1. Privacy Statement

Stichting Ama Namin is responsible for processing data on the websites stichtingamanamin.nl. We manage this data from our office in Wateringen on Linnewever 12. When you use our services, you entrust us with your data. We understand that this is a big responsibility and are working hard to protect your data. This privacy and cookie statement is meant to inform you about the data we collect, why we collect them and how you can update your data or have them removed. If you have questions about this privacy and cookie statement or want to view, update or remove your data, you can contact René Zuidwijk by the email address rene@stichtingamanamin.nl. This privacy and cookie statement is last modified on the 10nd of September 2022.

1.1. Data processing during primary services

1.1.1. The personal data Stichting Ama Namin processes Stichting Ama Namin sells and delivers Asian products. When you use our services, you’re providing us the personal data that we need to process your payment, deliver your order to your address and provide customer service. For example, you would receive a payment confirmation by email and we would make a phone call if a delivery is delayed or a problem occurs with a product. The personal data that we collect from you for these primary services are: • First and last name • Address information • Payment information • Email address • Phone number • Other personal data that you actively share in communications We do not intend to collect data of website visitors younger than the age of 16 without parental consent. If you’re convinced that we have collected these data without your consent, please contact us. We will then remove the data. 1.1.2. How long Stichting Ama Namin saves personal data We save your personal data on secured servers for at least seven years. The law obliges us to this retention period for the purpose of the consultability and verifiability of our business administration. After seven years your personal data stay archived on our secured servers for the same purpose. However, you are entitled to request your date to be removed. 1.1.3. Third parties whom Stichting Ama Namin shares the personal data with Delivery service MyParcel We have outsourced our delivery services to MyParcel. We share your personal data with them only for the purpose of delivering orders. We have concluded a data processing agreement in which the responsibilities for protecting your data are outlined for each party. This is to ensure your privacy. Governmental authorities during legal obligation When there is a legal obligation, we share your personal data with governmental authorities. For example, the tax inspector could demand all data relevant for collecting taxes based on Article 47 of the General Law on state taxes.

1.2. Data processing during account registration

1.2.1. The personal data Stichting Ama Namin processes When you create an account, you’re providing personal data. You can choose for yourself whether you want to do this. An account allows you to keep track of your order history. It also simplifies the order process if you fill in the shipping and billing information in your account. The personal data that we could collect are: • Username • Password • First and last name • Address information • Email address • Phone number 1.2.2. How long Stichting Ama Namin saves personal data We enabled you to view and adjust your own information. You are also free to file a request to have your account removed.

1.3. Data processing for web analytics

1.3.1. The personal data Stichting Ama Namin processes We use the web analysis tool Google Analytics to collect web statistics about our visitors. This helps us understand how visitors use the website and how we can improve it. We only collect anonymized data. Because of this, you are kept anonymous and we are allowed to collect web statistics without explicit consent. The anonymous personal data that we collect from you are: • An anonymous IP address • An anonymous browser ID We configured privacy friendly settings for Google Analytics in accordance with the requirements of the Dutch Data Protection Authority. This means, amongst other things, that we have concluded a data processing agreement with Google. For your privacy, we’ve anonymized IP addresses so that we cannot trace an exact location. 1.3.2. How long Stichting Ama Namin saves personal data Google Analytics attributes an ID to your browser in order to recognize you as the same user when you visit the site more than once. This is essential for collecting web statistics. This ID is anonymous, but it is personal data. That why we automatically delete this ID after 14 months.

