Privacy Policy

1. Data controller

The data controller of the personal data collected through the website www.maynhome.com and the related online sales services (the “Services”) is:

Cormaz sp. z o.o.

Registered office: ul. Kalwaryjska 69/9, 30-504 Kraków, Poland

VAT no. PL6793342022

Contact e-mail: customercare@maynhome.com

(also referred to below as the “Controller”, “we” or “MÂYN”).

2. Categories of data subjects

This notice applies to the following categories of data subjects:

• customers who make purchases on the website or create an account on it;
• members of the MÂYN loyalty programme;
• subscribers to the “(MÂYN journey)” newsletter;
• users who browse the website, whose data are collected through cookies and similar technologies, as described in detail in the Cookie Policy.

3. How we process your data: purposes, legal bases and retention

Below we describe, for each activity carried out through the Services, which data we process, on which legal basis, and for how long we retain them.

3.1 Creation and management of the customer account

If you create an account on the website, we process the following data:

• first name and surname;
• e-mail address;
• telephone number;
• shipping and billing address (address, city, province, country);
• company name (optional field, for customers with a VAT number).

Legal basis: performance of pre-contractual measures and of the contract (Article 6(1)(b), GDPR).

Retention period: we retain your account data for as long as the account remains active and for a further 24 months from the last activity, a period that we consider necessary to allow you to reactivate the account without loss of data and to manage any requests relating to previous orders.

3.2 Fulfilment of orders (processing, shipping, withdrawal and returns)

If you make a purchase on the website, we process the following data:

• identification and contact data (first name, surname, e-mail, telephone);
• shipping and billing address;
• products purchased, amounts and order date.

Legal basis: performance of the contract (Article 6(1)(b), GDPR).

Retention period: we retain these data for 3 years from delivery of the product: a period that covers the duration of the statutory conformity guarantee (2 years from delivery) plus a reasonable margin to manage any subsequent disputes.

3.3 Payment management

To complete payment for your order, your data are processed by the payment service provider responsible for processing the transaction. We do not retain the full details of the payment instruments used (e.g. card number).

Legal basis: performance of the contract (Article 6(1)(b), GDPR).

Retention period: transaction data are retained for the period required by tax and accounting law (see point 3.4).

3.4 Invoicing and accounting/tax obligations

To comply with tax and accounting obligations, we process your identification data, billing data and order amounts.

Legal basis: compliance with a legal obligation (Article 6(1)(c), GDPR).

Retention period: we retain these data for the period required by tax and accounting law (10 years).

3.5 Newsletter and marketing communications

If you subscribe to our newsletter, we process the following data:

• first name and surname;
• e-mail address.

Legal basis: the data subject’s consent, given through the relevant subscription checkbox (Article 6(1)(a), GDPR).

Retention period: the data are retained until consent is withdrawn and, in any case, for a maximum period of 12 months from the last interaction with our communications (opening or click), after which we remove the contact from the active lists. You may unsubscribe at any time and free of charge by clicking the unsubscribe link at the bottom of each communication, or by writing to customercare@maynhome.com.

Soft opt-in

Following the purchase of one of our products, we reserve the right to send you communications, using the contact details provided during the purchase, concerning products/services similar to those used, in accordance with Article 13(2) of Directive 2002/58/EC (e-Privacy Directive).

In this context, the data will be retained for a maximum period of 12 months from the last interaction with our communications (opening or click), after which we remove the contact from the active lists. You may unsubscribe at any time and free of charge by clicking the unsubscribe link at the bottom of each communication, or by writing to customercare@maynhome.com.

3.6 MÂYN loyalty programme

If you join the loyalty programme, we process the following data:

• identification and contact data;
• purchase history and points/benefits accrued.

Legal basis: the data subject’s consent, given through the relevant subscription checkbox (Article 6(1)(a), GDPR).

Retention period: we retain these data for the duration of your participation in the programme and for a further 12 months after termination, to allow you to use any remaining points/benefits and to manage any disputes.

3.7 Customer support and complaint management

If you contact us for support requests or complaints, we process the data that you voluntarily provide to us (for example, name, e-mail and the content of the request).

Legal basis: legitimate interest in managing the requests received and in ensuring a customer support service (Article 6(1)(b)-(f), GDPR).

Retention period: we retain these data for 5 years from the closure of the case, a period that takes into account the ordinary time limits within which disputes relating to the purchase or service received may arise.

