privacy policy

1. Introduction

Your privacy is of great importance to us. We therefore adhere to the privacy act. This means that your data is safe with us and that we always use it properly. When using products owned by MyOnlineStore, personal data about you is processed. This Privacy Statement is designed to help you understand what personal data is collected, why it is collected and how MyOnlineStore handles, protects, stores, exports and deletes your personal data.

Personal data is any information relating to an identified or identifiable natural person, such as an email address, street address, phone number, etc.

Whistleblowing
Visma Whistleblowing is compliant with the EU Whistleblower Directive (Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law) and the regulations regarding whistleblowing in the WEA (local working environment and protection laws).
Visit Visma Whistleblowing

The Privacy Statement is reviewed at least annually. Last updated: April 8, 2025.

Using the application (aka: the Commerce platform)

Before you can use our application, you must first register. To do so, you provide an email address and choose a password to secure your account. With that, we will then create an account, which you can log into with the email address and password of your choice. In your account you can complete your profile with various personal data. These are used to provide our services. For example, to provide invoices to your customers with your store information, to receive payments, to answer your support questions, and to send service messages to the email address you provide.

If you have chosen a paid subscription, we also use your personal information to process payment and issue an invoice.

2. MyOnlineStore as a Processor

For the personal data you enter into the MyOnlineStore application and that is processed there, your employer is the data Controller. MyOnlineStore does in such cases act as a data Processor and processes the data on behalf of and according to instructions given by the employer.

If you have any requests regarding deletion of your personal data, correction of the personal data or insight to what personal data that are processed about you, you should contact your employer.

3. MyOnlineStore as a Controller

In most cases, MyOnlineStore is the data controller of your personal data. This occurs when MyOnlineStore determines the purpose and means of processing personal data, for example, for improving the application, support, marketing and security purposes.

4. Information about processing of personal data where MyOnlineStore is the Controller

4.1 What personal data do we process?

The type of personal data that MyOnlineStore processes about you may be:

• Basic personal information such as name, address, telephone number, email and demographic information
• User and web traffic information such as login ID, username, and IP address
• Statistics that show how the users use our software and consume content we offer
• Financial information such as invoice-related information
• Content you have uploaded or provided such as photos, comments, articles and videos
• Information provided through job applications

For the purposes stated in the "Why do we process personal data?" section, MyOnlineStore does not process sensitive personal data about you.

4.2 How is personal data collected?

In general, MyOnlineStore collects personal data directly from you. We also use cookies and other analysis technologies for this purpose (such as Google Analytics 4, Woodtric and Hotjar) when you use our applications/services, in order to optimize your experience with MyOnlineStore and our products.

More information about this can be found in our cookie statement.

4.3. Why do we process personal data?

This Privacy Statement applies when MyOnlineStore process your personal data for various purposes when you interact with us, such as:

Buy and deliver

• Create and facilitate accounts for users of our services
• Provide requested offers on products and services to Customers
• Facilitate customer orders and payments
• Offer services directly to you, such as paid services

Support and improvement of services

• Improve and (further) develop the quality, functionality and user experience of our products, services and MyOnlineStore websites
• Offer customer support of our products and services

Security

• Detect, mitigate and prevent security threats and abuse, and perform maintenance and debugging

Marketing

• Manage and send marketing preferences and content
• Create interest profiles in order to promote relevant products and services (profiling)

Analysis

• Analyzing data to improve our marketing activities and/or services
• Collecting feedback. We continually strive to improve our service based on information and feedback we receive from you.

Recruiting

• Manage recruitment processes and process job applications
• Evaluate submitted documentation, conduct interviews and call references

4.4. What is the legal basis for processing your personal data?

MyOnlineStore has a legitimate interest when we process your data for security, support, marketing, analysis and improvement purposes.  Your personal data is processed from a business perspective in a way that we do not believe violates your privacy rights or freedoms.

4.5 How is your personal data shared?

As MyOnlineStore is a part of Visma, which consists of many different subsidiaries, it is important for us that we provide the best possible overall experience for you. In order to maintain an overview and insight, MyOnlineStore may share your personal data across companies in the Visma Group. 

MyOnlineStore may also share your personal data with external third parties in the following contexts:

Business partners
MyOnlineStore may share your personal information with our partners in the event this is legitimate from a business perspective and according to applicable privacy legislation. 

Public authorities
The police and other authorities may request access to personal information from MyOnlineStore. In these cases, MyOnlineStore will only provide the data if there is a court order etc. to do so.

