Privacy

About our privacy policy

LOMAZOO B.V. takes your privacy very seriously. We therefore only process data that we need to provide and improve our services, and we handle the information we collect about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided through it by LOMAZOO B.V. The effective date of these terms is 11/07/2021. When a new version is published, all previous versions will cease to apply. This privacy policy explains what information we collect about you, how this information is used, and with whom and under what circumstances it may be shared. We also explain how we store your data, how we protect it against misuse and what rights you have in relation to the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy contact person. You will find the contact details at the end of this privacy policy.

How we process your data

Below you can read how we process your data, where we store it or have it stored, which security measures we use and who has access to the data.

Webshop software

Shopify

Our webshop has been developed using Shopify software. Personal data that you provide to us for the purpose of our services is shared with this party. Shopify has access to your data in order to provide us with technical support and will never use your data for any other purpose. Under the agreement we have entered into with Shopify, Shopify is required to take appropriate security measures. These measures include the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information relating to your use of the software; no personal data is collected and/or stored through these cookies. Shopify reserves the right to share collected data within its own group of companies in order to further improve its services. Shopify complies with the applicable statutory retention periods for personal data. The EU/US Privacy Shield applies and your data may be processed in the United States.

Web hosting

TransIP

We use TransIP for web hosting and email services. TransIP processes personal data on our behalf and does not use your data for its own purposes. However, TransIP may collect metadata relating to the use of its services. This does not constitute personal data. TransIP has taken appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. TransIP is contractually bound to confidentiality.

Email and mailing lists

Klaviyo

We send our email newsletters using Klaviyo. Klaviyo will never use your name and email address for its own purposes. At the bottom of every email sent automatically through our website, you will find an ‘unsubscribe’ link. If you use this link, you will no longer receive our newsletter. Your personal data is stored securely by Klaviyo. Klaviyo uses cookies and other internet technologies to provide insight into whether emails are opened and read. We use this information solely to improve our communication and services.

We only send emails where you have given us explicit permission to do so. You can unsubscribe at any time using the unsubscribe link at the bottom of each email.

Klaviyo reserves the right to use your data to further improve its services and, in that context, to share information with third parties.

Klaviyo is based in the United States. Your data may therefore be stored and processed outside the European Economic Area. Klaviyo has taken appropriate measures to protect your data in accordance with applicable privacy legislation.

We have entered into a data processing agreement with Klaviyo to protect your personal data.

TransIP

We use TransIP for our regular business email communications. This party has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of both your data and ours as far as possible. TransIP does not have access to our mailbox and we treat all of our email communications as confidential.

Payment processors

Klarna

We use Klarna's platform to process some or all payments made through our webshop. Klarna processes your name, address and place of residence, as well as payment details such as your bank account or credit card number. Klarna has taken appropriate technical and organisational measures to protect your personal data. Klarna reserves the right to use your data to further improve its services and, in that context, to share anonymised data with third parties. If you apply for deferred payment or a credit facility, Klarna may share personal data and information relating to your financial position with credit rating agencies. All of the safeguards referred to above regarding the protection of your personal data also apply to those parts of Klarna's services for which it engages third parties. Klarna does not retain your data for longer than permitted under the applicable statutory retention periods.

Stripe

We use Stripe's platform to process some or all payments made through our webshop. Stripe processes your name, address and place of residence, as well as payment details such as your bank account or credit card number. Stripe has taken appropriate technical and organisational measures to protect your personal data. Stripe reserves the right to use your data to further improve its services and, in that context, to share anonymised data with third parties. If you apply for deferred payment or a credit facility, Stripe may share personal data and information relating to your financial position with credit rating agencies. All of the safeguards referred to above regarding the protection of your personal data also apply to those parts of Stripe's services for which it engages third parties. Stripe does not retain your data for longer than permitted under the applicable statutory retention periods.

Shipping and logistics

DHL

When you place an order with us, it is our responsibility to ensure that your parcel is delivered to you. We use DHL to carry out our deliveries. To do this, we need to share your name, address and place of residence with DHL. DHL uses this information solely for the purpose of fulfilling the agreement. If DHL uses subcontractors, it may also make your data available to these parties.

