2018-05-10 (updated 2021-08-05)
Our core beliefs regarding user privacy and data protection
- User privacy and data protection are human rights.
- We have a duty of care to the people within our data.
- Data is a responsibility. It should only be collected and processed when absolutely necessary.
- We will never sell, rent or otherwise distribute or make public your personal information.
“Maya Delorez AB” refers to Maya Delorez Corporation, including all its group companies, affiliates, and subsidiaries from time to time (also referred to as “we”, “us”, or “our”). You acknowledge and agree that your personal data collected may be used in accordance with this Policy by and for one or more Maya Delorez group companies, which will be regarded, individually or jointly, as data controllers in respect of such data.
This Policy applies to personal data collected in connection with products and services offered by Maya Delorez or from other interactions with us where a link or other appropriate reference of incorporation to this Policy is made, for example, in connection with our products, websites, applications, and other types of services offered by Maya Delorez typically in electronic form, as well as other services such as customer care and warranty services, customer events, or promotions and campaigns.
We typically provide additional privacy related terms in connection with a particular Maya Delorez product or service. Such product or service-specific terms prevail over this Policy to the extent of any conflict. Our products or services may also contain links to other companies’ websites and other third-party services that have privacy policies of their own. We recommend that you carefully read the privacy policies of such services. Maya Delorez is not responsible for the privacy practices or contents of any such third-party services.
Where consent from you to the processing of personal data described in this Policy is required under the applicable law, such consent will be obtained by an appropriate mechanism such as ticking a box stating your consent, choosing technical settings for a service or website, or other statement or conduct clearly indicating your acceptance of the processing, depending on the product, website, service, or application you are using.
We typically collect your personal data when you purchase our products or services, use or register for our services, enter into a sales promotion or a campaign, or otherwise interact with us. Below are examples of the categories of the data we collect about you.
Information you provide us
When you register for our services, make a purchase, enter a sales promotion, or otherwise interact with us, we may ask you to provide us with certain information such as your name, email address, street address, as well as user names, passwords, and other such credentials that are used to authenticate users and to validate their actions or that may be needed to provide you with the products and services you have requested or to communicate with you, as well as information uploaded by you such as location, route information, pictures, etc. We may collect training data, demographic information such as your age, gender, zip code, and language preferences.
We may also collect other information you provide, such as your consents, preferences, and feedback, information relating to your devices, and other such information you provide us with. Please note that certain non-identifiable information collected from you may become personally identifiable when you provide us with your personal data. Some of our services may allow you to submit information about other people, for example, if you make an order for a product that you wish us to send directly to another recipient.
Your transactions with us
We collect or request information relating to your purchase or use of our products or services as well as your other interactions with us. Such information may include, for example, details of the queries or requests you have made, the products and services provided (including delivery details), purchasing details (including payments made, credit card details, billing address, credit checks, and other such financial information), details of agreements between you and Maya Delorez, records of contacts and communications, information and details relating to the content you have provided us with, and other such transactional information. We may, in accordance with applicable law, record your communication with our customer care personnel or with other similar contact points.
Certain services may involve the use of your location data. Use of your location data is, however, subject to your prior consent for each service.
Data obtained from third parties
In addition to the personal data we obtain from you, we may obtain, in accordance with applicable laws, certain personal data from list rental companies and other publicly available sources. This may include personal data such as credit information and address information updates.
The purposes of processing
Maya Delorez processes your personal data for the purposes described in this Policy and/or any additional service-specific privacy information. Please note that one or more purposes may apply simultaneously.
Provision of products and services
We may process and use your personal data to provide you with the product or service you have requested, fulfill your other requests such as customer service, process your order, or as otherwise may be necessary to perform or enforce the contract between you and Maya Delorez. We may also process and use your personal data to ensure the functionality and security of our products and services, to identify you, and to prevent and detect fraud and other misuses.
Development of products and services
We may process and use your personal data to develop our products and/or services. However, for the most part we only use aggregate and statistical information in the development of our products and services, and not data directly identifiable to you. We may also process and use your personal data to personalize our offerings and to provide you with services more relevant to you: for example, to make recommendations and to display customized content and advertising. We may combine personal data collected in connection with your use of a particular Maya Delorez product and/or service with other personal data we may hold about you, except where such personal data was collected for a different purpose.
Communicating with you and marketing
We may process and use your personal data to communicate with you, for example to provide information relating to our products and/or services you are using or to contact you for customer satisfaction queries. We may process and use your personal data for marketing. Marketing purposes may include using your personal data for personalized marketing or research purposes in accordance with applicable laws, for example to conduct market research and to communicate our products, services, or promotions to you via our own or third parties’ electronic or other services.
In addition, some of our products and services may be used to promote products and services of other companies. However, Maya Delorez does not disclose your personal data to such companies for their marketing purposes without your prior consent.
