Privacy Policy

Last updated: November 2024

Jumbo Group BV (hereafter: “Jumbo”), with postal address for these purposes at Westzijde 184, 1506 EK Zaandam, the Netherlands, is responsible for processing personal data as prescribed in this Privacy Policy. The Jumbo Group is a European toy company which develops, produces and sells toys, games and puzzles.

Basic information on personal data processing

Data controller: Jumbo Group B.V.

Main purposes of the processing:

Contact request handling.
Sending commercial and/or promotional communications by electronic means (Newsletter).
Tasks related to the provision of the service, including delivery.
Manage the reception of job applications through the contact form on the website or by email for future job offers.
Management of requests for product ideas.

Legal basis: The processing of your data will be based on your consent.

Recipients: Data will not be transferred to any third parties, except to our necessary partners.

Data protection rights: Access, rectification, erasure, objection, restriction of processing, data portability, not to be subject to an automatized individual decision, to withdraw the given consent, as well as to file a complaint before the competent supervisory authority, if deemed appropriate.

Additional information: For further information on the processing of your data, please see below.

1. Identification of the Data Controller

Under the terms of the applicable data protection regulations and, in particular, the General (EU) 2016/679 Data Protection Regulation (hereinafter, the “GDPR”), the details of the Data Controller are:

Data Controller: Jumbo Group B.V. (hereinafter, “Jumbo”)
National ID: 24104760
Contact email: gdpr@jumboplay.com

2. What Personal data we process and purposes of the processing

The collected personal data belong to the following categories of data subjects: Website users, consumers and job candidates.

Jumbo processes your personal data because you use our services and/or because you provide such data to us yourself, based on your consent and/or the execution of a contract. Below you will find an overview of the personal data we process and the purposes of each data processing.

Purpose of the processing: Distribution of our newsletter and/or advertising brochure

Categories of data:

First name and surname ;
Gender;
Date of birth;
Address details; and
Email address.

Retention Period: Until you unsubscribe from the newsletter using the unsubscribe option included in the newsletter.

Purpose of the processing: To call or email you if necessary, in order to offer our services and manage our Customer Service.

Categories of data:

First name and surname;
Gender;
Address details;
Telephone number; and
Email address.

Retention Period: 2 years after concluding the response, so we can respond to customer service requests and then establish whether previous customer service requests were submitted by the same person.

Purpose of the processing: To inform you about changes affecting our services and products

Categories of data:

First name and surname;
Address details; and
Email address

Retention Period: Until you unsubscribe from the newsletter using the unsubscribe option included in the newsletter, or during the provision of the services and products.

Purpose of the processing: To offer you the option of opening an account

Categories of data:

First name and surname;
Gender;
Date of birth;
Address details; and
Email address

Retention Period: Until you unsubscribe from your account

Purpose of the processing: To deliver goods and/or services to you

Categories of data:

First name and surname;
Gender;
Address details;
Telephone number; and
Email address.

Retention Period: During the provision of the services and the applicable statute of limitation of possible liabilities that may arise from the provision of the services and products.

Purpose of the processing: Competitions and promotional campaigns

Categories of data:

First name and surname;
Gender;
Date of birth;
Address details;
Telephone number; and
Email address.

Retention Period: The data is saved for up to 1 year after concluding the promotional campaign in order to contact you to provide you with information about the winner and any subsequent prize-giving arrangements.

Purpose of the processing: Manage the reception of job applications through the contact form on the website or by email for future job offers

Categories of data:

First name and last name;
Gender;
Date of birth;
Place of birth;
Address details;
Telephone number;
Email address; and
Other personal data actively submitted by you, such as through creating a profile on this website, in correspondence and/or by telephone (including your CV).

Retention Period: 2 years after receiving the CV.

Purpose of the processing: Management of requests for product ideas

Categories of data:

Mail;
Password;
Name and last name;
Postal address;
Country; and
Phone.

Retention Period: 2 years, or in case of having a contractual relationship, the data will be kept during the term of the contract and during the applicable statute of limitation of possible liabilities that may arise from the relationship.

Use of cookies: For more information visit our Cookie Policy.

3. Special and/or sensitive categories of personal data we process

Jumbo processes the following special and/or sensitive personal data related to you:

Data related to people under 16 years of age:
Our website and/or service does not have the intention of collecting data about website users under 16 years of age. That is unless they have permission from their parents or guardians.
However, we cannot check whether a user’s is over 16 years old. We therefore recommend that parents monitor their children’s online activities in order to prevent data from being collected about children without parental consent.
If you believe that we have collected personal data about a minor without such consent, please contact Jumbo and we will delete this information.

4. Automated individual decision-making, including profiling

Automated individual decision-making, including profiling, is not envisaged.

