Privacy Policy

Mayaherbs.com is a subsidiary of Maya World Trading BV.

We take our customers privacy very seriously, including of course your personal details. We would like to inform you which information we store, what it is used for, and what your rights are, based on the GDPR laws in the EU.

Valid from May 25th 2018

Basic Overview:

Important contact details of us as the responsible party: (see point 1 below)
Categories of data: The following personal details are collected when you register on our website and/or place an order: Registration details, details about purchases and email preferences.
Some of these details will be entered by yourself (for example; during the registration process or when entering your details for a purchase), sometimes we will collect data automatically (for example, when you have selected to opt in to our newsletter or discount coupons or when you have visited our website).
Processing purpose: We process your personal info to offer services such as: our newsletters, processing your orders and improving your website visits.
Legal grounds: Processing your data is mostly needed to be able to process your orders, and pursuing legitimate interests.
If and when permission is legally required, for example for certain commercial emails or cookies, we will ask for your permission.
Categories of receivers of your details: Sometimes, third parties get minimal access to some of the information you provide us. This is sometimes necessary to be able to process your orders (for example, when we ship your order, the shipping company will get your address details). This info is not processed by anyone outside the EU. Your personal details are not shared/traded/sold or given to any third parties (other than our chosen shipping companies, or (if needed) government agencies and courts).
Duration of the storage of your details: We process and store your details for as long as you are our customer. Inactivity for a long time, will result in account removal and anonymization.
Your rights in regard of data and privacy protection, especially the right to object:
Under certain circumstances, you can request us to have your data-protection-rights enforced. To specify: in the case of certain reasons that arise from your specific situation, you have the right to object to the processing of your data if we justify the legality of the data processing with a weighing of interests or if the data processing relates to the profiling or directly mailing. In principle, we will no longer process your data in this case.
Voluntary provision of data: There is no legal requirement to give your details to Maya World Trading BV. But, you can not register or place an order if you don’t provide us with your details. Providing data is completely voluntary. If you do not provide your details, you will not experience legal complications, but you will not be able to place an order, register or receive special offers on any of our websites.

Detailed Privacy Policy

1. Contact details of the responsible party that processes personal information.
  Maya World Trading BV is a registered business that offers a variety of products on various websites. The contact details are below:
  
  Maya World Trading BV
  Mollerusweg 66
  2031 BZ Haarlem
  Netherlands
  +31 23 5325 192

Data catagories
We collect and process the following categories of personal details to process your orders and offer commercial e-mails.

Data Categories	Examples
Registration Details	Name, postal address, date of birth, e-mail addresses, phone numbers, registration date, membership-type.
Purchases	Purchase details, time, product, value, purchase history.
Preferences for mailing	Approval for commercial e-mails, frequency

Sometimes, these details are provided by you directly (for example as part of the registration process or when purchasing on our websites) and sometimes this is collected automatically (for example when you visit our website or click on links in our newsletter).

1. Processing purposes
  We process your personal details in accordance with provisions of the General Data Protection Regulation (GDPR) and the Algemene Verordening Gegevensbescherming (AVG) for the following purposes:
  – E-mail advertisement (by Maya World Trading BV or it’s subsidiaries)
  – Personal and individual communication and product recommendations, matching your shopping preferences
  – Coupons and other discount e-mails (by Maya World Trading BV or it’s subsidiaries)
  – The use of cookies
  – Product and service improvements
  – Executing business decisions
  – Regulatory Compliance
  – Determine, execute and defence of legal claims

1. Legal basis
  Processing your details as our customer, is allowed because it is required to be able to process your orders and because we have a decisively justified interest. This justification is decisive because: by registering on our website, you have come to a commercial agreement, where you have shown interest in providing your personal details as they will be required to process your orders, and (if selected) shown interested in receiving commercial e-mails (newsletters).
  
  If and when permission is legally required, for example for certain commercial emails or cookies, we will ask for your permission. If no permission is granted, we will not execute any information processing that requires your permission.
  
  In addition, statutory permission standards, such as tax periods or the validation, exercise and defence of legal claims, enable the processing of your data.

