Source: https://www.mambaby.com/shop/us_uk/privacy-policy
Timestamp: 2019-04-23 06:54:24+00:00

Document:
Company name: MAM Babyartikel Gesellschaft m.b.H.
We only collect and use personal data of our users insofar as this is necessary to provide both a functional website and our contents and services. As a matter of course, the collection and use of our users’ personal data takes place only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for practical reasons and processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1) point (a) EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1) point (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1) point (c) GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1) point (d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the party concerned do not outweigh the first interest stated, Art. 6(1) point (f) GDPR serves as the legal basis for the processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if this has been provided for by European or national legislative bodies in EU regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
The data is also stored in the log files of our system. This does not apply to the IP addresses of the user or other data that enable the association of the data with a user. These data are not stored together with other personal data of the user.
The legal basis for the temporary storage of data is Art. 6(1) point (f) GDPR.
These purposes reflect our legitimate interest in the data processing pursuant to Art. 6(1) point (f) GDPR.
Data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The legal basis for the processing of personal data using cookies necessary for technical reasons is Art. 6(1) point (f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes when consent on the user’s part has been obtained is Art. 6(1) point (a) GDPR.
The user data collected by cookies necessary for technical reasons are not used to create user profiles.
The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize what we offer.
Other purposes include improving the quality of our website for our users and facilitating re-entry into our website.
For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6(1) point (f) GDPR.
The user's consent to the processing of this data is obtained in the course of the registration process.
The legal basis for the processing of the data is Art. 6(1) point (a) GDPR.
If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6(1) point (b) GDPR.
Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.
The data collected is necessary to enable identification of the user and to ensure proper delivery of the ordered goods.
Data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected.
This is the case for those data collected during the registration process to fulfil a contract or to carry out pre-contractual measures when the data are no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
As a user you have the right to cancel the registration at any time. You can have the data stored about you changed at any time.
If the data is required to fulfil a contract or to carry out pre-contractual measures, premature erasure of the data is only possible insofar as there are no contractual or statutory obligations to the contrary.
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data privacy statement.
In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.
As a logged in MAM Club member or health care professional, you are able to submit a customer opinion on products. By registering for the MAM Club or as a health care professional, you agree to be contacted by email in the event of any questions regarding the customer opinion you have submitted. This consent can be revoked at any time in writing or by email at mam-club@mambaby.com or at service4professionals@mambaby.com.
The legal basis for the processing of data after the user’s registration for the newsletter is Art. 6(1) point (a) GDPR.
The collection of the user's email address is for the purpose of sending the newsletter.
Data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's email address will therefore be stored as long as the MAM Club membership or registration as a health care professional remains valid.
The subscription to the newsletter can be cancelled by the user concerned at any time. There is a corresponding link for this purpose in every newsletter.
It also makes it possible to revoke the consent to the storage of personal data collected during the registration process.
No data will be passed on to third parties in connection with the data processing for participation in the prize draw. The data will be used exclusively for the prize draw.
The legal basis for the processing of the data after the user’s registration for the prize draw is Art. 6(1) point (a) GDPR.
The collection of personal data is for the purpose of informing the respective user concerning his or her participation in the prize draw and the winner concerning his or her success.
Data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's data will therefore be stored for as long as the prize draw is active.
Participation in the prize draw can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every email concerning the prize draw.
You can contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1) point (f) GDPR. If the contact by email is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) point (b) GDPR.
In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
Data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent by email, this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the issue in question has been conclusively resolved.
Users have the possibility to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
are sent by us to the companies mentioned above.
The transfer of the data serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, and therefore Art. 6(1) point (b) GDPR forms the legal basis for the processing of the data.
The data collected is necessary to enable the fulfilment of the contract.
With regard to healthcare professionals, personal data is collected for the purpose of registering for the MAM Healthcare Professionals area at www.mambaby.com/professionals, participating in a prize draw and/or requesting the delivery of informational material.
This is the case if the data are no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
Your consent to the transfer of data given in the order process can be revoked at any time, even without giving reasons. You are obliged to provide us only with truthful information.
