Privacy Policy – Manuka New Zealand B.V. / MNZ Manuka New Zealand EMEA B.V.
Version: January 2025
When you visit our website or contact us, you may share personal data with Manuka New Zealand B.V. and/or MNZ Manuka New Zealand EMEA B.V. (hereinafter jointly referred to as “MNZ”, “we” or “us”). We process personal data carefully and in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable privacy legislation.
This Privacy Policy explains which personal data we collect, for which purposes we process it, the legal bases for processing, how long we retain it, and your rights.
1. Controller
Manuka New Zealand B.V. / MNZ Manuka New Zealand EMEA B.V.
Tokyostraat 23
1175 RB Lijnden
The Netherlands
Email: [email protected]
2. What is personal data?
Personal data means any information relating to an identified or identifiable natural person, such as your name, address, email address, IP address, payment details or other information that can directly or indirectly identify you.
We do not intentionally process special categories of personal data (such as data concerning health, religion, ethnicity or political opinions).
3. Data of persons under 16 years of age
Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe we have processed personal data of a minor without appropriate consent, please contact us at [email protected] so we can delete the data.
4. When and why we process your personal data
4.1 Responding to inquiries
If you contact us by phone, email, contact form or post, we process your data to respond to your request.
Data processed: name, address, email address, phone number, message content.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
4.2 Performing agreements and fulfilling orders
If you purchase products or services, we process personal data necessary to execute the agreement and deliver your order.
Data processed: name, address, email address, phone number, order details, payment information.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
4.3 Administrative and legal obligations
We process certain data to comply with fiscal and administrative obligations.
Data processed: name, address, email address, Chamber of Commerce number, VAT number, transaction data and other legally required information.
Legal basis: legal obligation (Article 6(1)(c) GDPR).
4.4 Account management
If you create an account, we process your data to manage your account and order history.
Data processed: name, address, email address, client number, VAT number (if applicable), order and invoice information, encrypted password.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
4.5 Marketing communications
If you subscribe to our newsletter, we use your contact details to send marketing communications.
Data processed: name and email address.
Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent at any time.
4.6 Customer satisfaction surveys
If you voluntarily participate in surveys, we process your data for quality improvement purposes.
Data processed: name, email address (where applicable).
Legal basis: consent (Article 6(1)(a) GDPR).
5. Cookies
We use functional cookies necessary for the proper and secure operation of our website. Analytical and marketing cookies are only placed after your explicit consent.
For more information, please refer to our Cookie Policy.
6. Sharing of personal data
We share personal data with third parties only where necessary for the performance of our services or where legally required. These may include:
- Payment service providers
- Logistics and shipping partners
- IT and hosting providers
- Marketing and email service providers
We conclude data processing agreements where required. If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.
7. Data security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is limited to authorised personnel bound by confidentiality obligations.
8. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law:
- Accounting and tax records: 7 years (statutory obligation).
- Customer accounts: up to 24 months after last activity.
- Newsletter data: until consent is withdrawn.
- Email correspondence: up to 5 years, unless required longer for legal reasons.
- CCTV recordings: maximum 30 days, unless required for investigation.
9. Your rights
You have the right to:
- Access your personal data
- Rectify incorrect data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
Requests may be submitted to [email protected]. We may request identification to verify your identity. We will respond within one month, as required by GDPR.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Camera surveillance
For security purposes, CCTV may be used at our premises. Recordings are retained for a maximum of 30 days unless required for legal proceedings.
11. Data breaches
In the event of a personal data breach, we comply with our legal obligations under the GDPR, including notification to the Dutch Data Protection Authority where required.
12. External websites
This Privacy Policy applies solely to MNZ. We are not responsible for the privacy practices of third-party websites linked from our website.
13. Changes to this policy
We may amend this Privacy Policy from time to time. The most recent version is always available at:
www.manukanewzealand.com/privacy-policy.
14. Contact
Manuka New Zealand B.V. / MNZ Manuka New Zealand EMEA B.V.
Attn: Privacy Department
Tokyostraat 23
1175 RB Lijnden
The Netherlands
Email: [email protected]