Lyluah



Privacy policy lyluah

Privacy policy lyluah

About our privacy policy
lyluah cares deeply about your privacy. We therefore only process data that we need for (the
improve) our services and treat the information we collect about you and your use of
our services have collected. We never make your data available for commercial purposes to
third parties.
This privacy policy applies to the use of the lyluah website and the services accessed on it.
The effective date for the validity of these terms and conditions is 08/09/2023, with the publication of a new version
expires the validity of all previous versions. This privacy policy describes what data about you is collected by us
are collected, what this data is used for and with whom and under what conditions it is collected
data might be shared with third parties. We also explain to you how we share your data
store and how we protect your data from misuse and what rights you have in relation to your
personal data provided to us.
If you have any questions about our privacy policy, please contact our privacy contact, u
Find contact details at the end of our privacy policy.
About data processing
Below you can read how we process your data, where we store it (or have it stored), which
security techniques we use and to whom the data can be viewed.
Webshop software
MyWebstore
Our online shop is developed with software from MyOnlineStore. Personal data that you provide on behalf of our
services made available to us are shared with this party. MyOnlineStore has access to your
data to provide us with (technical) support, they will never use your data for any other
purpose. MyOnlineStore is obliged under the agreement we have with them to provide appropriate
security measures to be taken. MyOnlineStore uses cookies to provide technical information to
collect in relation to your use of the software, no personal data will be collected and/or
stored.
Web hosting
nowweb
EXAMPLE: We purchase web hosting and e-mail services from [SUPPLIER]. [SUPPLIER] processes
personal data on our behalf and does not use your data for its own purposes. However, this party may
collect metadata about the use of the services. These are not personal data. [SUPPLIER] has
taken appropriate technical and organisational measures to prevent the loss and unauthorised use of your
personal data. [SUPPLIER] is bound to secrecy under the agreement.
E-mail and mailing list

mailblue
EXAMPLE: Our website uses [ADVERTISEMENT], a third-party provider that handles e-mail traffic originating
of our website and handle the sending of any newsletters. All confirmation e-mails you receive
of our website and web forms are transmitted through the servers of [SUPPLIER]. [SUPPLIER] will use your
never use your name and e-mail address for your own purposes. At the bottom of every e-mail sent automatically via our
website is sent you will see the 'unsubscribe' link. If you click on this you will no longer receive email from our website
received. This can seriously reduce the functionality of our website! Your personal data will be used by
[APPLICANT] stored securely. [ADVERTISER] uses cookies and other internet technologies
that provide insight into whether emails are opened and read. [SUPPLIER] reserves the right to change your
use data to further improve the service and, as part of this, share information with
sharing third parties.
Hotmail
We use the services of Hotmail for our regular business e-mail traffic. This party has
taken appropriate technical and organisational measures to prevent the misuse, loss and corruption of your and our
data as much as possible. Hotmail does not have access to our mailbox and we handle all our e-
mail traffic confidential.
Payment processors
Mollie
We use the platform of
Mollie. Mollie processes your name, address and place of residence data and your payment details such as your bank account or
credit card number. Mollie has taken appropriate technical and organisational measures to protect your
personal data. Mollie reserves the right to use your data to improve the
further improve services and share (anonymised) data with third parties as part of this.
All the above guarantees regarding the protection of your personal data are also
applicable to those parts of Mollie's services for which they engage third parties. Mollie stores your
data for no longer than is permitted under the statutory time limits.
Reviews
facebook
EXAMPLE: We collect reviews through [ADVERTISEMENT]'s platform. If you leave a review via
[APPLICANT] then you are required to provide your name and e-mail address. [APPLICANT] will share this data
with us so that we can link the review to your order. [SUPPLIER] will also publish your name on
its own website. In some cases, [SUPPLIER] may contact you to explain your
review. In the event that we invite you to leave a review, we will share your name and e-mail address
with [SUPPLIER]. They only use this data for the purpose of inviting you to leave a review
let. [SUPPLIER] has taken appropriate technical and organisational measures to protect your
protect personal data. [SUPPLIER] reserves the right, for the purposes of providing
the provision of services, for which we have given [SUPPLIER] permission. All
The above guarantees regarding the protection of your personal data are also of
apply to those parts of the service for which [SUPPLIER] engages third parties.

Shipping and logistics

PostNL
When you place an order with us, our job is to get your package delivered to you. We use
PostNL's services to carry out deliveries. This requires us to provide your name,
share address and residence details with PostNL. PostNL uses this data solely for the purpose of
performance of the agreement. In the event that PostNL engages subcontractors, PostNL will make your data
also available to these parties.
Invoicing and accounting
InvoiceSend
We use the services of
InvoiceSending. We share your name, address and residence details and details relating to your order.
This data is used to administer sales invoices. Your personal data will be
sent and stored protected. InvoiceSending is bound to confidentiality and will keep your data
confidential. InvoiceSending does not use your personal data for any other purpose than
described above.
External sales channels
tarot.co.uk
EXAMPLE: We sell (some of) our items through the platform of [SUPPLIER]. If you sell through this
platform places an order then [SUPPLIER] shares your order and personal data with us. We use
these data to handle your order. We treat your data confidentially and have appropriate
taken technical and organisational measures to protect your data against loss and
unauthorised use.

