The enclosed statement regarding customers, suppliers and other business partners pertains to how Not Yet Made (‘the Company”) respects these groups’ concerns about privacy. This privacy statement applies to all entities of Not Yet Made. This privacy statement does not address applicants and employees.
This privacy statement can change from time to time and the most current statement is regularly published on the Not Yet Made website. If Not Yet Made processes major changes to this policy the customer, supplier or business partner will be kept informed by a notification on our website.
The purpose of this privacy statement is to inform individuals on how the Company securely collects and processes data so that privacy is maintained. Not Yet Made respects and protects privacy in accordance with the European General Data Protection Regulation (GDPR) and other applicable laws. Further explanation is given here within on what kinds of personal data Not Yet Made processes, the purpose of processing and how the Company may share personal data with third parties.
WHAT DATA IS BEING COLLECTED?
Not Yet Made may process the below data for the purposes as described below:
- Name, address
- Email address, telephone number
- Data of birth and age
- Bank account number, credit card details
- Clothing sizes
- IP address, Browser ID
- Behavior on site
This list is not exhaustive and Not Yet Made may collect and process data that is useful for its services. Not all data above is collected and processed for every customer, supplier and business partners. Often the data is limited to only a few of the above details. The data collected is dependent upon the purpose of processing.
The Company does not collect and process sensitive data such as ethnic and racial origins, political opinions, religious beliefs, trade union memberships, physical or mental health conditions, genetic or biometric details or sexual preferences. Not Yet Made may use sensitive data such as bank account numbers. Also, Not Yet Made may combine received data points in order to develop a profile useful in sending personalized offers and advertisements. Not Yet Made is aware of the sensitivity and impact on individual privacy and has taken appropriate actions to handle all data carefully.
HOW DOES NOT YET MADE COLLECT DATA?
Not Yet Made may collect data for the use of products and services. This data may be directly collected or from individuals or from his/her devices. For example, the Company may collect data from or about the individual through the Company’s website, social media pages, customer service email messages upon sign up for Company newsletters and personalized offers, upon purchase of Not Yet Made product or when individuals register for an account. When individuals purchase a product from Not Yet Made, the Company may collect his/her registration information, status of order and purchase history. Not Yet Made may collect information about the individual from other sources such as public databases, third party processors or social media.
4.1 Personal data directly collected from customer, supplier and business partner.
Not Yet Made collects and processes personal data sourced directly from the customer, supplier or other business partners. These parties have made the choice to provide this data to Not Yet Made. For example, when parties provide email addresses in order to receive a digital receipt or to conduct business with Not Yet Made.
4.2 Personal data not obtained directly from customer, supplier and business partner.
Besides the above, Not Yet Made may collect personal data from these groups, obtained via third parties, as part of the service the Company provides or in connection with legal requirements that are applicable to the Company.
List of third parties Not Yet Made share their data with are, but is not limited to:
Google Analytics Premium
HOW DOES NOT YET MADE USE THIS DATA?
Not Yet Made mainly uses this personal data based upon a contractual obligation, legal obligation, consent or legitimate interest.
Not Yet Made will process data that is necessary for the performance of a contract with suppliers and other business partners. Not Yet Made also processes data under the lawful basis of a legal obligation. Based upon legal obligation, the Company may store specific financial data for a period of time to meet requirements set by national tax authorities. Not Yet Made may also process your data for the purpose of a legitimate business interest such as to strengthen our relationship with these parties. The Company may provide these parties with communications regarding its services that it thinks might interest the parties. The Company takes into consideration the balance between privacy impacts and the Company’s legitimate business interest. Not Yet Made may process personal data when consented to do so. For example, the Company may lawfully ask these parties for consent to set up a profile in order to send personalized offers. The Company also asks permission to place a cookie on devices in order for the Company to set up profiles and place ads. When Not Yet Made processes data based on these legal grounds, these parties have the right to object, restrict, erase, access and ask data portability.
WHY DOES NOT YET MADE PROCESS THIS DATA?
1. To respond to questions, when contacted;
When an individual wants to get in contact with Not Yet Made, the Company will use this data to reply on the request or question. Not Yet Made may process your name, email address and correspondence with Not Yet Made. Not Yet Made processes this data based on the individuals consent when he/she provided the data.
2. To complete orders and when an account is registered;
Not Yet Made asks to fill in personal information when an individual wants to complete an order and/or registers for an account. Some of this information is required: title, first name, last name, address, email, password. The information required for a purchase is based on a contractual obligation and to inform the individual about the status of the order. In order to complete a purchase Not Yet Made may use data for processing payment, delivery, status updates and other communication such as, notification of the delivery status or sending information. Information Not Yet Made may process is name, gender, contact details, email address, purchase history, bank account details. Personal information and order history are saved on a secure server.
3. For development and improvement of products and services;
For the legitimate interest to develop and improve products and services, Not Yet Made may collect and process personal data. Based on analysis of customers’ behavior Not Yet Made can modify its products and services. This customer behavior is based on visitor statistics and how often visitors have clicked on website pages and the items purchased. Not Yet Made may use third parties such as google analytics to analyze the visitor behavior in order to improve its services. Not Yet Made may share personal data with third parties who provide Not Yet Made with web hosting, analysis, payments and other similar services. The personal data Not Yet Made may use are contact details, email address, payment information, correspondence and technical data from the individuals devices such as IP-address, Browser ID and the pages the individual visited on the Not Yet Made website.
4. To comply with law and regulations;
Not Yet Made shall comply with laws and regulations and therefore personal data could be required to comply, for example for legal obligations such as tax purposes. Personal data Not Yet Made may process are name and contact details.
