Secure, transparent, and always protected

Privacy policy

Morningstar Sleeps B.V.
www.morningstarsleeps.com

About our privacy policy
At Morningstar Sleeps, we take your privacy seriously. We only process data that is necessary for (improving) our services and handle the information we collect about you and your use of our services with care. We never share your data with third parties for commercial purposes. This privacy policy applies to the use of the Morningstar Sleeps website and the services accessible through it. The effective date of these terms is 29/05/2019, and the publication of a new version invalidates all previous versions. This privacy policy describes what data we collect about you, how it is used, and under what conditions it may be shared with third parties. We also explain how we store your data, protect it from misuse, and outline your rights regarding the personal data you provide to us. If you have any questions about our privacy policy, please contact our privacy officer, whose details can be found at the end of this policy.

About data processing
Below, you can read about how we process your data, where it is stored, the security measures we use, and who has access to it.

E-commerce software
Our online store is powered by WooCommerce. Personal data you provide to us for our services is shared with this party. WooCommerce has access to your data to provide us with (technical) support but will never use it for any other purpose. Under the agreement we have with them, WooCommerce is required to implement appropriate security measures. WooCommerce uses cookies to collect technical information related to your use of the software, but no personal data is collected or stored.

WooCommerce
Our online store is developed using WooCommerce software, and we host it on a private server. We have implemented appropriate technical and organisational measures to prevent misuse, loss, and corruption of data. These security measures include SSL encryption and a strong password policy. Regular backups are performed to prevent data loss.

Web hosting
We use web hosting and email services provided by ONE.com. ONE.com processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services, which does not include personal data. ONE.com has implemented appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. ONE.com is bound by a confidentiality agreement.

Email and mailing lists
We send our email newsletters using MailChimp. MailChimp will never use your name or email address for its own purposes. At the bottom of every email sent automatically through our website, you will find an ‘unsubscribe’ link. Clicking this link will stop you from receiving our newsletter. Your personal data is securely stored by MailChimp. MailChimp uses cookies and other internet technologies to track whether emails are opened and read. MailChimp reserves the right to use your data to improve its services and may share information with third parties for this purpose.

For regular business email communication, we use the services of HordeSiteground. This party has implemented appropriate technical and organisational measures to prevent misuse, loss, and corruption of your and our data. HordeSiteground does not have access to our mailbox, and we treat all email correspondence confidentially.

Payment processors
To handle (part of) the payments in our online store, we use the Mollie platform. Mollie processes your name, address, residence details, and payment information, such as your bank account or credit card number. Mollie has implemented appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to improve its services and may share (anonymised) data with third parties for this purpose. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Mollie’s services for which they engage third parties. Mollie does not retain your data longer than permitted by legal retention periods.

Reviews
We collect reviews via the Trustpilot platform and through voluntary collaborations with consumers, influencers, bloggers, and businesses. We reserve the right to publish certain reviews on our site with the explicit consent of the consumer, influencer, blogger, or business. If you leave a review via Trustpilot, you are required to provide a name and email address. Trustpilot shares this information with us so we can link the review to your order. Trustpilot also publishes your name on its website. In some cases, Trustpilot may contact you to clarify your review. If we invite you to leave a review, we share your name and email address with Trustpilot. They use this data solely to invite you to leave a review. Trustpilot has implemented appropriate technical and organisational measures to protect your personal data. Trustpilot reserves the right to engage third parties to provide its services, for which we have granted permission. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Trustpilot’s services for which they engage third parties.

Invoicing and accounting
For our administration and accounting, we use the services of Exact. We share your name, address, residence details, and order information with Exact. This data is used to administer sales invoices. Your personal data is transmitted and stored securely. Exact is bound by confidentiality and will treat your data with care. Exact does not use your personal data for purposes other than those described above.

External sales channels
We sell (part of) our products via the Bol.com platform. If you place an order through this platform, Bol.com shares your order and personal data with us. We use this information to process your order. We handle your data confidentially and have implemented appropriate technical and organisational measures to protect it from loss and unauthorised use.

