Privacy Policy

Privacy Policy

Here you can find our comprehensive privacy policy.

About our Privacy Policy

Mushabu cares deeply about your privacy. Therefore, we only process data that we need to (improve) our services and handle the information we collect about you and your use of our services with care. We never provide your data to third parties for commercial purposes. This privacy policy applies to the use of the website and the services accessible through it from Mushabu. The effective date of these terms is 25/05/2025. Publishing a new version will invalidate all previous versions. This privacy policy describes which data about you we collect, how these data are used, and with whom and under what conditions these data may be shared with third parties. We also explain how we store your data, protect it against misuse, and inform you of your rights regarding the personal data you provide to us. If you have any questions about our privacy policy, you can contact our privacy officer. You will find the contact details at the end of this privacy policy.

Below you can read how we process your data, where we store it, which security measures we use, and who has access to the data.

 

Webshop Software CCVshop

Our webshop is developed using software from CCVshop. Personal data that you provide to us for our services are shared with this party. CCVshop has access to your data to provide us with (technical) support; they will never use your data for other purposes. CCVshop is required by the agreement we have with them to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. CCVshop uses cookies to collect technical information about your use of the software, but no personal data are collected or stored. CCVshop reserves the right to share collected data within its own group to further improve the service.
 

Business Email Traffic

We use the services of CCVshop for our regular business email communications. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. CCVshop does not have access to our mailbox, and we treat all our email traffic confidentially.
 

Payment Processors Mollie

For handling (part of) the payments in our webshop, we use the platform of Mollie. Mollie processes your name, address, city information, and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve the service and, in that context, to share (anonymized) data with third parties. In the case of a request for deferred payment (credit facility), Mollie shares personal data and information regarding your financial situation with credit rating agencies. All the aforementioned guarantees regarding the protection of your personal data also apply to parts of Mollie’s services where third parties are involved. Mollie does not store your data longer than legally permitted.

 

Shipping and Logistics PostNL, DPD & DHL

When you place an order with us, it is our responsibility to have your package delivered to you. We use the services of PostNL, DPD & DHL to carry out the deliveries. For this, it is necessary that we share your name, address, and city details with PostNL, DPD & DHL. PostNL, DPD & DHL use this information only for executing the agreement. If PostNL, DPD & DHL engage subcontractors, they will also provide these parties with your data.

 

Invoicing and Accounting Knab

For maintaining our administration and bookkeeping, we use the services of Knab. We share your name, address, city details, and order details. These data are used to administer sales invoices. Your personal data are transmitted and stored securely. Knab is obligated to confidentiality and will treat your data confidentially. Knab does not use your data for purposes other than those described above.

Purpose of Data Processing

General purpose of processing

We use your data solely for our services. That means the processing’s purpose always directly relates to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we want to contact you later (other than at your request), we will explicitly ask for your permission. Your data are not shared with third parties, except to comply with bookkeeping and other administrative obligations. These third parties are all bound to confidentiality by agreement, oath, or legal obligation.

 

Automatically Collected Data

Data automatically collected by our website are processed to improve our services. These data (such as your IP address, web browser, and operating system) are not personal data.

 

Cooperation with Fiscal and Criminal Investigations

In some cases, Mushabu may be legally required to share your data in connection with fiscal or criminal investigations by authorities. In such cases, we are forced to share your data but will oppose this as far as the law allows.

 

Retention Periods

We retain your data as long as you are our client. This means we keep your customer profile until you indicate you no longer wish to use our services. If you indicate this, we also consider it a request to be forgotten. Under applicable administrative obligations, we must keep invoices with your (personal) data, so we retain these data as long as required by law. Employees no longer have access to your client profile and documents created in connection with your order.

 

Your Rights

Under Dutch and European law, you have certain rights regarding the personal data processed by or on behalf of us. Below, we explain what these rights are and how you can exercise them. Generally, to prevent misuse, we only send copies of your data to the email address we already have on file. If you want the data sent to a different email or by post, we will ask you to identify yourself. We keep a record of processed requests; in case of a forget request, we log anonymized data. All copies of data will be provided in the machine-readable data format used within our systems. You have the right to file a complaint with the Dutch Data Protection Authority if you suspect misuse of your personal data.

 

Right to Access

You always have the right to inspect the data we process that relate to you or can be traced back to you. You can make such a request to our privacy officer. You will receive a response within 30 days. If granted, we will send a copy of all data and a list of processors holding your data to your known email address, including the categories under which we stored the data.

 

Right to Rectification

You have the right to have the data we process about you corrected. You can submit such a request to our privacy officer. You will receive a response within 30 days. If granted, we will confirm to your known email address that the data have been amended.

 

Right to Restriction of Processing

You have the right to restrict processing of data about you. You can submit such a request to our privacy officer. You will receive a response within 30 days. If granted, we will confirm to your known email address that the data will no longer be processed until you lift the restriction.

 

Right to Data Portability

You have the right to have the data we process about you transferred to another party. You can submit such a request to our privacy officer. You will receive a response within 30 days. If granted, we will send copies of all data we process about you or that have been processed by other processors on our behalf to your known email address. In such a case, it is likely we can no longer continue providing services, as the secure linking of data files can no longer be guaranteed.

 

Right to Object and Other Rights

In some cases, you have the right to object to the processing of your personal data by or on behalf of Mushabu. If you object, we will immediately stop data processing while your objection is reviewed. If upheld, we will provide you with copies of data we process and permanently stop processing them. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that this right applies. If you believe otherwise, please contact our privacy officer.

Cookies

Google Analytics

Our website uses cookies from the American company Google as part of the “Analytics” service. We use this service to monitor and report on how visitors use the website. This processor may be required by law to provide access to these data. We have not allowed Google to use the analytics data obtained for other Google services.

 

Third-Party Cookies

If third-party software solutions use cookies, this is mentioned in this privacy statement.

 

Changes to the Privacy Policy

We reserve the right to change our privacy policy at any time. However, this page always shows the most recent version. If the new privacy policy affects how we process previously collected data about you, we will inform you by email.

 

Contact Details

Mushabu / Joyce de Vos
Nijeveense Bovenboer 43A
7948 LE Nijeveen
info@joycedevos.nl
Privacy Officer: Joyce de Vos