Privacy Policies

May 30, 2024

Introduction

The website https://maneken.app/ ("Website") is operated by Maneken B.V. ("Maneken" or "we;"). Maneken is committed to protecting your personal data. We ensure that your personal data is treated confidentially and in accordance with applicable laws and regulations, including the General Data Protection Regulation ('GDPR').

In this Privacy Statement, we inform you about the purposes of processing your personal data, how to exercise the rights under the GDPR, and other information that may be of interest to you. This Privacy Statement applies to all activities via the Website.

Controller

Maneken B.V., registered with the Dutch Chamber of Commerce under the number 91204402, is responsible for the processing of personal data as reflected in this Privacy Statement.

Lawful basis

Maneken processes personal data on the basis of one or more of the following legal grounds: your consent;

  • the processing is necessary for the performance of a contract to which you are a party;
  • the processing is necessary to comply with a legal obligation imposed on Maneken;
  • the processing is necessary for the performance of a task carried out in the public interest or in - the exercise of official authority vested in Maneken;
  • the processing is necessary for the legitimate interest of Maneken, which does not override your fundamental rights and freedoms.

If any processing is based on your consent, you are entitled to withdraw your consent (without retroactive effect) at any time. To do so, you can contact us using the contact details provided at the bottom of this Privacy Statement.

Personal data

Pursuant to the GDPR, personal data is any information from which a person can be identified without making a special effort. Maneken may process the following personal data about you for the purposes specified in this Privacy Statement. We collect personal information that you submit directly to us, namely: First and last name; E-mail address.

Minors

Maneken does not intend to collect data on the Website of visitors under the age of 16. Unless authorized by parents or guardians is obtained. However,  we cannot verify whether a visitor is older than 16. Therefore, we recommend that parents be involved in their children's online activities in order to avoid collecting personal data about children without parental consent. If you believe that we have collected personal data about a minor without such consent, please contact us at manekenapp@gmail.com and we will delete this information.

Purposes

Maneken collects and processes the above personal data for clearly and predetermined purposes because it is necessary for, among other things:

  • Performance of Agreements: Maneken processes your personal data to fulfil our contractual obligations and provide the requested products or services. This includes, for example, processing orders and payments through the online web shop, informing you of changes to our services and products, and managing customer service requests.
  • Customer Service and Communication: Maneken may use your personal information to respond to your questions, requests, or complaints we receive through various communication channels, such as email, the website, or social media. We may also send communications, such as newsletters or updates on our products or services, based on your preferences or with your consent.
  • Improving our products and services:  Maneken may use your personal data to understand, evaluate and improve the use of our products and/or services. This may include analysing user behaviour, collecting feedback, or conducting market research.
  • Promotional Offers and Marketing Communications: Maneken may use personal data to inform users of special offers, discounts, new products or services, events, or other promotional activities that may be relevant.
  • Legal obligations:  Maneken may be required to process personal data to comply with legal obligations, such as accounting, tax, or reporting obligations.
  • Fraud Prevention and Security: Maneken may process personal data to detect, prevent and investigate fraudulent activity, as well as to ensure the security of our systems, networks, and data.

We only collect and process your personal data necessary for the purposes listed above and ensure that the processing complies with the principles of data minimization and purpose limitation as set out in the GDPR.

Automated decision-making

Maneken does not make decisions about matters that could (significantly) affect individuals on the basis of automated processing.

Data retention

Maneken does not keep your personal data for longer than is strictly necessary. This means that Maneken keeps the data as long as necessary for the purposes mentioned above. Only if there are legitimate interests or legal (retention) obligations data can be kept for a longer period. You have the right to erase your data at any time.

Data storage and transfers

Maneken only processes personal data within the European Union ("EU").

Provision to third parties

We only use third parties - if necessary - in the performance of our services and activities. If these third parties thereby have access to your personal data, we always take appropriate measures to ensure that your personal data are adequately secured and only used for the intended purposes. To ensure the same level of security and confidentiality, a Data Processing Agreement (‘DPA’) is concluded with these processors. If your data is processed by third parties, Maneken remains responsible for the processing.

In carrying out our services and activities, we store your data with the third-party Supabase. Supabase provides an open source tool that stores data securely. We refer to Supabase's Privacy Policy.

We do not collect financial information from you (such as your payment card number, expiration date or security code). All payments to us are handled via a third party, Stripe. We refer to Stripe's Privacy Statement.

Confidentiality of personal data

We have taken appropriate technical and organizational measures to protect the personal data you provide from unauthorized use. Besides that, DPAs have been concluded with abovementioned third-parties to ensure the same level of protection.

These measures include, but are not limited to: firewalls, data encryption, pseudonymization of personal data, and password complexity.

Despite our efforts, we cannot give an absolute guarantee for the protection of your personal data against all threats. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us using the contact details below.

Changes to this Privacy Statement

We reserve the right to make changes to this Privacy Statement. It is recommended that you review this Privacy Statement periodically so that you are aware of these changes.

Third-party websites

This Privacy Statement does not apply to third-party websites linked to this website through links. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. Therefore, we recommend that you read the privacy and cookie statements of these websites before using them.

Cookies

Maneken uses functional, analytical, and tracking cookies. For more information about our cookies, please see our Cookie Policy.

Rights of data subjects

Under the GDPR, you have the following rights:

  • The right to access your personal data and information of whether we process personal data belonging to you;
  • The rights to rectification (correction and completion) of your personal data;
  • The right to erasure of your personal data;
  • The right to restriction of processing;
  • The right to data portability in a structured, commonly used, and machine-readable format;
  • The right to revoke your consent to data processing for future data processing;
  • The right to object to the processing of your personal data.

You can submit a request at manekenapp@gmail.com. In this request, you must state on what basis the request is made. We will respond to your request as soon as possible, but no later than four weeks.

If you wish to invoke any of the above rights, we are required to verify your identity. If necessary for identification purposes and provided by law, we request that you send us a copy of your identity card or driver's license. Make sure that your passport photo and BSN number are made invisible and state that it is a copy. Once the identity has been established, we will delete the copy immediately. We do not store any identity information.

Complaints

Do you have a complaint about the processing of your personal data? If so, we will be happy to discuss this with you. Under the GDPR, you also have the right to file a complaint about the incorrect processing of your personal data with the Dutch Data Protection Authority (‘DPA’).  For more information, please contact the Dutch DPA at https://www.autoriteitpersoonsgegevens.nl/en.

Contact

For questions or requests about this Privacy Statement or your personal information, please contact us at any time using the information below.

Maneken B.V.

manekenapp@gmail.com