5. To deliver greater website functionality;
6. To connect with parties through social media;
7. For assessment or acceptance of customers, suppliers and other business partners;
When a customer orders at or supplier or business partner works with Not Yet Made, the Company may process personal data to assess the identity and screening based on a contractual obligation. Not Yet Made may process contact details, name, address, email address and bank account information.
8. For executing (contractual) agreements;
Not Yet Made may process data when a customer purchases items on the website. The data Not Yet Made processes is based on the transaction such as name, shipping information, bank account details, consent for personalized offers and terms and conditions. Not Yet Made works with suppliers and other business partners wherefore the Company processes data for invoices, payment information and delivery information. Not Yet Made processes data such as name, address, email address, telephone number, order history and bank account number. Not Yet Made processes this data based on a performance of a contract.
9. To show personalised advertisements;
Not Yet Made may send personalized offers if the individual has given consent. An individual can sign up for the Not Yet Made newsletter and personalized offers by submitting an e-mail address in the newsletter and personalized offer module found at the bottom of any page on this site or in the store. Not Yet Made does not send newsletters and personalized offers to customers or registered visitors unless the individual has given consent for the newsletter and personalized offers specifically. All newsletters and personalized offers contain an opt-out link in case the individual wishes to unsubscribe from receiving further newsletters and personalized offers at any time. Personalized offers are send to an email address which could contain advertisements that might interest the individual based on purchase history and online behavior such as an abandoned shopping cart.
Personal data Not Yet Made process for sending out personalized offers are data the individuals shared actively with Not Yet Made such as name, email address and purchase history and data Not Yet Made obtained based on the individuals interaction with the website. Not Yet Made may use IP address and Browser ID to track your behavior on our website if you have given consent for accepting cookies.
If an individual does not want to receive these emails anymore the individual is able to withdraw consent at any time or able to unsubscribe from these newsletters and personalized offers via marketing email received.
TO WHOM DOES NOT YET MADE SHARE PERSONAL DATA?
Not Yet Made may process data to other companies outside of the European Economic Area. If Not Yet Made processes data with a country that does not ensure an adequate level of protection of data, Not Yet Made ensures appropriate safeguards are in place such as standard contractual clauses from the European Commission or the US Privacy Shield.
Not Yet Made has data processing agreements with third parties to ensure that data is applied with the same level of security and confidentiality as by Not Yet Made. Not Yet Made has data processing agreements with third parties which defines the rights and obligations regarding GDPR. Not Yet Made decides for which purposes the third party can process data and the third party is obliged to comply with these instructions from Not Yet Made.
HOW LONG WILL WE STORE YOUR PERSONAL DATA?
Not Yet Made shall store data no longer than necessary. Not Yet Made will only store the data in line with legal retention periods and based on lawfulness of processing. Not Yet Made may store personal data to fulfil the legal grounds of a contractual obligation, legal obligation and to prepare, defense or exercise legal claims and in general where Not Yet Made has a legitimate interest to doing so. Not Yet Made may also store data which is given through consent.
Under the age of sixteen (16) Not Yet Made requests to make a reasonable effort to verify that a parent or guardian has provided the appropriate consent.
WHAT ARE YOUR RIGHTS?
The individual has the ability to request access, restriction, portability, erasure, rectification and file a complaint by contacting firstname.lastname@example.org
If the individual would like to file a complaint, the Company asks that the employee sends an email to email@example.com. Please note that you can file a complaint at the Irish Authority.
The individual has the following rights:
- Right to access the personal data Not Yet Made holds at any time.
- Right to ask Not Yet Made to correct his or her personal data that is incorrect and to complete incomplete information Not Yet Made holds about he or she.
- Right to be forgotten and to object and ask Not Yet Made to delete personal data if Not Yet Made has no legal or regulatory obligation to keep this data.
- Right to restrict personal data.
- Right to ask Not Yet Made to provide the employee with a copy of his/her personal data that Not Yet Made holds.
- Right to file a complaint with Not Yet Made or with the Supervisory Authority.
Not Yet Made shall communicate rectification or erasure of your personal data with third parties unless it proves impossible or involve disproportionate effort. Not Yet Made shall inform the individual of the third parties should this matter occur.
When the individual exercises a request please elaborate on the personal data Not Yet Made may process about you by giving Not Yet Made more background of the personal data. For restriction specify the request to a specific department, process, team, incident or service. Try to include timeframes, names, dates, type of processing and documents to enable Not Yet Made to process the request as soon as possible. Not Yet Made will respond to the request within one month of receipt.
COOKIES, PROFILING AND WITHDRAW CONSENT
Not Yet Made may send personalized offers based on account and/or website behavior. Not Yet Made only send out personalized offers if its consented to receive these offers.
Parties have the right to withdraw consent at any time to unsubscribe from personalized offers via marketing emails. To withdraw consent for tracking and other cookies can be done in the cookie banner. Under ‘preferences’ the cookie settings can be adjusted.
HOW SHALL WE PROTECT YOUR PERSONAL DATA?
Not Yet Made has taken appropriate and reasonable organizational and technical security measures in order to ensure the safety of your personal data in its systems. Not Yet Made shall not process data to third parties unless the Company has a legal ground to do so, for example consent is given or if it is required by law.
Additionally, employees at Not Yet Made are trained to ensure they handle all personal data with care and strict confidentiality. For staff, personnel access rights have been specified to serve the applicable legitimate purposes required for the individual to perform his or her duties.
LINKS AND CONTACT DETAILS
Not Yet Made is not responsible for collection and processing of other organizations. This Privacy statement does not address personal data of any third party operating that is linked to Not Yet Made.
For questions or a request please contact customer service:
Email address: firstname.lastname@example.org