This website uses Google Analytics, a web analysis service of Google Inc. (www.google.de). Google Analytics uses so-called “cookies", or text files, which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will first truncate your IP address within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and there truncated. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
The legal basis for the processing of the data after the user's consent is Art. 6(1) point (a) GDPR.
We use the functions for website usage analysis and remarketing. These purposes reflect our legitimate interest in the data processing pursuant to Art. 6(1)point (f) GDPR.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout.
Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google AdWords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example via browser settings that generally deactivate the automatic setting of cookies or by setting your browser so that cookies from the "googleadservices.com" domain are blocked.
Please note that you must not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.
This website uses the remarketing technology and "similar target groups" function of Google Inc. With the help of this technology, users who visit our website are again addressed by our online advertising on pages of the Google Partner Network. This is done by using cookies, i.e. small text files that Google and third-party providers store locally in the cache of your Internet browser. Furthermore, cross-device remarketing is used. This means that users who access our website on one device can also be addressed with our online advertising on other devices.
Please note that if cookies are disabled, you will continue to receive advertisements, but these will be less tailored to your interests or your surfing behaviour.
With your consent, our website uses the Conversion Tracking Pixel Service of Facebook, Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). This allows us to track the actions of our users after they have been redirected to our website by clicking on a Facebook advertisement. This enables us to track the effectiveness of Facebook ads for statistical and market research purposes. The collected data remain anonymous. This means that we cannot access the personal data of individual users. However, the information collected is stored and processed by Facebook. We will inform you about this matter based on the current information available to us. Facebook can link the data to the data on your Facebook account and uses the data for its own advertising purposes in accordance with the Facebook data guidelines https://www.facebook.com/about/privacy.
Facebook Conversion Tracking also allows Facebook and its partners to show you ads both inside and outside of Facebook. In addition, a cookie is stored on your computer for this purpose.
Please click here to revoke your consent: https://www.facebook.com/ads/website_custom_audiences.
We use the functions for the analysis of website usage as well as for advertising measures which are necessary for the financing of the website, among other things. These purposes reflect our legitimate interest in the data processing pursuant to Art. 6(1) point (f) GDPR.
You can ask the data controller to confirm whether personal data concerning you are processed by us.
(8) the existence of automated decision making including profiling in accordance with Art. 22 Sec. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR concerning the transmission.
You have a right to correction and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The data controller shall make the correction without delay.
(4) if you object to the processing pursuant to Art. 21(1) GDPR and it is not yet clear whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal personality or on the grounds of an important public interest of the Union or a member state.
(2) You revoke your consent which served as the basis for the processing according to Art. 6(1) point (a) or Art. 9(2) point (a) GDPR, and there is no other legal basis for processing.
(3) You submit an objection to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you submit an objection to the processing pursuant to Art. 21(2) GDPR.
(5) The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the member states to which the data controller is subject.
(6) The personal data concerning you have been collected in relation to information society services provided in accordance with Art. 8(1) GDPR.
If the data controller has publicly disclosed the personal data concerning you and in accordance with Art. 17(1) GDPR, is obligated to erase these, he shall take measures, including technical measures, which are appropriate in light of the available technology and the implementation costs, to inform data processors who process the personal data that you, as the data subject, have requested the erasure of all links to these personal data as well as of copies or replications of these personal data.
If you have exercised your right to have the data controller correct, erase or restrict the processing, the data controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction on processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed by the data controller concerning such recipients.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. This must not impair the freedoms and rights of other persons.
The right to data portability shall not apply to the processing of personal data that is necessary for the performance of a task in the public interest or is carried out in the exercise of official authority conferred upon the data controller.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out based on Art. 6(1) point (e) or (f) GDPR; this also applies to profiling based on these provisions.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons for the processing which are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent up until the time of revocation.
However, these decisions must not be based on special categories of personal data according to Art. 9(1) GDPR, unless Art. 9(2) point (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the data controller, to state one’s own position and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state where you are staying or working or which is the location of the suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78