Privacy Policy
Mobisun respects your privacy. Here you can read exactly what data we process, why, and what rights you have under GDPR.
1. Who are we?
Mobisun B.V. ("Mobisun", "we", "us") is the data controller for the personal data you share with us via shop.mobisun.com. Based at Markenhaven 28, 3286 AC Amersfoort, Netherlands. KvK: 68972849. VAT: NL857669990B01. For privacy questions, you can reach us at <a href="mailto:privacy@mobisun.com" style="color:var(--color-yellow);font-weight:600;text-decoration:underline">privacy@mobisun.com</a>.
2. What data do we collect?
- Contact details: name, email address, phone number, billing and shipping address
- Order data: products, quantities, payment method, transaction history
- Technical data: IP address, browser data, pages visited (via cookies — see our <a href="/pages/cookie-policy" style="color:var(--color-yellow);font-weight:600;text-decoration:underline">cookie policy</a>)
- Communication: emails, contact form messages, chat conversations
- Account data: password (encrypted), order history, preferences
3. Why do we process your data?
- Performance of contract (art. 6(1)(b) GDPR) — to process and deliver your order
- Legal obligation (art. 6(1)(c) GDPR) — VAT administration, invoicing, retention obligation
- Legitimate interest (art. 6(1)(f) GDPR) — fraud prevention, site analysis, customer service
- Consent (art. 6(1)(a) GDPR) — newsletter, marketing, non-essential cookies
4. Who do we share your data with?
- Shopify — e-commerce platform (hosting, checkout, payment processing)
- Payment providers — Shopify Payments, PayPal, Klarna, Mollie (if active)
- Shipping partners — PostNL, DHL, UPS for delivery
- IT service providers — analytics (Google), email marketing (Klaviyo/Mailchimp), customer service
- Government agencies — where legally required (Tax authorities, regulators)
5. How long do we retain data?
We do not retain personal data longer than necessary for the purpose for which it was collected. Tax-related data is retained for 7 years in accordance with the legal retention obligation. Marketing data until you unsubscribe.
6. Your rights
- Right of access — request what data we have about you
- Right to rectification — have incorrect data adjusted
- Right to erasure — "right to be forgotten"
- Right to restriction — restrict processing under certain conditions
- Right to data portability — receive your data in a readable format
- Right to object — object to processing for direct marketing
- Withdraw consent — at any time, without giving reasons
Want to exercise a right? Send an email to <a href="mailto:privacy@mobisun.com" style="color:var(--color-yellow);font-weight:600;text-decoration:underline">privacy@mobisun.com</a>. We respond within 30 days.
7. Security
We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access, including SSL encryption (256-bit), PCI DSS Level 1 compliance via Shopify Payments, and regular security audits.
8. Transfers outside the EEA
Some processors (such as Shopify, Google) may process data outside the European Economic Area. We only use processors that offer appropriate safeguards (Standard Contractual Clauses, EU-US Data Privacy Framework).
9. Complaints
Do you have a complaint about our privacy practices? First contact us at <a href="mailto:privacy@mobisun.com" style="color:var(--color-yellow);font-weight:600;text-decoration:underline">privacy@mobisun.com</a>. You also have the right to file a complaint with the Dutch Data Protection Authority (<a href="https://www.autoriteitpersoonsgegevens.nl" style="color:var(--color-yellow);font-weight:600;text-decoration:underline">autoriteitpersoonsgegevens.nl</a>).