercise of) your rights, you can contact us via the contact address above.
If you have complaints about how we handle privacy, you have the right to file a complaint with the Autoriteit Persoonsgegevens. For the Netherlands, that is: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ The Hague.
In that case, we ask you to contact us first. Of course, we will do everything reasonably possible to resolve it together with you.