We may process and use your personal data for profiling/personalization for such purposes as targeted direct marketing and improvement of our products or services. We may also create aggregate and statistical information based on your personal data. Profiling/personalization includes automated processing of your personal data to evaluate, analyze, or predict your personal preferences or interests, for example in order to send you marketing messages concerning the products or services most suitable for you.
Transfers of personal data
We may disclose your personal data to third parties solely as stated below in this Policy, or as obligated by mandatory law.
Maya Delorez group companies
You acknowledge and agree that we may share your personal data within Maya Delorez group companies and may transfer your personal data for the use of other Maya Delorez group companies for the purposes set forth in this Policy, when a group company/group companies are involved in the provision of the services to you or to other group companies. This may include, for example, billing and delivery of your purchases, provision of services such as customer service, development and maintenance of digital solutions, and managing, analyzing, and profiling/personalization of customer data as set forth above. Group companies/brands of Maya Delorez other than the one you have separately subscribed to as a consumer will not send you email or text message-based marketing.
Consent to e-mail/SMS-based marketing
When you sign up for our newsletter, you will receive emails and SMS with inspiration, exclusive offers and personal When you sign up for our newsletter, you will receive emails and SMSs with inspiration, exclusive offers, and personal recommendations. In order to send you these, we use your purchase and browsing history to personalize the offers we send you. You can unsubscribe at any time by clicking on the link at the bottom of each email or by contacting the company listed in the email and on the website.
Opting-out from e-mail/SMS based marketing
You may opt out from brand marketing emails by following the guidance in those emails (typically provided via an unsubscribe link) or by contacting the respective brand/group company as set forth in the email and in their web site. If you opt out, we may still send you non-marketing emails, such as service notifications or other information, or if you are a business customer we may send business-related information. You may also opt out from any SMS-based direct marketing by contacting the respective group company/brand as set forth in their site or via SMS as may be applicable.
Service providers and other authorized third parties
Service providers and other authorized third parties
We may transfer your personal data to authorized third parties who process personal data on behalf of Maya Delorez for the purposes described in this Policy, such as technical, logistics, e-commerce, marketing, and other service providers. Such parties are not permitted to use your personal data for any purposes other than those for which your personal data was collected, and we require them to act consistently with applicable laws and this Policy as well as to use appropriate security measures to protect your personal data.
The database and its contents will be shared with the following parties:
Synotio AB, (c/o Angry Creative AB, Drottninggatan 55, 602 32 Norrköping org.no. 559026-3850) is the company that provides us and our customers with hosting services. In the case of contact for quotation, the data you provided will be shared with this supplier. We must do this to satisfy our commitment to you as customers.
Adyen, Payment provider and checkout solution. https://www.adyen.com/
Klaviyo, Email and marketing service for newsletter and SMS. https://www.klaviyo.com/legal
Clerk.io personalization and relevance marketing. https://clerk.io/
Our products and services may be provided using resources and servers located in various countries around the world. Therefore, your personal data may be transferred outside the country where you use our services, including to countries outside the European Economic Area (EEA), where the level of data protection may not be deemed adequate by the European Commission. In such cases we take steps to ensure that adequate protection for your personal data is provided as required by applicable laws. For international transfers of your personal data, we generally rely on agreements that are based on the Standard Contractual Clauses (“SCCs”) of the European Commission. You can find the SCCs here. If you wish to know more about international transfers of your personal data, you can contact us via the contact details given below.
We may disclose and otherwise process your personal data in accordance with applicable laws to defend Maya Delorez’ legitimate interests, for example in civil or criminal legal proceedings.
Mergers and Acquisitions
If we decide to sell, buy, merge, or otherwise reorganize our businesses in certain countries, this may involve us disclosing personal data to prospective or actual purchasers and their advisers, or receiving personal data from sellers and their advisers, for the purposes of such transactions.
Data concerning minors
Maya Delorez does not seek to collect any information from or engage in any transactions with persons under the legal age in their respective country. Our databases may nevertheless contain personal data of children due to the fact that it is not always possible to determine precisely the age of the user. We reserve the right to block the service from any person who is or whom we reasonably suspect of being a minor.
Maya Delorez’ policy is to request that minors do not make purchases or engage in other legal acts relating to our products and services without the consent of a parent or legal guardian, unless otherwise permitted by applicable law. If you are a minor but have your legal guardian’s consent, you must be able to prove upon request that such consent exists.
Data quality and retention
We take reasonable steps to keep the personal data we possess accurate and up-to-date and to delete out of date or otherwise incorrect or unnecessary personal data.
Certain Maya Delorez products and services may allow you to manage your profile and the information in a personal profile. We encourage you to access your personal data via your profile from time to time to ensure that it is correct and up-to-date. Please remember that for such electronic services where you can manage your profile, it is your responsibility to provide us with correct details as well as to update the personal data you have provided us with in case of any changes.