Invoicing and accounting

Easybill

We use Easybill for our administration and accounting. We share your name, address and place of residence, as well as details relating to your order. This information is used to administer sales invoices. Your personal data is transmitted and stored securely. Easybill is bound by confidentiality and will treat your data confidentially. Easybill does not use your personal data for any purposes other than those described above.

General purpose of processing

We use your data solely for the purpose of providing our services. This means that the purpose of processing is always directly related to the service you request from us. We do not use your data for targeted marketing. If you share information with us and we wish to use that information to contact you at a later date for a reason other than at your request, we will ask for your explicit consent. Your data is not shared with third parties other than where necessary to meet accounting and other administrative obligations. All such third parties are bound by confidentiality under an agreement with us, an oath or a statutory obligation.

Automatically collected data

Data that is automatically collected by our website is processed for the purpose of further improving our services. This data, such as your IP address, web browser and operating system, does not constitute personal data.

Cooperation with tax and criminal investigations

In certain circumstances, LOMAZOO B.V. may be legally required to share your data in connection with government tax or criminal investigations. In such cases, we may be required to provide your data, although we will oppose such disclosure to the extent permitted by law.

Retention periods

We retain your data for as long as you remain a customer of ours. This means that we retain your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also regard it as a request to be forgotten. Under applicable administrative obligations, we are required to retain invoices containing your personal data. We will therefore retain this data for the duration of the applicable statutory retention period. However, our employees will no longer have access to your customer profile and any documents we have created in connection with your order or request.

Your rights

Under applicable Dutch and European legislation, you have certain rights as a data subject in relation to personal data processed by us or on our behalf. Below we explain what these rights are and how you can exercise them. As a general rule, and in order to prevent misuse, we only send copies and extracts of your data to the email address already known to us. If you wish to receive the data at a different email address or by post, for example, we will ask you to provide proof of identity. We keep records of completed requests. In the case of a request to be forgotten, we retain anonymised records. All extracts and copies of data are provided in the machine-readable data format used within our systems. You have the right at any time to lodge a complaint with the Dutch Data Protection Authority if you believe that we are using your personal data incorrectly.

Right of access

You have the right at any time to access the data that we process or have processed and that relates to you or can be traced back to you. You can submit a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all relevant data to the email address known to us, together with an overview of the processors that hold this data and the categories under which we have stored it.

Right to rectification

You have the right at any time to have the data that we process or have processed and that relates to you or can be traced back to you corrected. You can submit a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to the email address known to us that your data has been corrected.

Right to restriction of processing

You have the right at any time to restrict the processing of data that we process or have processed and that relates to you or can be traced back to you. You can submit a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send confirmation to the email address known to us that the data will no longer be processed until you lift the restriction.

Right to data portability

You have the right at any time to have the data that we process or have processed and that relates to you or can be traced back to you transferred for processing by another party. You can submit a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send copies or extracts of all data relating to you that we have processed, or that has been processed on our behalf by other processors or third parties, to the email address known to us. In such a situation, we may no longer be able to continue providing our services, as the secure linking of data files can no longer be guaranteed.

Right to object and other rights

In certain circumstances, you have the right to object to the processing of your personal data by or on behalf of LOMAZOO B.V. If you object, we will immediately suspend the processing of your data while your objection is being considered. If your objection is justified, we will make copies and/or extracts of the data that we process or have processed available to you and will then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that makes this right applicable. If you believe that this is the case, please contact our privacy contact person.

Cookies

Google Analytics

Our website uses cookies placed by the American company Google as part of its Analytics service. We use this service to monitor and obtain reports on how visitors use our website. This processor may be required under applicable laws and regulations to provide access to this data. We have not authorised Google to use the Analytics information obtained for other Google services.

Third-party cookies

Where third-party software solutions use cookies, this is stated in this privacy policy.

Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. The most recent version will always be available on this page. If a new privacy policy affects the way in which we process data that we have already collected about you, we will notify you by email.

Contact details

LOMAZOO B.V.

Daltonstraat 35

3316 GD Dordrecht

The Netherlands

T (085) 004-4944

E [support@lomazoo.com](mailto:support@lomazoo.com)