NANAAI cares about your privacy. We therefore only process data that we need for (improving) our services and we handle the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.
Webshop software and web hosting
Our webshop was developed with software from WooCommerce, and we opted for our web hosting with SiteGround. Personal data that you make available to us for the benefit of our services are shared with this party. Siteground has access to your data to provide us with (technical) support and they will never use your data for any other purpose. SiteGround is based on the agreement we have made with them to take appropriate security measures.
This one security measures consist of the application of SSL encryption and a strong password policy. There are regularly backed up to prevent loss of data.
Personal data such as name and email address are collected by Drift for the benefit of our services only when using the live chat option. Drift have access to provide us with live communication and they will never use your data for any other purpose.
E-mail and mailing lists
Our website uses MailChimp, a third party that e-mail traffic from our website and the sending of any newsletters. All confirmation e-mails you receive from our website and web forms are sent via MailChimp’s servers.
MailChimp will never enter your name and email address use your own purposes. At the bottom of every e-mail sent automatically via our website, you will see the ‘Unsubscribe’ link. If you click here you will no longer receive e-mail from our website. Your personal data is stored securely by MailChimp.
To handle (part of) the payments in our webshop, we use a payment service provider – Mollie. Mollie processes your name, address and residence details and your payment details such as your bank account and credit card number.
Mollie has taken appropriate technical and organizational measures to your to protect personal data. Mollie reserves the right to use your data to further improve services and to share (anonymized) data with third parties. All the above-mentioned safeguards with regard to the protection of your personal data are also of applying to the parts of Mollie’s service for which they engage third parties. Mollie won’t save your data longer that allowed by legal deadlines.
Shipping and logistics
– SendCloud – PostNL- DPD
If you place an order with us, it is our job to have your package delivered to you.
We make use of the services of SendCloud ( Post NL – DPD ) for the execution of the deliveries. It is, therefore, necessary for us to share your name, address and placeholder details with them. Send Cloud only uses this information for the execution of the agreement. In case SendCloud ( Post NL or DPD) engages subcontractors, your information also available to these parties.
Invoicing and accounting
For our administration and accounting, we use the services of E-boekhouden . We share your name, address and residence details and details regarding your order. This one data is used for managing sales invoices. Your personal data is sent and stored protected. E-boekhouden is obliged to secrecy and will treat your information confidentially.
E-boekhouden won’t use your personal data for purposes other than those described above.
PURPOSE OF DATA PROCESSING
We only use your data for the benefit of our services. This means that the purpose of the data processing will be always connected to the assignment you provide. We do not use your information (focused) in marketing. If you share your personal information with us and we want to use them to contact you in the future, you will be asked to give explicit permission.
Your data will be not shared with third parties, other than to comply with accounting and other administrative obligations.These third parties have all been kept confidential on the basis of the agreement between them and us or an oath or legal obligation.
Automatically collected data
Data collected automatically by our website are processed with the purpose of providing improvements in our services. This information (for example your IP address, web browser and operating system) is not personal data.
Participation in tax and criminal investigation
In some cases, NANAAI can be held to share your information on the basis of a legal obligation data relating to tax or criminal investigation by the government. In such a case we are forced to share your data, but we will do so within the possibilities that the law offers us to resist.
We keep your information as long as you are our client. This means that we keep your client profile until you state that you no longer wish to use our services. If you indicate this to us, we will also understand this as a “forgetting” request. On the basis of applicable administrative obligations we submit invoices with your (personal) data, we will keep this information for as long as the applicable term in effect is.
However, employees no longer have access to your client profile and documents that we created under your relation.
On the basis of the applicable Dutch and European legislation, you as a data subject have certain rights regarding personal data processed by or on behalf of us. We explain below which rights and how you can invoke these rights.
All communications between customer and NANAAI regarding the use of your rights will be, in principle, done using the known email address. In case that you want this to be otherwise (regular post), you will ask you to provide proof of residence for the indicated address. We keep administration of all transactions and, in case of a “forgetting “ request, we will provide anonymous data. All documents that you receive will be provided in the document format used in our administration system.
You have the right to file a complaint with the Dutch Data Protection Authority at any time if you suspect that we use your personal data in the wrong way.
- Right of inspection
You always have the right see and trace the data that we process or have processed and that relate to your person or for that purpose. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all data with an overview of the processors to the known e-mail address, indicating the category under which we have stored this data.
- Rectification right
You always have the right to modify the data that we process or have processed that relate to your person or that can be traced back to this. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the details have been changed on the e-mail address known to us.
- Right to a restriction of processing
You always have the right to limit the data that we process or have processed related to your person or that can be traced back to you. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the known e-mail address that the data *until you cancel the restriction* will no longer be processed.
- Right of transferability
You always have the right to have the data that we process or have processed and that relate to your person or that can be traced back to you, performed by another party. You can submit a request to that effect to our privacy contact person. You will receive a response to your request within 30 days.
If your request is granted, we will send all information about you that we have processed or that have been processed by us by other processors or third parties on the e-mail address known to us. In that case, we will no longer be able to continue our privacy agreement service because the secure linking of data files can then no longer be guaranteed.
- Right of objection and other rights
In the exposed cases you have the right to object to the processing of your personal data by or on behalf of NANAAI.
If you object, we will immediately stop the data processing pending the settlement of your objection. If your objection is well-founded, we will share this information with you and then permanently discontinue the processing. You also have the right not to be subject to automated individual decision making or profile. We do not process your data in such a way that this right applies. If you are of the opinion that this is the case, please contact our contact person for privacy matters.
Cookies Google Analytics
Through our website, cookies are placed from the American company Google as part of the “Analytics” service. We use this service to track and get reports on how visitors use the website. This processor may be obliged to provide access to these data on the basis of applicable laws and regulations. We have not allowed Google to use the obtained analytics information for other Google services.
Cookies from third parties
Ana Navarro Liras – NANAAI
9742JK Groningen, Nederland
Internet: www.nanaai.nl NANAAI | KvK 70776423 | BTW nummer: NL673956441B