5. International data transfers

We do not transfer your personal data to third parties outside the European Union. In case of international data transfers, we will carry out the appropriate technical and organizational measures to guarantee the security of your data.

6. Processing of data by third parties and transfer

Depending on the purposes for which personal data is collected, your personal data may be processed by:

Authorized personnel of Jumbo or its representatives acting on its behalf, subject to the applicable data protection regulations.
Administrations, Authorities and Public Bodies, including Courts and Tribunals, when required by applicable regulations.
Entities of the Jumbo for internal administrative purposes when strictly necessary to carry out the purposes of the informed data processing such as Koninklijke Jumbo, B.V. (Netherlands); Diset, S.A. (Spain); Dujardin, S.A.S. (France); James Galt & Company Ltd. (United Kingdom).
Jumbo shares your personal data with various third parties if this is necessary for the execution of the agreement and in order to comply with any legal obligations. We enter into a Processor Agreement to ensure the same level of security and confidentiality with respect to your data with companies that process your data on our behalf (such as couriers, our distribution centre and data hosting partners). These parties may only use the personal data to perform the specific tasks for which they were hired.
Jumbo may share your personal data with other third parties if you have given specific permission for this purpose.

In case of a sale, merger, consolidation, change in corporate control, substantial transfer of assets, reorganization or liquidation of Jumbo, we may transfer, sell or assign your information Website to one or more relevant parties.

7. Data subject rights

In accordance with the GDPR, you can exercise the following data protection rights:

Right to access: You may ask Jumbo if it is processing their data and, if so, access to the data.
Right to rectification: You may request the rectification of the data if it is inaccurate or incomplete.
Right to request the erasure of your data when it is possible. In any case, as soon as you exercise this right, all personal data linked to their identity, as well as the information and content included in their profile, if applicable, will be erased and will remain blocked until the end of the legal time limit.
Right to request the restriction of your processing: In this case, we will only keep them for the exercise or defence of claims.
Right to object: Jumbo will stop processing personal data, with the exception that data must be processed for legitimate interest reasons or for the purpose of pursuing or defending complaints.
Right to data portability: If you want their data to be processed by another data controller, Jumbo will facilitate the transfer of their data to the new controller if both have the necessary technical means for it.
Right not to be subject to a decision based solely on automated processing, including profiling, of your personal data.
Right to withdraw consent: If you have given consent for a specific purpose, you may withdraw such consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Right to lodge a complaint to the competent supervisory authority: If you believe that a breach of data protection laws has been committed in relation to the processing of your personal data you have the right to lodge a complaint with the competent supervisory authority in your country: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

To exercise your rights, you can write to Jumbo postal address or e-mail address gdpr@jumboplay.com, REF: “Data Protection”.

8. How we protect personal data

Jumbo takes the protection of your data seriously and adopts appropriate measures to prevent the misuse, loss, unauthorised access, unwanted disclosure and/or unauthorised modification thereof. If you feel that your data is not secure or that there are indications of misuse, please contact our customer service department using the Service Form.

9. User consent

You declare to have read and expressly accepted this Privacy Policy, when the legal basis for the processing is his consent. You may withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of the processing prior to your withdrawal of consent.

You undertake to exonerate Jumbo from any possible claim, fine or sanction that Jumbo may be forced to bear as a result of the user’s failure to comply with the duty described in this section.

10. Links to other websites

This Website contains links to other websites that are not operated by Jumbo, therefore, Jumbo does not exercise any control over them, nor is it responsible for the information to which they have access. Please visit these websites directly to obtain information about their privacy policy, which provides information on the protection of your data, security, data collection and data transmission practices.

If you follow us on our social media sites, please review their privacy policies for information on how they treat and share your personal data, as Jumbo has no control over and no responsibility for the information to which these websites have access.

11. Changes in the Privacy Policy

We will only use personal data as established in the Privacy Policy that is in force at the time such data is collected.

Jumbo reserves the right to modify this Privacy Policy at any time with effect from the date of publication of such modifications on the Website, so it is recommended to visit it every time you access it. In any case, if at any time we decide to process personal data differently from what was stated at the time it was obtained, you will be informed of this, and consent will be obtained if necessary.

If any clause of this Privacy Policy is null and void, the rest of the conditions shall not be affected and shall remain fully valid and in force, in accordance with the applicable regulations in force at any given time.

12. Applicable Law

The privacy of all the information provided, both by you through the different forms for requesting personal data, as well as that accessible through the Website, is regulated by the data protection laws in force, in particular, by the GDPR and local applicable regulations.

13. Cookies

Access to the Website may imply the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that it can use later. This information allows you to be identified as a specific user and allows you to save your personal preferences, as well as technical information on the use and operation of the Website.

For more information, please visit our Cookies Policy.

14. Contact details

Contact details:

Company: Jumbo Group B.V.
Email: gdpr@jumboplay.com