4. Processing methods and provision of data

Processing is carried out using IT and telematic tools, with logic strictly related to the purposes indicated, and with technical and organisational measures appropriate to ensure a level of security appropriate to the risk (Article 32 GDPR).

The provision of data necessary for account creation, order fulfilment and invoicing is mandatory: without them, it will not be possible to complete the purchase. The provision of data for marketing, loyalty programme and retargeting purposes is optional and does not affect the possibility of purchasing on the website.

5. Recipients of personal data and transfers of data outside the EEA

Personal data may be disclosed, for the purposes indicated above, to the following categories of recipients, who process the data as processors pursuant to Article 28 GDPR where they act on behalf of the Controller, subject to the conclusion of appropriate agreements.

• technical and operational suppliers, including hosting, development, website maintenance, logistics, order delivery and payment services;
• marketing, communication and advertising service providers, including e-mail marketing platforms, advertising and social networks, within the limits of the consent given where required;
• consultants and professionals who assist the Controller, including legal and accounting consultants;
• public authorities, police bodies or judicial authorities, when required by law or necessary for the protection of a public interest.

The Controller does not sell or transfer the personal data of data subjects to third parties for marketing purposes of third parties other than MÂYN.

Some of the suppliers we use may be based or process data outside the European Economic Area (EEA). In particular, the following entities may process data in the United States of America:

• Meta Platforms Ireland Ltd. / Meta Platforms Inc. (management of advertising campaigns and activities on connected social networks);
• Klaviyo Inc. (sending commercial communications and managing the newsletter);
• Stripe Inc. (payment management);
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (payment management).

In such cases, the transfer takes place in compliance with the safeguards provided for by Chapter V of the GDPR, in particular through the adoption of the Standard Contractual Clauses approved by the European Commission (Article 46 GDPR), implementing safeguard measures aimed at ensuring an adequate level of data protection during the transfer of your personal data.

6. Automated decision-making and profiling

The Controller does not carry out processing based solely on automated decision-making processes, including profiling, that produce legal effects concerning the data subject or similarly significantly affect him or her, pursuant to Article 22 GDPR.

7. Rights of the data subject

As a data subject, in relation to the processing of your personal data, you have the right to:

• obtain confirmation as to whether processing concerning you exists and access your personal data (right of access, Article 15 GDPR);
• obtain rectification of inaccurate data or completion of incomplete data (right to rectification, Article 16 GDPR);
• obtain erasure of your personal data, in the cases provided for by law (right to erasure, Article 17 GDPR);
• obtain restriction of processing, in the cases provided for by law (Article 18 GDPR);
• receive, in a structured, commonly used and machine-readable format, the data you have provided to us on the basis of consent or contract and processed by automated means, and transmit them to another controller (right to data portability, Article 20 GDPR);
• object at any time to the processing of your data based on legitimate interest, unless overriding legitimate grounds for proceeding exist (right to object, Article 21 GDPR);
• withdraw consent given at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3), GDPR).

To exercise any of these rights, you may write to customercare@maynhome.com, clearly indicating your request and your identity, so that we can verify it and avoid acting on data relating to a person other than you. We will assess and manage each request in accordance with applicable data protection law.

8. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data is carried out in breach of applicable law, you have the right to lodge a complaint with the competent supervisory authority.

Since the Controller is based in Poland, the lead supervisory authority for cross-border processing is the Urząd Ochrony Danych Osobowych (UODO):

• address: ul. Stawki 2, 00-193 Warszawa, Poland;
• e-mail: kancelaria@uodo.gov.pl;
• website: www.uodo.gov.pl.

Pursuant to Article 77 GDPR, you in any case have the right to lodge a complaint also with the Italian Data Protection Authority:

• PEC: protocollo@pec.gpdp.it;
• website: www.garanteprivacy.it.

9. Changes to this notice

The Controller reserves the right to update this notice periodically, in particular in the event of the introduction of new features on the website or changes in law. The date of the last update is indicated at the beginning of the document. In the event of substantial changes, data subjects will be informed by means of a notice published on the website or by direct communication, where possible.

10. Contacts

For any question or request relating to this notice or to the processing of your personal data, you may contact us:

• by e-mail: customercare@maynhome.com;
• by post: Cormaz sp. z o.o., ul. Kalwaryjska 69/9, 30-504 Kraków, Poland.