1.4. Data processing for advertising

1.4.1. Advertising on Facebook and Google We advertise on Facebook, Google and other websites with advertising space. You may possibly see an ad of ours on their websites and apps. We, as an advertiser, are not required to ask your permission for this. That is because you already agree to ads when creating a Facebook or Google account and accepting their terms and conditions. 1.4.2. Advertising preferences at Facebook and Google If you own a Facebook or Google account, you can manage your advertising preferences in your account settings. This is where you can find your demographics and interests settings that are enabled and visible to advertisers. If we want to serve an ad, we select the characteristics that best describe our target audience. If these happen to correspond with one of your interests, you may get to see our ad. 1.4.3. Data processing only with explicit consent Up until this point, we are not required to ask for your consent to serve ads on those websites. However, the moment we combine your advertising preferences with the web statistics collected from your visit to our website, we are required to ask for your explicit consent first. The combination allows us to serve an ad after you’ve been on our website. You can always change your consent preferences at any moment via our cookie bar. 1.4.4. The personal data Stichting Ama Namin processes We cannot recognize individuals or trance data back to a person with our advertising activities. All data are anonymous. The anonymous personal data that we collect from you are: • An anonymous browser ID • Anonymous demographics and interests that you provide in your Google account • Anonymous demographics and interests that you provide in your Facebook account 1.4.5. How long Stichting Ama Namin saves personal data We delete your anonymous browser ID after 14 months. This measure makes sure that we cannot trace the web statistics back to a browser.

1.5. Data safety

1.5.1. How Stichting Ama Namin secures your personal data We are keenly aware of the fact that you trust us with your data and that we have a big responsibility to protect them. We have taken various measures to prevent misuse, loss and unauthorized access. These are the measures that we took to secure your data: • Our servers and devices are equipped with up to date security software, like a virus scanner and firewall • We send data only through a secured SSL internet connection. You can confirm this by the presence of ‘https’ and the lock icon in the address bar. • Access to personal data is secured with a strong password • Access to our wifi network is secured with a strong password • Our email server is secured with the STARTTLS mechanism • DKIM and SPF are internet standards that we use to prevent emails sent falsely on our behalf and that contain viruses, or are spam or are meant to acquire personal (login) information • We have concluded data processing agreements with our business partners If you suspect that your data are not secured enough or if you suspect misuse, please contact us.

1.6. View, correct, transfer or delete data

1.6.1. Your rights You are fully entitled to view, correct or have us delete the personal data that we acquired from you. You can also request us to transfer them to you or an organization of your liking in a computer file format. If you previously consented to the processing of specific data, you can always withdraw the consent via our cookie bar. If you object the processing of your personal data, please contact us. We also like to point out the possibility to file a complaint to the national supervisor, the Dutch Data Protection Authority. 1.6.2. How to file a request You can file a request to René Zuidwijk via rene@stichtingamanamin.nl to view, correct, delete or transfer your personal data or to object the processing of your data. To ensure that the request is done by you, we ask you to attach a copy of an identity document. Blur your photo, MRZ (machine readable zone, the string of numbers in the bottom of the passport), passport number and social security number (BSN). This is to protect your privacy. We will respond to your request as soon as possible, but at the latest within four weeks.

2. Cookie Statement

2.1. About cookies A cookie is a small text file stored on the browser of your computer, tablet of a smartphone on the first visit to this website. The law states that we are allowed to directly set cookies on your device if they are strictly necessary for the use of this website. For all other kinds of cookies, your consent is required. This website uses various kinds of cookies. Some cookies are set by services or embeds of third parties that are present on our website. 2.1.1. Necessary cookies Necessary cookies make a website more useful. For example, they allow basic functionalities like page navigation and access to secured parts of the website. The website cannot function properly without these cookies. 2.1.2. Cookies for web analytics Google Analytics sets analytics cookies to collect and report anonymized statistics from users. This helps us understand how visitors use the website and how we can improve it. We do not collect personal data that are traceable to you as an individual. We have even anonymized your IP address to ensure your privacy. 2.1.5. Cookies for advertising We advertise on Facebook, Google, and websites with advertising space. With your consent, we set advertising cookies on your browser by which we can collect anonymous web statistics and show you ads on Facebook, Google, and other websites.

2.2. Manage cookie preferences

At your first visit to our website, we inform you about these cookies and ask your permission to set them. You can always adjust or withdraw your consent via the cookie settings. You can also disable cookies for all websites by changing the settings of your internet browser (Chrome, Internet Explorer, Edge, Firefox en Safari). Furthermore, you have the option to delete all other information that is saved in your browser. If you disable cookies in your browser, you cannot use all the functionalities of the website anymore. It could result in a negative user experience of the website.

3. Modifications to the Privacy & Cookie Statement

We reserve the right to modify this privacy and cookie statement. You will always find the most recent version in the cookie bar. Therefore, we advise you to regularly check the cookie bar for the latest version.