Privacy Policy Mesa Serena

Mesa Serena B.V. handles your personal data with care. This privacy policy explains what data we collect when you visit mesaserena.nl or place an order with us, why we do so and what rights you have. Our online shop runs on Shopify. If there is any difference between our terms and conditions and this privacy policy, this privacy policy applies with regard to personal data.

What personal data we collect

Depending on how you use our website, we may process the following data:

• Contact details: your name, address, billing and delivery address, phone number and email address.
• Payment details: information about your payment, such as the chosen payment method, the transaction and the payment confirmation. Card details are processed by our payment provider, not by us.
• Account details: your username, password, preferences and settings, if you create an account.
• Order details: the products you view, add to your cart or wishlist, buy, exchange or return, and your previous orders.
• Communication with us: what you write to us, for example when you contact our customer service.
• Device data: information about your device, browser and network connection, such as your IP address.
• Usage data: how and when you use our website and how you navigate through it.

Where we get the data from

• From you: when you create an account, place an order, contact us or otherwise provide us with information.
• Automatically through the website: through your device, using cookies and similar technologies.
• From our service providers: when they collect or process data on our behalf, for example for payments or shipping.
• From partners or other third parties.

What we use your data for

• Processing your order and improving our service: to process and ship your order and payment, handle returns and exchanges, manage your account, remember your preferences and recommend products that match your purchases.
• Marketing and advertising: to send you newsletters and offers by email, text message or post, and to show you online advertisements based on your purchases and activity on our website. You can unsubscribe at any time.
• Security and fraud prevention: to secure your account, enable safe payments and detect and prevent fraud or misuse. Keep your login details secret and do not share them with anyone.
• Contact with you: to answer your questions and serve you well.
• Legal obligations: to comply with the law, for example the statutory obligation to keep tax records, and to enforce our rights and terms.

Who we share your data with

We only share your data when necessary, with:

• Shopify and other service providers who work on our behalf, for example for hosting, payments, analytics, customer service, storage and shipping.
• Marketing partners, to show advertisements. Shopify supports personalised advertising based on your activity across different online shops. These partners use your data in accordance with their own privacy policies. You can object to the use of your data for targeted advertising.
• Third parties with your consent or at your request, for example the carrier delivering your parcel or a social media platform you use to log in.
• Authorities and other parties where required by law, or in the event of a business acquisition or bankruptcy.

Shopify

Our online shop is hosted by Shopify. Shopify processes data about your visit and your purchases to run and improve the online shop. In doing so, data may be transferred to parties outside the Netherlands. For some features, Shopify combines data about your visit to our shop with data from other shops. Shopify is responsible for this itself. Read more in Shopify's privacy policy or exercise your rights through the Shopify Privacy Portal.

Third-party websites

Our website may contain links to other websites. We are not responsible for how those websites handle your data, so please read their own privacy policies. Anything you share in public places, such as social media, may also be seen by others.

Children

Our website is not intended for children. We do not knowingly collect data from children under the age of 16, and we do not sell or share such data. If your child has nevertheless provided us with data, please contact us and we will delete it.

Security and retention

We protect your data as well as we can, but no security is completely watertight. Please do not send us sensitive information through unsecured channels.

We do not keep your data longer than necessary. How long depends on the purpose: for example, for as long as you have an account, for as long as is needed for your order, or for as long as the law requires. Data required for the tax authorities is kept for 7 years.

Your rights

Under the GDPR, you have the following rights:

• Access: you can request what data we hold about you.
• Erasure: you can ask us to delete your data.
• Rectification: you can have incorrect data corrected.
• Portability: you can request a copy of your data and have it transferred to another party.
• Objection and restriction: you can ask us not to use your data, or to use it only to a limited extent, for certain purposes.
• Withdrawing consent: if you have given consent, you can withdraw it at any time. This does not apply retroactively.
• Unsubscribing from marketing: via the unsubscribe link in every newsletter. You will continue to receive emails about your order or account.

You can exercise these rights by emailing us at hola@mesaserena.nl. We may ask you to confirm your identity before carrying out your request. You can also authorise someone to make a request on your behalf; that person must then show that they are acting on your behalf. We respond within the statutory period of one month. Exercising your rights will never put you at a disadvantage.

Complaints

If you have a complaint about how we handle your data, please contact us first. If you are not satisfied with our response, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own EU country.

Transfers outside the EU

We may store and process your data outside the country where you live. If data is transferred outside the European Economic Area, we use recognised safeguards, such as the European Commission's Standard Contractual Clauses, unless the country provides an adequate level of protection.

Changes

We may update this privacy policy, for example due to new regulations or changes in the way we work. We will publish the new version on this page, together with the date of the latest change.

Contact

Mesa Serena B.V. is responsible for the processing of your personal data.