Privacy

Privacy statement

Who I am

Mush-Room is responsible for processing personal data as described in this statement.

This website

My website uses no cookies, no analytics software and no advertising or social media trackers. Fonts and images are served from my own server.

The website runs on my own server in the Netherlands. For secure and fast delivery I use Cloudflare (Cloudflare, Inc.). Cloudflare processes technical data such as your IP address in order to deliver the website and protect it against abuse. Cloudflare participates in the EU-US Data Privacy Framework. I do not store visitors' IP addresses myself.

What data I process

Only the data you give me yourself when you email, call, fill in the contact form or make a booking:

  • name, email address and phone number;
  • booking details: chosen activity, date, number of participants and the age of participating children;
  • invoice and payment details;
  • if you tell me yourself: information needed for your safety during an activity, such as an allergy or medical condition. This is sensitive data. I only use it with your explicit consent, only for that activity, and delete it immediately afterwards.

The contact form

Through the form you send your name, email address, phone number (optional) and your message. The website stores none of this: your message is forwarded to me directly as an email via Cloudflare. To prevent abuse, your IP address is used very briefly to limit the number of messages per minute; it is not stored.

Why, and on what legal basis

  • Answering your question and carrying out your booking: performance of a contract.
  • Invoices and accounting: legal obligation.
  • Safety during activities: your explicit consent, which you can withdraw at any time.

I do not send advertising without your consent and I never sell your data.

How long I keep data

  • Email and contact details: up to 1 year after our last contact.
  • Booking and invoice details: 7 years (statutory retention period).
  • Safety information: deleted immediately after the activity.

Who I share data with

Only with parties needed to provide my services: my domain provider (Greenhost, the Netherlands), Cloudflare (website delivery, the contact form and email forwarding), Google (email; participates in the EU-US Data Privacy Framework) and my accountant. I only share data with others when the law requires it.

Security

I take appropriate measures to protect your data, including encrypted connections (HTTPS) and two-factor authentication on my accounts.

Your rights

You have the right to access, correct or delete your data, to withdraw your consent, to object and to have your data transferred. To do so, email [email protected]. I will respond within 4 weeks.

Not happy with how I handle your data? You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

I may update this statement. The most recent version is always on this page. If the English and Dutch versions differ, the Dutch version prevails.