Data protection

Happymami Lactancia S.L. owns the website www.happymami.com and is the controller responsible for processing the personal data provided by users through this website.
Below we set out the terms relating to the protection of personal data, and we understand that they have been read and understood by the user when providing us with their personal information and using this website.

Who is the controller processing your data?
Identity: Happymami Lactancia S.L.
CIF (tax ID): B02999415.
Postal address: C/ Nicaragua, 7, nave 5, 23650, Torredonjimeno, Jaén
Phone: 623537763
Email: rgpd@happymami.com

What do we process your personal data for?
At Happymami Lactancia S.L. we process personal data in order to respond to requests submitted through the contact form on the website www.happymami.com, through the website's chatbot, through the QR code inserted on the card that the customer receives with their order, and through conversations held on the WhatsApp messaging platform with our after-sales service.
The personal data we collect is used for the following purposes:
1. Management, review and resolution of queries: Managing, reviewing and resolving the queries made through our website, both
related to breastfeeding and to other services. Purchase of products: Managing the purchase of products through our online shop, including payment processing, invoicing and shipping of the products.
2. Personal consultation and advice: The video or image of the minor, if sent, is used exclusively to carry out a consultation by a professional midwife. The video/image will be accessible only to the customer and the professional midwife in order to deal with the requested consultation.
3. Sending commercial communications: Sending commercial information about products, services or news related to breastfeeding, provided that the customer has given their explicit consent to receive such messages.
Use of the Minor's Video or Image
The video/image showing the minor drinking from a bottle will be used only for the breastfeeding consultation requested by the customer and will be viewed by the professional midwife assigned to the consultation. Under no circumstances will the video/image be stored, saved, published or shared with third parties outside this context.
Data Access
The video/image of the minor will be accessible only to the customer who sent it and to the professional midwife assigned to the consultation. It will not be shared with anyone else or disclosed publicly. Contact details will be managed by the customer service and after-sales department, while financial data will be processed by the administration and accounts department.
How to stop receiving informational communications?
In accordance with the legislation in force on data protection, if the user wishes to stop receiving informational or promotional communications from Happymami Lactancia S.L, they may request to unsubscribe from the service by sending an email to the following address: rgpd@happymami.com.
How long will we keep your data?
The personal data provided will be kept for as long as the administrative relationship is maintained and its erasure is not requested by the data subject. Once the administrative relationship has ended, it will be kept blocked for the legally established period in order to comply with legal obligations and to deal with any possible liabilities or requirements of Public Administrations and/or Courts.
As regards the consultation, once it has been dealt with and the customer has received the advice, the videos/images will be deleted immediately and will not be kept or stored in any Happymami system. We do not keep videos/images of any kind for any other purpose.
What is the legal basis for processing your data?
The legal basis for processing your data is the consent of the data subject.
To which recipients will your data be communicated?
The personal data we collect may be communicated to the following entities, for the purposes detailed below:
RECIPIENTS PURPOSE SERED (SERED HOSTING S.L. – CIF: B32496242) Company responsible for the maintenance and programming of our website.
ActiveCampaign (ActiveCampaign, LLC) Company responsible for the email marketing tool we use to send newsletters and email campaigns.
These companies may access personal data only to carry out their duties and responsibilities associated with providing the contracted services. In any case, these recipients are contractually obliged to process the data in accordance with data protection regulations and to adopt appropriate measures to guarantee its security.
They may also be communicated to the authorities and/or courts in order to comply with the legislation in force.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not we at Happymami Lactancia S.L are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request their erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You have the right to request the protection of the Spanish
Data Protection Agency.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. Happymami Lactancia S.L will stop processing the data, except for compelling legitimate grounds, or the exercise or defence of possible claims.
How can you exercise your rights?
You may exercise your rights by sending a written request, attaching a copy of an official document that identifies you and specifying the right or rights you wish to exercise, by any of the following means:
Email: rgpd@happymami.com
Postal address: C/ Nicaragua, 7, nave 5, 23650, Torredonjimeno, Jaén
How have we obtained your data?
The personal data we process at Happymami Lactancia S.L comes from the data subject.
We obtain consent when the contact form on the website www.happymami.com is completed, through the website's chatbot, through the QR code inserted on the card that the customer receives with their order and through the product order placed in our online shop.
The categories of data processed are:
At Happymami, we collect the following personal data when you interact with our platform or request a breastfeeding advice service:
- Customer's name and surname.
- Email address.
- Information about the minor, such as age, date of birth, name or details of feeding (exclusive breastfeeding, mixed or formula feeding)
- Optional video/image showing the minor drinking from a bottle, which is requested voluntarily and exclusively for advice purposes.
- Legal Age of Consent. The User certifies that they are over 14 years of age and therefore have the legal capacity required to give their consent to the processing of their personal data, in accordance with the provisions of this Privacy
Policy. If the User is under 14 years of age, the express consent of their parents or legal guardians will be required for the processing of their data.
This section establishes that only persons over 14 years of age may give their consent directly for the processing of their personal data, in accordance with the legal framework. It also includes the implication that, if the User is under 14 years of age, the consent of their parents or guardians is required.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or improper disclosure. However, no system of data transmission over the Internet or electronic storage is completely secure. Although we strive to protect your personal data, we cannot guarantee absolute security.
Encryption of videos and images:
Encryption in transit: All videos and images you send through our platform (all the applications that make up our systems, including WhatsApp) and that fall within our information security policy are encrypted during transmission using the HTTPS protocol (SSL/TLS), which guarantees that the data is sent securely over the network and cannot be intercepted by third parties. All the applications we work with are required to comply with the GDPR and with all legislation in force on information security.
Encryption at rest: In this specific context, the data is neither downloaded nor stored permanently outside the application.
Any temporary caching is deleted automatically and immediately once the consultation has been completed. The video is not stored anywhere, as it remains in the conversation; downloading is optional, but our protocol establishes that videos and images are NOT downloaded. Whenever access is required in order to support customers who are in the process of personalised care, this is done from the platform, without downloading.
Restricted access and user control:
Access to the videos and images is strictly limited to the customer who sent them and to the customer service professionals assigned to the consultation. We have implemented rigorous access controls, ensuring that only duly authorised users can access these files.
Secure deletion of data:
Once the consultation has ended, access to the associated images and videos is revoked, and they become inaccessible to Happymami Lactancia S.L. From that moment on, the files will only remain at the source until the customer decides to delete them independently.