Privacy Policy

Introduction

mythicerwt B.V. ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our food delivery services, visit our website at mythicerwt.top, or interact with us in any way.

As the Data Controller, mythicerwt B.V. (Registration Number: 73840961) is responsible for your personal data under the General Data Protection Regulation (GDPR) and other applicable data protection laws in the Netherlands and European Union.

Data Collection

The data we collect includes personal information that you voluntarily provide to us when you register for our services, place orders, contact us, or otherwise interact with our platform. This may include your name, email address, phone number, delivery address, payment information, dietary preferences, and order history.

We also automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This information is collected through cookies and similar tracking technologies as detailed in our Cookie Policy.

Additionally, we may collect information from third parties, such as payment processors, delivery partners, and other service providers who assist us in operating our business and serving you better.

How We Use Your Information

We explain how we use your information for various legitimate business purposes under the GDPR. We use your personal data to provide and maintain our food delivery services, process your orders, arrange deliveries, handle payments, and communicate with you about your orders and our services.

The use of your data also includes improving our services, personalising your experience, conducting market research, complying with legal obligations, and protecting our rights and the rights of others. We may use your information to send you promotional communications about our services, but only where we have your consent or where permitted by law.

Our Legal Basis for processing your personal data includes: performance of a contract (when providing our services), legitimate interests (for business operations and improvements), legal obligation (for compliance requirements), and consent (for marketing communications and non-essential cookies).

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business, such as payment processors, delivery partners, and technology service providers. These parties are contractually obligated to protect your information and use it only for the purposes we specify.

We may also disclose your information when required by law, to protect our rights or the rights of others, or in connection with a business transaction such as a merger or acquisition.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Order information is typically retained for seven years for accounting and tax purposes. Marketing preferences are retained until you withdraw consent or close your account.

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule and applicable legal requirements.

Your Rights Under GDPR

As a data subject under GDPR, you have several rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a portable format
• Right to object: You can object to certain types of processing
• Right to withdraw consent: You can withdraw consent for processing based on consent

To exercise any of these rights, please contact us using the information provided in the Contact section below.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please contact us at:

Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU member state.