GDPR Compliance Statement

Last Updated: March 19, 2025

Introduction

This GDPR Compliance Statement explains how mamyandme.com (“we,” “our,” or “us”) complies with the European Union’s General Data Protection Regulation (GDPR). This statement applies to individuals in the European Economic Area (EEA) and supplements our general Privacy Policy.

Data Controller

For the purposes of the GDPR, we are the data controller of your personal data. This means we determine the purposes and means of processing your personal data collected through our website.

Contact details: Fabiana Terra – mamyandme.com – hello@mamyandme.com

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following lawful bases depending on the activity:

Consent: When you explicitly opt-in to receive our newsletters or marketing communications.
Legitimate Interest: When we use your data to improve our website, prevent fraud, or for direct marketing in a way you would reasonably expect.
Contractual Necessity: When processing is necessary to fulfill our contractual obligations to you (if applicable).
Legal Obligation: When we need to process your data to comply with a legal requirement.

Your Rights Under GDPR

Under the GDPR, you have the following rights:

1. Right to Information

You have the right to be informed about how we collect and use your personal data.

2. Right of Access

You have the right to request copies of your personal data that we hold.

3. Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data.

4. Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal data in certain circumstances.

5. Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

6. Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization or directly to you in certain circumstances.

7. Right to Object

You have the right to object to our processing of your personal data in certain circumstances, particularly for direct marketing purposes.

8. Rights Related to Automated Decision Making and Profiling

You have rights related to automated decision-making and profiling. However, we do not currently engage in fully automated decision-making or profiling that has legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@mamyandme.com. We will respond to your request within one month of receipt. This period may be extended by two further months if necessary, taking into account the complexity and number of requests.

Data Protection Officer

We have not appointed a formal Data Protection Officer as it is not required for our operations. However, if you have any questions about our GDPR compliance or how we handle your personal data, please contact:

Fabiana – Founder of mamyandme.com – hello@mamyandme.com

Data Transfers Outside the EEA

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that it is protected by appropriate safeguards. These might include:

Transferring to countries that have been deemed to provide an adequate level of protection by the European Commission.
Using specific contracts approved by the European Commission.
Using providers based in the US that are part of the EU-US Data Privacy Framework.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Data Breach Notification

In case of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.