Purpose of data processing
General Purpose of Processing – We only use your data for the purpose of providing our services. This means that the purpose of processing is always directly related to the order you place. We do not use your data for (targeted) marketing. If you share data with us and we use it to contact you at a later date for reasons other than your request, we will ask for your explicit consent. Your data is not shared with third parties, except to fulfil accounting and other administrative obligations. These third parties are all bound by confidentiality agreements, oaths, or legal obligations.

Automatically collected data
Data collected automatically by our website is processed to improve our services. This data (e.g., your IP address, web browser, and operating system) is not considered personal data.

Cooperation with tax and criminal investigations
In certain cases, Morningstar Sleeps may be legally obliged to share your data in connection with tax or criminal investigations conducted by government authorities. In such cases, we are compelled to share your data but will oppose this within the limits of the law.

Retention periods
We retain your data for as long as you are a customer. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will treat it as a request to delete your data. Under applicable administrative obligations, we are required to retain invoices containing your (personal) data for the legally mandated period. However, employees will no longer have access to your customer profile or documents created in connection with your order.

Storage of personal data
morningstarsleeps.com processes and stores your personal data only for as long as necessary. This applies, for example, to newsletter subscriptions. Data from the certification register, customer reviews, and data related to disputes are retained for at least seven years. Personal data used for newsletter subscriptions is deleted upon unsubscribing. We store personal data in a secure database on a server located in the Netherlands.

Your rights
Under applicable Dutch and European legislation, you have certain rights regarding the personal data processed by or on behalf of us. Below, we explain these rights and how you can exercise them. To prevent misuse, we only send copies of your data to the email address we have on file. If you wish to receive the data at a different email address or by post, we will ask you to verify your identity. We keep a record of processed requests, and in the case of a deletion request, we retain anonymised data. All copies of data are provided in a machine-readable format. You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we are misusing your personal data.

Right of access
You have the right to access the data we process that relates to you or can be traced back to you. You can submit a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send a copy of all data to the email address we have on file, along with a list of processors who have access to the data and the categories under which it is stored.

Right to rectification
You have the right to have the data we process that relates to you corrected. You can submit a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send a confirmation to the email address we have on file.

Right to restriction of processing
You have the right to restrict the processing of data that relates to you. You can submit a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send a confirmation to the email address we have on file and will no longer process the data until the restriction is lifted.

Right to data portability
You have the right to have the data we process that relates to you transferred to another party. You can submit a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send copies of all data we have processed or that has been processed by third parties on our behalf to the email address we have on file. In such cases, we may no longer be able to provide our services, as the secure linking of databases can no longer be guaranteed.

Right to object and other rights
You have the right to object to the processing of your personal data by or on behalf of Morningstar Sleeps. If you object, we will immediately cease processing your data pending the resolution of your objection. If your objection is upheld, we will provide you with copies of the data we process and permanently cease processing. You also have the right not to be subject to automated decision-making or profiling. We do not process your data in a way that triggers this right. If you believe otherwise, please contact our privacy officer.

Google Analytics cookies
Our website places cookies from the US company Google as part of the “Analytics” service. We use this service to track and report on how visitors use the website. This processor may be required to disclose this data under applicable laws. We have not allowed Google to use the analytics information for other Google services.

Third-party cookies
If third-party software solutions use cookies, this is mentioned in this privacy policy.

Morningstarsleeps.com requests your explicit consent
We comply with the latest GDPR regulations. Cookies are only placed after explicit opt-in or by ignoring the cookie banner and continuing to browse. If you accidentally receive unwanted cookies, you can remove them from your browser. Our goal is to provide a pleasant and relevant user experience.

Changes to the privacy policy
We reserve the right to modify this privacy policy at any time. The most recent version will always be available on this page. If a new policy affects how we process data we have already collected, we will notify you by email.

Contact details
Morningstar Sleeps
Schuufdam 16a
Domburg, Netherlands
+31 (0)10 899 8119
[email protected]