PostNL
When you place an order with us, our job is to get your package delivered to you. We use
PostNL's services to carry out deliveries. This requires us to provide your name,
share address and residence details with PostNL. PostNL uses this data solely for the purpose of
performance of the agreement. In the event that PostNL engages subcontractors, PostNL will make your data
also available to these parties.
Invoicing and accounting
InvoiceSend
We use the services of
InvoiceSending. We share your name, address and residence details and details relating to your order.
This data is used to administer sales invoices. Your personal data will be
sent and stored protected. InvoiceSending is bound to confidentiality and will keep your data
confidential. InvoiceSending does not use your personal data for any other purpose than
described above.
External sales channels
tarot.co.uk
EXAMPLE: We sell (some of) our items through the platform of [SUPPLIER]. If you sell through this
platform places an order then [SUPPLIER] shares your order and personal data with us. We use
these data to handle your order. We treat your data confidentially and have appropriate
taken technical and organisational measures to protect your data against loss and
unauthorised use.
Purpose of data processing
General purpose of processing
We use your data exclusively for the purpose of our services. That is, the purpose of the
processing is always directly related to the order you provide. We will not use your data for
(targeted) marketing. If you share data with us and we use this data to - other than on your
request - to contact you at a later time, we will ask for your explicit permission to do so. Your
data will not be shared with third parties, other than to meet accounting and other administrative
obligations. These third parties are all bound to confidentiality under the agreement
between them and us or an oath or legal obligation.
Automatically collected data
Data automatically collected by our website is processed for the purpose of processing our
to further improve services. This data (e.g. your IP address, web browser and
operating system) are not personal data.
Cooperation in tax and criminal investigations
Where appropriate, lyluah may be required by law to share
your data in connection with government tax or criminal investigations. In such a case, we are
forced to share your data, but we will oppose it within the possibilities offered by law
COMPETENCIES.
Retention periods
We keep your data for as long as you are our client. This means that we keep your client profile until you
indicate that you no longer wish to use our services. If you indicate this to us, we will

also be construed as a forgetting request. This also means that we will not keep your data for more than two years
from the last moment of contact or transaction, unless there is a legal justification for doing so.
basis. Pursuant to applicable administrative obligations, we must issue invoices containing your
(personal) data, we will therefore keep this data for as long as the applicable term runs.
However, employees will no longer have access to your client profile and documents we receive in response to
have manufactured your order.
Your rights
Under applicable Dutch and European legislation, as a data subject you have certain rights with
regarding personal data processed by or on behalf of us. We explain below which
rights these are and how to invoke them. In principle, to prevent abuse, we send
statements and copies of your data only to your e-mail address already known to us. In the event that you send the
data to a different e-mail address or, for example, by post, we will ask you to subscribe to
identify. We keep records of completed requests, in the case of a forgetting request
we administer anonymised data. All transcripts and copies of data will be received in the
machine-readable data format that we use within our systems. You have the right at any time to request a
file a complaint with the Personal Data Authority if you suspect that we have used your personal data in a
use the wrong way.
Right of inspection
You always have the right to request the data we process (or have processed) that relates to your person or
are traceable to it, to be inspected. You can make a request to this effect to our contact person for
privacy matters. You will then receive a response to your request within 30 days. If your request is granted
we will send you a copy of all data with a list of processors at the e-mail address known to us
who hold such data, indicating the category under which we hold such data
stored.
Right of rectification
You always have the right to request the data we process (or have processed) that relates to your person or
are traceable to it, to be amended. You can make a request to this effect to our contact person
for privacy issues. You will then receive a response to your request within 30 days. If your request is granted
we will send you a confirmation at the e-mail address known to us that the data has been updated.

Right to restriction of processing
You always have the right to request the data we process (or have processed) that relates to your person or for that purpose
are traceable, to limit. You can make a request to this effect to our contact person for
privacy matters. You will then receive a response to your request within 30 days. If your request is granted
we will send you a confirmation at the e-mail address known to us that the data until you lift the restriction is not
longer be processed.
Right of transferability
You always have the right to request the data we process (or have processed) that relates to your person or
are traceable to it, by another party. You can make a request to this effect to
our privacy contact. You will then receive a response to your request within 30 days. If your
request is granted, we will send you copies or copies of all data at the e-mail address known to us
about you that we have processed or have processed on our behalf by other processors or third parties. To all
likelihood, in such a case, we will no longer be able to continue services because the secure
linking of data files can then no longer be guaranteed.
Right to object and other rights
You have the right, where applicable, to object to the processing of your personal data
by or on behalf of lyluah. If you object, we will immediately cease data processing in
pending the resolution of your objection. If your objection is well-founded we will provide copies and/or
of data we process (or have processed) to you and then permanently cease processing. U
furthermore has the right not to be subjected to automated individual decision-making or profiling
subject. We do not process your data in such a way that this law applies. Are you from
opinion that it does, please contact our privacy contact.

Cookies
Google Analytics
Through our website, cookies are set by the US company Google, as part of the "Analytics" service.
We use this service to track and get reports on how visitors use the website.
This processor may be required under applicable laws and regulations to disclose these
data. We have not allowed Google to use the analytics information obtained for other Google
services.
Third-party cookies
In the event that third-party software solutions use cookies, this is stated in these
privacy statement.
Privacy policy changes
We reserve the right to change our privacy policy at any time. However, on this page you will always find the most
recent version. If the new privacy policy affects the way in which we already collect
process in relation to you, we will notify you by e-mail.
Contact details
lyluah
cruquiuskade 251 1018am Netherlands T E info@lyluah.sr
Contact person for privacy matters
Rachida Kacimi