1. Receivers or categories of receivers of your details
  1.) Maya World Trading BV: Maya World Trading BV, as a responsible authority, will only have access to your data to the extent necessary to achieve the objectives of the internal division of tasks. Internally, only those departments and employees have access to your data that actually require access to this data.
  2.) Service providers: We have enabled service providers who, as order processors, access and process your data for specific purposes specified by us. These service providers are limited to shipping organisations.
  3.) Third parties: We may be required to share your information with government agencies or courts if legally required.
  4.) International data transmission: While all receivers are currently in the EU/EER, you can expect some might no longer be in a EU/EER country that does not have strict privacy and personal data protection as the EU does. Especially if these would be in the US in the future. In this case, Maya World Trading BV will select service providers that are certified according to the US-EU Privacy Shield-programme (art. 45, lid 1 AVG), or come to an agreement with Maya World Trading BV in accordance with the EU-Standard Contract Provisions as approved by the EU-Comission (art. 46, lid 2 (c) of (d) AVG).

1. Duration of the storage of your personal information
  – We process and store your details for as long as your are registered as our customer. This also includes any form of a contract (pre-contractual juridical relationship).
  – In addition we are subject to various obligations on storage and documentation and the federal budgetary regulation. The maximum required time for storage and documentation is 10 years after the end of the contractual relationship or pre-contractual juridical relationship.
  – Specific laws can include a longer storage requirement. For example, local regulations require the storage of all digital invoices for at least 10 years. But there are also prescription periods of 30 years.
  – If and when the data is no longer needed to fulfil contractual or legal obligations and rights, these are regularly removed, unless their (temporary) processing is necessary for the fulfilment of the before mentioned purposes for the decisive legal interest of the client.
  – Inactivity on your customer account for over 2 years, will result in a removal and anonymization of your account. You will have to re-register to be able to place a new order after 2 (two) years.

1. Your rights in regards of data-protection
  Under certain circumstances, you can have your data privacy protection rights invoked:
  
  – The right of withdrawal of consent: If you have given permission for a certain processing activity, you can withdraw this consent at any time. This will not have effect on the legality of the processing that took part prior to the withdrawal of consent or for as far as the processing can be justified on a different legal basis.
  – The right for information: You have the right to information from us, about the personal information stored.
  – The right to correct: By request, we can correct details stored about you, if they are incorrect or not applicable.
  – The right for removal: If you wish, we will remove your data (according to art. 17 AVG), when other legal regulations (for example: legal storage requirements) or a predominant interest on our part (for example: to defend our rights and claims) have nothing against this.
  – The right to limit processing: Taking into account the conditions of article 18 (AVG), you can ask us to limit the processing of your data.
  – The right to object: Most importantly, you can object the processing of your details in accordance with article 21 (AVG). This right to object exists for reasons that come from specific situations and only for dataprocessing that is legally based on weighing interests concerning profiling or direct-marketing purposes. In this case, we will no longer process your data, unless we are legally authorised to reject your objection. We do not use direct marketing, including profiling. This is not mandatory for us and we will not process your data for these purposes.
  If we ever decide to change this, you will have to give your permission for direct advertising or no longer receive such direct advertising. You must provide your consent.
  – The right of data portability: You also have the right to have your data transferred to yourself or third parties, in a structured, current and digital format, in accordance with article 20 (AVG).
  – Complaints with the data protection authority: In addition, you also have the right to call on a competent data protection supervisory authority (Article 77 of the AVG). However, we always recommend that you always file a complaint with our data protection officer so that we can resolve your request as quickly as possible and in a customer-focused manner.
  
  For quick processing, we ask you to submit your requests for the exercise of your rights in writing to the following address
  
  Maya World Trading BV
  Mollerusweg 66
  2031 BZ Haarlem
  Netherlands
  +31 23 5325 192

1. Scope of your obligations to make your data available
  There is no legal obligation to provide your information to Maya World Trading BV. But, you can not register, subscribe or place orders on our websites if you don’t provide us with your details.
  Providing your details is completely voluntary. Not providing the details will not result in legal complications, but you will not be able to enjoy the products, offers and services of Maya World Trading BV and its subsidiaries.

Additional information
This privacy policy has been updated last on May 25th 2018. Maya World Trading BV reserves the right to regularly update this privacy policy