Privacy policy
Introduction
This is the privacy statement of Mused B.V. (“Mused”, “we”, “us” of “our”), that applies to the processing of personal data that we carry out. For instance, because of your use of our website (www.musedearplugs.com) and in handling orders of our products.
In this privacy statement, we will explain how we handle your personal data. We process personal data only to the extent that you have given your consent, or where this is necessary for the performance of the agreement between you and us, or where we have a legitimate interest in the processing under the law.
Do you have any questions after reading this privacy policy? Or would you like to exercise your rights (set out below)? Please send your request to support@musedearplugs.com.
Mused B.V. is the data controller for your personal data.
Our address is Ploegweg 5, 5232 BR, 's-Hertogenbosch, the Netherlands.
We are registered with the Dutch Chamber of Commerce under number: 99572885.
What personal data do we collect?
We collect and process the following categories of personal data:
- First and last name
- Contact data (e-mail, postal/delivery address, telephone number)
- Payment details (we do not collect or store your full bank account number, this data is processed securely by third-party payment providers)
- Transaction data (order history, purchase amounts, currency, date and time of transactions)
- Communication with our customer service team or other communications from you to us (feedback, reviews, survey responses, etc.)
- Technical data collected through your use of our website (IP address, browser type, device type and language preferences, pages visited, clickstream data, duration and frequency of visits, products viewed)
- Approximate geographic location based on your IP address
- Information collected through the use of cookies.
Why do we collect your personal data?
We process your personal data for the following purposes and on the following basis:
| Purpose: | Legal basis: |
|---|---|
| Processing and fulfilling your orders | Performance of the agreement |
| Processing payments | Performance of the agreement; legal obligation |
| Delivery of the orders and providing shipping updates | Performance of the agreement |
| Communicating with you about your order or any other form of customer support | Performance of the agreement |
| Fraud prevention and security | Legitimate interest; legal obligation |
| Website analytics and improvement | Legitimate interest (with consent for non-essential cookies) |
| Marketing communications | Consent |
| Personalising your experience on the website | Consent; legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
| Responding to claims and acting in proceedings | Legal obligation; legitimate interest |
How long do we collect your personal data?
Mused does not collect and store your personal data for longer than is necessary for the purpose your personal data is collected for.
| Type of personal data: | Retention period: |
|---|---|
| Personal data relating to the processing and fulfilling your orders and processing of payments | 7 years from the date of the transaction |
| Records of marketing consent | For the duration of your consent and for a maximum period of 5 years after the withdrawal of your consent; |
| Personal data relating to our correspondence with you about your order or any other form of customer support | a maximum of 5 years from the date of the last correspondence |
| Data on website analytics | 26 months, but anonymized data may be retained longer |
| Cookie data | See our cookie policy. |
What do we do to protect and secure your personal data?
Mused protects your personal data in a number of ways to ensure that your data is and remains secure. We do this, for example, by restricting access to your personal data, using secure communication channels and implementing network security measures. We also enter into agreements with third parties who process your data on our behalf to ensure that they maintain appropriate security measures and treat your information confidentially.
Which third parties do we share your personal data with?
We may share your personal data with different third parties. We only share the personal data the third party in question needs to know and subject to appropriate contractual safeguards:
- Payment processors (such as Stripe, PayPal, etc. via Shopify Payments) will receive personal data to ensure you can securely provide us with payment for your order.
- Delivery partners: will receive personal data to ensure your order can be delivered to you.
- Website hosting: these parties receive personal data so we can operate our website and offer you our products.
- Analytics providers: these providers will process personal data (which is anonymized where possible) to help us understand the usage of our website and improve performance of the website for our customers.
- E-mail marketing platforms: we may use e-mail marketing platforms to send marketing communications (only if you have given consent for this).
- Customer service platforms: we may use customer service platforms to help us manage customer support requests.
Transfers of data outside of the EU/EEA
We are a company based in the Netherlands, but we aim to serve customers from all over the world. Your personal data may thus be transferred to and processed in countries outside of the country you reside in (including countries outside of the EEA).
Where we process personal data outside of the EEA, we ensure an adequate level of protection through any of the following safeguards (whichever is applicable:
- The use of standard contractual clauses approved by the European Commission;
- We will rely on the EU-US Data Privacy Framework in case of transfers to a recipient in the USA that is self-certified under this Framework;
- The use of a UK International Data Transfer Agreement, in case of a transfer of personal data protected by the UK GDPR to a country that does not have an adequacy decision from the UK; or
- Any other appropriate safeguards as required by the applicable law.
What are your rights as a data subject?
If you are a customer residing in the EEA, then the General Data Protection Regulation (GDPR) is applicable to you and you have the following rights:
- receive an overview of the personal data Mused processes about you (right of access)
- have us amend the personal data processed about you (right of rectification)
- have your personal data erased (right of erasure)
- have less personal data processed about you (right to restrict processing)
- object to the processing of your personal data (right to object)
- have your personal data transferred (right of data portability)
- not be subject to automated decision-making/profiling (right to not be subject to automated decision-making and profiling)
If you are a resident of the UK, then UK implementation of the GDPR (the UK GDPR) applies to you and you also have the rights as set out above.
If you are not a resident of the EEA or the UK, your rights may be different than those above. That is because different privacy laws then apply to you. We will carry out your requests in line with the privacy laws applicable to you, but may also provide information or carry out requests that you do not strictly have a right to based on the applicable privacy laws.
If you wish to exercise your rights, you can submit a request to Mused via support@musedearplugs.com.
Mused always endeavors to comply with your request, but this is not always possible. For example, this may include data that we are not permitted to delete because we are legally obliged to retain the data (for a longer period). Within one month of Mused receiving your request, we will inform you and indicate how we will comply with your request. If necessary, we may extend the response period by one month.
Do you have a complaint?
You may have a complaint about the way in which Mused processes your personal data and/or handles your rights. If you believe that we may not be complying with the rules of the GDPR, you can submit a complaint via
If, following the handling of your complaint or request, you do not agree with the outcome, you may contact the data protection authority of your country/jurisdiction.
For example, in case you are a customer based in the Netherlands, you may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via their website www.autoriteitpersoonsgegevens.nl.
Amendments to this statement
When we make material change to this privacy statement, we will communicate this on our website or by sending you an e-mail. Please keep an eye on our website and this privacy statement, to ensure you are up to date with how we handle your personal data.