Privacy policy

Privacy Policy

1. Privacy Statement

2. When do I process your personal data?

3. Cookies and similar techniques I use

4. Transmission to partners

5. Transmission to third parties

6. Security of your data

7. How long are your data retained?

8. Your rights

9. Reporting a data breach

10. Liability

11. Changes in this statement

12. Contact details

1. PRIVACY STATEMENT
When you are active on my website or contact me, you sometimes share personal data with me. I handle this data carefully and comply with applicable laws and regulations. These laws concern the storage and use of your personal data.

In this privacy statement, I explain what data I collect from you and what I do with this data. This privacy statement applies to all interaction between you and Magic Moments by Lynn, regardless of the method of communication.

Magic Moments by Lynn, located at Linnaeusparkweg 177/1 Amsterdam (not a visiting address!), is responsible for the processing of personal data as stated in this privacy statement. You can send questions or comments regarding your privacy to info@MagicMomentsbyLynn.nl.

What are personal data?

All data that tell something about you and can be used to identify you are personal data. Think, for example, of your name, contact or address details, and your BSN (social security number). Some of this data, such as ethnic origin, religion, or criminal record, are special personal data.

Special personal data

I do not collect special personal data.

Personal data of persons under 16 years old

I do not intend to process personal data of persons under 16 years old. However, I cannot verify whether a visitor to my websites and servers is older than 16 years. If you believe that I have collected personal data of a minor without the consent of a parent or guardian, you can contact me via info@MagicMomentsbyLynn.nl, and I will delete this information if possible. If data of persons under 16 years old is collected by me, this will always be done with the consent of their parent or guardian.


2. When do I process your personal data?

1. To assist you when you have questions.


I am happy to help you if you encounter any problems or have a question for me. You can email me, or fill out a form on the website. It may also be that I receive your data through third parties in connection with my services. To further assist you, I store some of your data. This way, I know who you are and can also find out what we discussed at the next contact moment.

If you have questions for me, I store the following data:

Name

Email address

Your message

Legal basis: legitimate interest.

 

2. To Prepare and send you quotations

Before I start working for you, I can send you a quotation. For this purpose, I store the following data from you:

Name, Address, and Phone Number

Email address

Company name (optional)

Chamber of Commerce number (optional)

VAT identification number (optional)

Legal basis: legitimate interest.



3. To execute an agreement and send the ordered products to you.

If you use my services and/or order products, you want to be well assisted and receive what you have ordered. I store the following data for executing an agreement:

Name, Address, and Phone Number

Email address

Other (personal) data provided by you

Legal basis: execution of the agreement



4. To invoice and collect payments from you.

The services you have taken must, of course, be paid for. If you fail to do so, I will start a collection process. In connection with invoicing and collection, I store the following data from you:

  • Name, Address, and Phone Number
  • Email address
  • Company name (optional)
  • Chamber of Commerce number (optional)
  • VAT identification number (optional)


Legal basis: legal obligation.



5. To keep you informed of changes in my services.

When I make changes to my services, general terms and conditions, privacy statement, or other important matters, I would like to inform you about this. If you agree, I use the following data to process you in my administration system:

  • Name
  • Email address


Legal basis: execution of the agreement.


6. To send you my newsletters.

If you have indicated that you want to receive my newsletter, I store the following data from you:

  • Name
  • Email address
  • Legal basis: consent.


3. Cookies and similar techniques I use
Magic Moments by Lynn uses functional, analytical, and tracking cookies. A cookie is a small text file that is stored on your computer, tablet, or phone when you visit a website for the first time. I use cookies with purely technical functionality so that the website works as intended.

Additionally, I use analytical cookies such as Google Analytics to study the behavior of my visitors and improve my website accordingly.

If I need your permission to place cookies, I will ask for this during your first visit to my website. I also refer you to my cookie statement. You can opt-out of cookies by adjusting your internet browser settings to no longer store cookies.

4. Transmission to partners
For the execution of my services, I work together with various suppliers and partners.

These suppliers & partners include parties that:

  • Send order information (Shopify)
  • Handle my payments & collections (Shopify)
  • Provide my web hosting & email (Shopify & Hostnet)
  • Send the orders (PostNL)


I have entered into processing agreements and/or confidentiality agreements with subprocessors to ensure the security of your data. I only work with partners who can comply with the GDPR legislation.

Some of my partners are located outside the European Economic Area (the countries within the European Union, Liechtenstein, Norway, and Iceland). Your data may be processed in the United States and/or other countries where these companies have their cloud storage, servers, and/or backups.

I have taken appropriate measures with these partners, which are contractually agreed through a processing agreement / Data Processing Addendum or via a model agreement from the European Commission (click here). The stricter GDPR (the AVG) has often been signed and implemented by most of them. This way, I ensure that your data is well protected.

5. Transmission to third parties
In principle, I do not share or sell your data with individuals or organizations outside Magic Moments by Lynn, except with partners as described above. It may also be that I am obliged to pass on your data on the basis of a legal obligation.

6. Security of your data
Magic Moments by Lynn has taken appropriate technical and organizational security measures to protect your personal data against misuse, unauthorized or unlawful use, and loss.

All parties that process your data for me (subprocessors) or can view them (such as employees or temporary staff) sign a processing agreement or confidentiality agreement. These agreements and related data are kept for the duration of my cooperation with these parties.

7. How long are your data retained?
For various data streams, I have different retention periods. Of course, you always have the right to request the deletion of your data. See also the section "Your rights".

Personal data:
I delete name, address, phone number, and email 1 year after our last contact.

Email:
Email older than 1 year is deleted unless it is still relevant for the execution of an agreement or the resolution of a dispute.

Invoices and quotations:
Invoices and quotations can be deleted after the statutory retention period of 7 years. Your data will remain present in my invoicing system until that time.

8. Your rights
You have the right to access, correct, and delete your personal data. Additionally, you have the right to withdraw your consent to data processing or object to the processing of your personal data by Magic Moments by Lynn. You also have the right to data portability. You can send a request for access, correction, deletion, data transfer of your personal data, or request for withdrawal of your consent or objection to the processing of your personal data to info@magicmomentsbylynn.nl.

To ensure that the request for access is made by you, I ask you to include a copy of your identity document with the request. In this copy, please black out your photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN).

This is to protect your privacy. If your request concerns a cookie, I also ask you to include it. I will respond as soon as possible, but no later than within four weeks, to your request. Magic Moments by Lynn also wants to inform you that you have the possibility to lodge a complaint with the national supervisory authority, the Dutch Data Protection Authority.

9. Reporting a data breach
If, despite all precautions, a data breach occurs, I comply with the obligation to report data breaches and report this breach, if necessary, to the Dutch Data Protection Authority within 72 hours of discovery. If you discover a data breach, I kindly ask you to share this with me as soon as possible, but no later than within 24 hours after you have discovered the breach, by sending an email to info@magicmomentsbylynn.nl. I can then take immediate action.

10. Liability
This privacy statement only applies to the personal data processed by Magic Moments by Lynn for the purposes discussed in this agreement. Magic Moments by Lynn accepts no responsibility or liability for (the operation and/or content of) third-party websites or services.

11. Changes in this statement
The content of this privacy statement may be adjusted at any time by Magic Moments by Lynn to respond to new developments in legislation or regulations or changes within my company. 

In any case, I recommend consulting my privacy statement regularly to stay informed about my privacy policy. By continuing to use the services of Magic Moments by Lynn after changes, you agree to these changes.