About Our Privacy Policy

Wowbama is very concerned about your privacy. We only process data that we need to (improve) our services and handle all information collected about you and your use of our services carefully. Your data will not be shared with third parties for commercial purposes. This privacy policy applies to the use of the website and the services accessible on it from Wowbama. This Privacy Policy describes what information we collect about you, what this information is used for, and with whom and under what conditions this information may be shared with third parties. We also explain how we store your data, how we protect your data from misuse, and what rights you have regarding the personal data you provide us. If you have any questions about our privacy policy, please contact our privacy contact person; you will find the contact details at the end of our privacy policy.

About Our Data Processing
Below, you can read how we process your data, where we store it, what security techniques we use, and who can see the data.

Webshop Software
We use Shopify, Google G Suite, and Klaviyo for our web hosting and email services. For our web hosting, we use the services of a web hosting company. Personal data collected through the use of our website and services is shared with our web host, who needs access to this information to provide (technical) support. They will not use this data for other purposes. Our web host is contractually obligated to take the necessary precautions and security measures regarding your personal data.

Our webshop is developed using Shopify software, and we host our webshop on a privately managed server. We have taken necessary precautions and security measures regarding your personal data, such as SSL encryption and a strong password policy.

Email and Mailing Lists
For our regular business email, we use the email services of our web host. This party has taken appropriate technical and organizational measures to prevent misuse, loss, or alteration of your data. Our web host does not have access to our mailbox, and we handle our email traffic confidentially.

Purpose of Data Processing
General Purpose of Data Processing
We use your data solely to provide our services to you. This means that the purpose of processing this data is directly related to the task you provide to us. We do not use this data for (targeted) marketing purposes. If you share information with us and we use this information to contact you later—not based on a request—we will first ask for your explicit consent. Your data will not be shared with third parties for purposes other than fulfilling accounting and administrative obligations. These third parties are all bound by confidentiality agreements based on the contract we have with them, an oath, or a legal obligation.

Automatically Collected Data
Information automatically collected by our website is processed solely to serve you and/or improve our services further. This information (e.g., your IP address (anonymized), web browser, and operating system) is not personal information.

Cooperation in Tax and Criminal Investigations
In some cases, we may be legally obligated to share your data to assist in a tax or criminal investigation. In such cases, we are required to comply and provide assistance, but we will object based on the lawful possibility.

Retention Periods
We keep your data as long as you are a customer with us. This means that we maintain and store your customer profile until you notify us that you no longer wish to use our services. Such a notification is also considered a request to be forgotten. We are required to keep invoices containing your (personal) data due to relevant administrative obligations, and this information is securely stored as long as the relevant term for these obligations has not expired. Employees no longer have access to your customer profile or any documents produced as a result of your assignment or task.

Your Rights
Under applicable law, you as a data subject have certain rights regarding personal data processed by or on behalf of us. Below is an explanation of these rights and how you as a data subject can invoke these rights. To prevent misuse, we send invoices and copies of your data in principle only to the email addresses you have provided us. If you wish to receive this information at another email address or, for example, by post, we ask that you identify yourself accordingly. We keep a record of processed requests; in the case of a request to be forgotten, we will maintain a record of anonymized data. You will receive all invoices and copies of data in files structured in a machine-readable format based on data classifications that we use in our system.

Right of Access
You always have the right to access the data that we process and that relates to or can be traced back to your person. You can request this access from our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the email address known to us, along with an additional list of the processors who process this data, specifying the categories under which we store this data.

Right to Rectification
You always have the right to have the data that we process and that relates to or can be traced back to your person corrected. You can request this rectification from our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the information has been corrected to the email address known to us.

Right to Restriction of Processing
You always have the right to restrict the data we process that relates to or can be traced back to your person. You can request such a restriction from our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation via the email address known to us that the processing of your data has been restricted until you choose to lift this restriction.

Right to Data Portability
You always have the right to have the data we process and that relates to or can be traced back to your person processed by a third party of your choice. You can send such a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you your (personal) invoices or copies of data processed by us or third parties on our behalf to the email address known to us. It is very likely that in such a case, we can no longer offer you our services, as we will no longer be able to guarantee the same level of data security as before.

Right to Object and Other Rights
You retain the right to object at any time to the processing of your personal data. In the event of such an objection, we will immediately cease processing your data while your objection is being investigated and processed. If your objection is justified, we will return all invoices and/or copies of personal data we or third parties have processed on our behalf up to that point and cease further processing. You also retain the right not to be subjected to automated decision-making processes or profiling. We do not process your data in such a way that this right applies. If you believe this right applies, please contact our Privacy Officer.

Changes to the Privacy Policy
We reserve the right to change our privacy policy at any time. However, this page will always show the most recent version of our privacy policy. Should a new privacy policy affect how we process newly collected data about your person, we will notify you by email.