Privacy policy

Mannequins and More processes personal data when you visit our website or contact us.

Controller and contact

Michiel Harff, trading as Mannequins and More, Baambrugse Zuwe 139, 3645 AD Vinkeveen, the Netherlands. For privacy enquiries or requests: michiel@mannequinsandmore.nl or +31 297 265850.

Enquiries, quotations and orders

If you contact us through a form, email, telephone or WhatsApp, we process the information you provide, such as your name, email address, telephone number, message and attachments. We use it to answer your enquiry and handle a quotation or order. The legal basis for requests relating to a contract is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in responding to your request (Article 6(1)(f) GDPR). Without the necessary contact and enquiry details, we may be unable to assist you.

We retain correspondence for as long as needed to handle the enquiry or order. Relevant information may be retained longer to meet legal obligations or establish, exercise or defend legal claims. Hosting, website and email service providers receive information for their tasks. Information needed to fulfil an order may also be shared with the relevant supplier and carrier. We do not send newsletters.

Website and form security

The website is provided through Superwebbuilder on the Duda platform. Technical information, such as IP address, browser, device, page visited and time, is processed to deliver and secure the website. The legal basis is our legitimate interest in a functioning and secure website (Article 6(1)(f) GDPR). Retention depends on technical necessity and any security incidents.

The contact forms use Google reCAPTCHA to prevent automated abuse. When activated, information such as IP address, browser and device details and interactions may be sent to Google for risk analysis. Google also describes the _GRECAPTCHA cookie for this purpose. The purpose is form security; the GDPR legal basis is our legitimate interest in preventing abuse. You can also contact us by email or telephone. See Google’s privacy policy and reCAPTCHA information.

Cookies, Google Analytics and Google Ads

Google Analytics 4 and Google Ads are connected through Google Tag Manager to measure website use and advertising results. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information processed may include pages visited, browser and device details, IP address, cookie identifiers and events, such as a submitted contact form or a click on an email, telephone or WhatsApp link.

Non-essential analytics and advertising technologies require prior consent (Article 6(1)(a) GDPR and applicable cookie rules). Essential functions support the operation and security of the website. Consent may be withdrawn for the future, without affecting the lawfulness of earlier processing based on consent. Contact us to withdraw consent or ask privacy questions. You can also delete or block cookies in your browser; this does not automatically erase information already transmitted.

Retention of Google measurement data

Our Analytics property is configured to retain event data for two months and user data for fourteen months. The user-data period resets with new activity. These settings concern user- and event-level data; aggregated standard reports may remain available longer. Device cookies have separate lifetimes: Google gives default durations of two years for _ga and ninety days for _gcl_. You can delete cookies earlier. See Google’s cookie information, data use on partner sites and the Analytics opt-out browser add-on.

WhatsApp, Instagram and other social media

If you contact us via WhatsApp, we process your telephone number, any profile name and message to answer your enquiry on the legal bases and for the periods described above. WhatsApp and social platforms also process information for their own services. Our reference pages display Instagram content. Opening external links or loading external content may involve the provider processing technical information. See the WhatsApp privacy policy and Instagram privacy policy.

Transfers outside the EEA

Google, WhatsApp and technical platform providers may process information outside the European Economic Area, including in the United States. Depending on the recipient and service, an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses, may be used. Information about recipients and safeguards is available from Google, Duda and the WhatsApp and Instagram policies linked above.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent and object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time. Send requests to the email address above. You may also complain to the Dutch Data Protection Authority or the supervisory authority where you live or work.