Privacy policy

Camille Nanette Privacy Policy

Dated: October 2024

This Privacy Policy outlines how Camille Nanette (“we”, “us”, “our”), as the data controller, collects and processes your personal data through our website located at www.camillenanette.com ("the Website").

For the purposes of this Policy, personal data means any information that can be used to identify an individual, whether directly or indirectly.

Please read through this Privacy Policy carefully and ensure that you understand it. If you do not understand the content of this Privacy Policy or do not accept or agree with it, you must stop using the Website immediately. By accessing the Website and providing us with your personal data, you are warranting that you are over 16 years of age.

If you have any questions about this Privacy Policy or require more information concerning our privacy practices, please contact us at info@camillenanette.com.

What personal data do we process, why do we process it, and how do we collect it?

We may process personal data that you provide to us by subscribing to our newsletter, requesting information through our contact form, or via email, text, or other communication through our Website or other online platforms and social media channels.

We may also process your personal data through the use of cookies or other tracking software. Please refer to our separate cookie policy for further information.

We may also process data received from third parties such as Facebook, Instagram, Google, or other analytic, search, advertising, or online information providers, as well as payment processing providers like Stripe.

When we process your personal data, we comply with relevant data protection laws and principles, including the General Data Protection Regulation (EU Regulation 2016/679) (“GDPR”) and other applicable Dutch regulations. This means your data will be used lawfully, fairly, and in a transparent way, kept securely, and only for as long as necessary for the purposes we have told you about.

We collect and process personal data for clearly outlined purposes prior to you providing us with your data or for legitimate reasons.

We process your personal data based on one of the following lawful grounds:

  • Consent: When you have given us explicit consent to process your data.

  • Contractual Obligation: When the processing is necessary to fulfill a contract.

  • Legal Obligation: When the processing is required by law.

  • Legitimate Interests: When it is in our legitimate interest, such as improving our services.

We do not carry out automated decision-making or profiling.

Types of Personal Data We Process

The types of personal data we may process include:

  • Personal Information: Including your name, date of birth, email address, phone number, IP address, and correspondence address. This is processed for communication and record-keeping on legitimate interest grounds.

  • Customer Information: When you purchase goods or services, we may process information such as billing and delivery addresses, payment details (e.g., via Stripe), and other transaction-related information. This is processed on contractual grounds.

  • User Information: This includes any comments, posts, or interactions you make on our Website or social media channels, as well as data about how you use our Website (e.g., page views, login details). This is processed for website administration and security under legitimate interest.

  • Promotional Information: This includes details you provide for promotions or marketing. We use this data to send relevant offers, advertisements, and analyze marketing effectiveness under legitimate interest.

We may also process your personal data to deliver targeted advertisements through our Website and other online platforms.

Sensitive Data

We do not collect or process sensitive data, such as health, race, or sexual orientation information.

Disclosure of Personal Data

We may share your personal data with the following external service providers:

  • Stripe

  • Google

  • Facebook

  • Other payment processors or analytics services

We ensure that these third parties have appropriate technical and security measures in place to protect your data.

We may also disclose personal data as follows:

  • To third-party service providers who assist in providing services.

  • When required by law, a government body, or to protect our rights.

  • In connection with the sale or purchase of any business or assets.

We will not share your personal data for third-party marketing purposes without your consent.

Transfer of Personal Data

We comply with Dutch and European regulations on data processing. Our Website operates within the Netherlands, and your data is processed within the EU.

Where personal data is transferred outside of the EEA, we ensure that the third-party service providers comply with appropriate standards such as the EU-U.S. Privacy Shield or Binding Corporate Rules.

Data Security

We take the protection of your personal data seriously and have implemented appropriate security measures to prevent unauthorized access, loss, or misuse of your data. Only authorized personnel, agents, or contractors who need access for business purposes will process your data.

Please be aware that while we take steps to secure data transmitted online, there are inherent risks associated with internet transmission. You can choose to contact us by alternative methods such as phone or mail if preferred.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting requirements, in accordance with GDPR guidelines.

Your Rights

Under the GDPR, you have the following rights concerning your personal data:

  • Right of Access: You may request a copy of the personal data we hold.

  • Right to Rectification: You may ask us to correct any errors in your data.

  • Right to Erasure: You may request that we delete your personal data.

  • Right to Object or Restrict Processing: You may object to or request that we restrict the processing of your data.

You can withdraw your consent for us to process your data at any time. If you wish to do so, please contact us at info@camillenanette.com. If you have any concerns about how we process your data, you can also lodge a complaint with the Dutch Data Protection Authority.

Links to Other Sites

The Website may contain links to other websites. We are not responsible for the privacy practices of these other websites. Please ensure you are aware of their privacy policies before providing any personal information.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on the Website.