Mamamoon Privacy Policy

Introduction
This Privacy Policy applies to the processing of personal data of all our users with regard to the products and/or services of Mamamoon B.V., Van Tuyll van Serooskerkenweg 98-3, 1076 JR Amsterdam (hereinafter: “Mamamoon”). In this Privacy Policy we explain how personal data is processed and for which purposes the data are being processed. By using the products and/or services of Mamamoon and/or accepting this Privacy Policy, the following terms shall apply.

Disclosing personal data is not required 

A user shall at all times have the option whether or not to disclose personal data. However, for the use of a number of our products and/or services it is requested to disclose personal data to Mamamoon. If the input of your details is required, Mamamoon shall inform you which data is ‘necessary’ to be able to use the products and/or services and which data are ‘optional’.

Processing of personal data 

By using the products and/or services of Mamamoon, Mamamoon processes personal data of its users. This concerns first name, email address, date of birth, gender, due date and date of birth of your baby.  Furthermore, financial details, such as a bank account number, are being processed if a user purchases paid products and/or services of Mamamoon, if such details are necessary for the payment of said products and/or services.

The processing of personal data takes places in the following situations:

1. Formation and execution of an agreement with a user;
2. Administrative processing; to offer and/or deliver the products and/or services as purchased by a user; 
3. Invoicing; in case of paid products and/or services. Should payment fail, Mamamoon may pass on the claim for collection, to a debt collection company;
4. To make a personal account on the website of Mamamoon and/or app;
   

In the aforementioned situations the full name, email address, date of birth, gender, due date and date of birth of your baby and bank account details are necessary for the execution of the agreement.

5. to send user newsletters, offers, user information, service notices and/or other electronic messages that may be relevant for the user, in case the user has explicitly agreed thereto;
   

In the aforementioned situations the personal data, i.e. e-mail address, are provided optionally for which processing user explicitly provides permission.

6. To control, analyze, maintain, optimalize and secure our products and/or services and to detect and deter misuse and/or fraud of our products and/or services;
7. To determinate strategic analyses and reports of our products and/or services; and/or 
8. If a user visits one of our (mobile) websites, our servers may (automatically) save information such as URLs, IP-addresses, browsertypes, languages, data and times of the visits;
   

In aforementioned situation Mamamoon has a legitimate interest to process personal data.

The provided personal data shall solely be processed by Mamamoon for the purpose of the execution of the products and/or services and, more specific, the express purpose for which the personal data is collected.

‍Rights users

All of our users have certain rights under GDPR legislation to manage their own personal data: 

- The right to access;

- The right to rectification;

- The right to erasure;

- The right to object;

- The right to data portability;

- The right to restriction.

Furthermore, a user may revoke the consent given for the processing of his data at any time. In case user wishes to invoke one or more of these rights, he/she may contact Mamamoon through welcome@mamamoon.me. In addition, the user has the right to lodge a complaint about our data processing activities with a data protection authority (Autoriteit Persoonsgegevens).

Transfer to third parties

Only persons authorized by Mamamoon for the security and/or processing and/or maintenance of IT-structure have access to personal data of users. Mamamoon shares personal data with the following third parties to improve the functionality of our app and analytics purposes. 

Memberstack 

Memberstack is a third-party service Mamamoon to authenticate you as a user of our app. The personal data shared between Memberstack and Mamamoon B.V. contains of your email address, password, name.

Your account details, such as your password and email address, are secured by Memberstack. For more information on how Memberstack uses data in their software read their privacy policy here.

Stripe

Stripe is a third-party service Mamamoon uses to process subscription payments. Mamamoon only shares your email address with Stripe to be able to send you emails about the status of your subscription and payment. 

Stripe collects your payment information and secures it. For more information on how Stripe collects and uses your personal information, read their privacy policy here. 

In case you discover a data breach, it is of utmost importance that we are informed. You may report this through welcome@mamamoon.me. Your report and data will be treated confidentially.

Mamamoon shall not provide personal data of its users to third parties unless set out in this Privacy Statement and/or unless this is necessary for the execution of its Products and/or services, on the basis of a statutory provision or in case of an emergency if this is, in the reasonable opinion of Mamamoon, in the interest of it users. This includes legitimate requests of authorities, summons or court orders, acts to investigate or prevent damages or fraud, or acts to guarantee the safety of our network and our Products and/or Services.

Security

The personal data processed by us will be stored in The Netherlands to the extent possible. The GDPR thus applies to this stored personal data.

Mamamoon has taken adequate technical and organizational measures to secure the personal data of its users against loss or unlawful processing, amongst which (i) storage of personal data in a secured database with encrypted passwords and secured backups and (ii) payment orders to Mamamoon through secured payment systems.

‍
Retention period

The personal data shall solely be stored during the period which shall be necessary for the execution of the purposes as set out above, unless applicable laws prescribe longer retention periods in which case the personal data shall be stored for the period as prescribed by the applicable laws.

‍