We store your personal data only for a period necessary for the purpose in question or as long as required by applicable laws.
Maya Delorez implements appropriate technical and organizational security measures to prevent and minimize risks associated with providing and processing personal data.
Such security measures include, where appropriate, the use of firewalls, secure server facilities, encryption, implementing proper access rights management systems and processes, careful selection of processors, sufficient training of Maya Delorez ’ personnel involved in the processing, and other necessary measures to provide appropriate protection for your personal data against unauthorized use or disclosure. Where appropriate, we may also take back-up copies and use other such means to prevent accidental damage or destruction of your personal data. If a particular part of a Maya Delorez website supports on-line transactions, we will use an industry standard security measure, such as the one available through “Secure Sockets Layer” (“SSL”), to protect the confidentiality and security of online transactions.
Some of the Maya Delorez websites may also use other kinds of local storage technologies, such as Local Shared Objects (also referred to as “Flash cookies”) and HTML5 local storage. These technologies are similar to the cookies discussed above in that they are stored on your device and can be used to store certain information about your activities and preferences. However, these technologies may make use of different parts of your device from standard cookies, so you might not be able to control them using standard browser tools and settings. You may prevent Flash cookies from being stored by following the instructions provided by Adobe at http://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html.
Maya Delorez may use so called web beacons (or “pixel tags”) in connection with some websites. However, we do not use them to identify individual users personally. Web beacons are typically graphic images that are placed on a website and they are used to count visitors to a website and/or to access certain cookies. This information is used to improve our services. Web beacons do not typically collect any other information than what your browser provides us with as a standard part of any internet communication. If you turn off cookies, the web beacon will no longer be able to track your specific activity. The web beacon may, however, continue to collect information about visits from your IP-address, but such information will no longer be personally identifiable.
If you wish to disable cookies, or want to be notified before they are placed on your device, you may do this in your browser settings. For example, if you are using Internet Explorer, you may disable and manage cookies by following the instructions here. Further information about controlling cookies can be found at: https://www.networkadvertising.org/understanding-online-advertising/what-are-my-options.
However, we may not be able to provide certain services or you may not be able to view certain parts of this site if you have disabled cookies.
You acknowledge and agree to the storage of cookies, other local storage technologies, beacons, and other information on your devices and to the access of such cookies, local storage technologies, beacons, and information by us and by the third parties mentioned above.
You have the right to request information and access to the personal data we have collected from and about you. You also have the right to request that we replenish, rectify, anonymize, or delete any incomplete, incorrect, unnecessary, or outdated personal data we hold on you. However, we cannot delete such personal data that is necessary for compliance with binding legal obligations or if the personal data must be retained according to applicable laws. You have the right to request and receive the personal data we have collected on you in a commonly used and machine-readable form. If you consider your personal data collected by us to be inaccurate, you do not wish your personal data to be deleted where the processing of your personal data has been deemed unlawful, or the personal data is no longer necessary, or you have objected to the processing and the existence of legitimate grounds for processing is still under consideration, you may request restriction of processing of your personal data.
You may also at any time object to your personal data being processed for direct marketing purposes, sending promotional materials, profiling, or for the performance of market research. Furthermore, where your personal data is processed based on your consent, you have the right to withdraw your consent for such processing at any time.
If you wish to make use of your rights mentioned above, you may, as appropriate and in accordance with applicable laws, exercise such rights by contacting us through the contact points referred in the marketing materials or below in this Policy. In some cases, especially if you wish us to delete or cease the processing of your personal data, this may also mean that we may not be able to continue to provide the services to you. We encourage you to use available profile management tools for the above purposes, as such tools often provide you with direct access to your personal data and allow you to manage it effectively.
Please note that Maya Delorez may need to identify you and to ask for additional information in order to be able to fulfill your above requests. Please also note that applicable law may contain restrictions and other provisions that relate to your above rights.
Complaint to the supervisory authority
In the event you consider Maya Delorez’ processing activities of your personal data to be inconsistent with the applicable data protection laws or that Maya Delorez has not sufficiently ensured the realization of your rights, you may lodge a complaint with the local supervisory authority responsible for data protection matters.
The controller of your personal data and contact details
The data controllers responsible for the purposes of the applicable data protection laws are, as applicable:
Maya Delorez AB
754 50 Uppsala
The Maya Delorez company, whose webpage, application, product or service you are using (name and registered address available during the purchase or registration process)
and/or, as applicable,
The Maya Delorez company which uses your personal data for its direct marketing or similar purposes (name and registered address available in the marketing material received by you).
You may contact the above-mentioned data controllers as set forth in their respective sites or at the following address:
Maya Delorez AB
754 50 Uppsala