4.6 Use of processor

When using processors, MyOnlineStore will enter into a data processing agreement in order to safeguard your privacy rights. If processors are located outside the EU/EEA, MyOnlineStore ensures legal grounds for such international transfers on your behalf, hereunder by using the EU Model Clause.

The parties we need for the performance of the agreement are:

• Our IT and payment service providers;
• Administrative service providers;
• The parties who carry out the registration of your domain name;
• Suppliers of communication software;
• E-mail platforms;
• API partners (only the businesses for which you have created a link).

An overview of the parties we work with can be found in our Sub-processors Agreement.

4.7 How long is your data stored?

MyOnlineStore will not keep your personal information longer than necessary for the purpose of processing. We keep this information for three months after you delete your account and/or cancel the subscription. We retain some of this information for up to ten years after cancellation (due to legal tax retention requirements).

Click here for the comprehensive data deletion policy.

4.8 Marketing and profiling

As part of using the application, MyOnlineStore will be processing your personal data based on legitimate interest. One of MyOnlineStore’s legitimate interests is the processing of personal data for direct marketing purposes.

MyOnlineStore uses your personal data to provide relevant content to you through direct marketing on social media platforms and emails, webpages or in a MyOnlineStore service, based on your preferences. The personal data processed are aggregated details about you such as IP address, interests (where you have clicked, etc.), username and device. This is done through technologies like cookies and is called profiling. MyOnlineStore will also be able to combine this information with information about the customer relationship we may have with your company.

MyOnlineStore uses email as a tool to communicate marketing, however only if you have consented in accordance with national marketing legislation (if needed). If you have consented, you will always have the possibility to opt out as described below, or when you receive an email containing marketing.

You have the right to opt out of receiving marketing communications from MyOnlineStore and be subject to profiling. You can do this by following the instructions for opt-out in the relevant marketing communication.

Please note that even if you opt out from receiving marketing communications, you may still receive administrative communications from MyOnlineStore, such as order confirmations and notifications necessary to manage your account or the services provided to Customers

4.9 What are your rights?

You can invoke the following rights in relation to our processing of your personal data:

• Access. You have the right to request a copy of personal data we process about you.
• Rectification. You also have the right to request MyOnlineStore to rectify inaccurate personal data concerning you. If you have an account with MyOnlineStore, this can usually be done through the appropriate "your account" or "your profile" sections on the applicable MyOnlineStore Site or service.
• Deletion. You can request MyOnlineStore to delete personal data relating to you. 
• Restriction. You may ask us to restrict the processing of your personal data.
• Portability.  You may ask us to provide you or others with your personal data in a structured, commonly used and machine-readable format.
• Object. On grounds relating to your particular situation, you have the right to object to our processing of your personal data on the basis of legitimate interests or for direct marketing purposes. You also have the right to object to our processing of your personal data for the performance of tasks carried out in the public interests or in the exercise of official authority or based on legitimate interests.

Please note that there may be certain exceptions or limitations to the abovementioned rights which could apply depending on the specific circumstances of your situation. In such cases, we will provide you with detailed information about the applicable exception or limitation and help you exercise your rights to the fullest extent possible, in accordance with applicable laws and regulations.

Please use support@myonlinestore.com to file requests as mentioned in this section.

If you feel our service falls short of your expectations, you are entitled to submit a complaint to the supervisory body in the country where your business is established. In the Netherlands, it is the Dutch Data Protection Authority.

5. Changes to this privacy statement

Of course, when our service changes, we have to update the privacy statement as well. So always note the date above and check regularly for new versions. We will do our best to announce major changes separately as well. If you have any questions or want to know what personal data we hold about you, you can always contact us. See the contact information below.

6. How to contact us

If you have any questions regarding our processing of your personal data, please contact our data protection manager Danny de Pee.

MyOnlineStore B.V.
Molenstraat 56
5341 GE Oss
The Netherlands
Chamber of Commerce: 17149100
+31 (0)412 66 80 11
support@myonlinestore.com

Comments or complaints?

We value your opinion. If you have comments or questions about our Privacy Statement, or if you have any concerns about your privacy, including with respect to a possible invasion of your privacy, please send them  to support@myonlinestore.com.

We will treat your requests or complaints confidentially. Our representative will contact you to discuss your concerns and outline options as to how they can be resolved. We strive to ensure that complaints are resolved in a timely and appropriate manner.