Who is responsible
MME Dienstverlening, sole proprietorship, established at TT Vasumweg 44, Unit 2.1 Noordkant, 1033SC Amsterdam, registered with the Dutch Chamber of Commerce under number 92783929, is responsible for the processing of personal data described in this statement.
For questions please contact us via info@mmedienstverlening.nl or +31 6 21302552.
Which data we process
To deliver our services — repair, maintenance, ownership transfer and sale of VanMoof S3 and X3 bikes — we process the following personal data:
- First and last name
- Phone number
- Email address
- Address (home address or where the bike is located)
- Bike model (S3 or X3) and frame number
- Issue description and repair history
- Photos of the bike, possibly including frame number or damage
- Work order details and signature
- Invoice details (including company name and VAT number for business customers)
- Communication via WhatsApp, email and phone
- Payment data — MME does not store IBAN or bank details itself; payment runs via iDEAL payment requests
Why we process this data
We process your personal data for the following purposes:
- Performance of the agreement
- Planning, carrying out and invoicing repairs or sales. Legal basis: Article 6(1)(b) GDPR.
- Communication
- Contacting you for appointments, sharing diagnosis and repair updates, and answering your questions.
- Statutory record-keeping
- Storing invoices and related customer data for the Dutch Tax Authority. Legal basis: Article 6(1)(c) GDPR.
- Warranty handling
- Processing warranty claims and being able to trace work that was carried out.
- Ownership verification
- Preventing MME from working on stolen bikes. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- Future newsletter
- With your explicit consent, we may inform you about maintenance tips, offers or news. At the time of publication of this statement we do not send any newsletter.
Who we share your data with
MME shares your data only with parties that are necessary for the performance of our services or for which there is a legal obligation:
- Plus Boekhouden (accounting firm) — has access to invoices, customer data, VAT data and payment information via SnelStart.
- SnelStart B.V. (accounting software) — processes invoices and customer data as a technical service provider.
- Apple Inc. (iCloud, Apple Notes, photos) — stores work orders, customer notes and photos as a technical service provider.
- Meta Platforms Ireland Ltd. (WhatsApp Business) — processes customer communication and shared photos.
- Our regular courier — receives your name, address and phone number for delivery or return. We have a data processing agreement with our courier.
- Dutch Tax Authority — receives anonymised or aggregated data through VAT and income tax filings, where legally required.
Retention periods
We do not keep your data longer than necessary:
- Invoices & VAT data
- Seven years after the end of the tax year, in line with Article 52(4) of the Dutch General Tax Act.
- Work orders & repair history
- Seven years, for warranty handling and evidentiary purposes in case of disputes.
- Photos during repair
- Seven years.
- WhatsApp communication
- Up to two years after the last contact.
- Quotes without follow-up
- Customer data of people who only requested a quote or asked a question without a contract being concluded: one year.
Security
MME takes appropriate technical and organisational measures to protect your data against loss or unlawful processing. These include the use of encrypted cloud services, secured devices, strong passwords and two-factor authentication where possible.
Your rights
Under the GDPR you have the following rights regarding your personal data:
- Right of access — you may request what data we process about you.
- Right to rectification — you may have inaccurate data corrected.
- Right to erasure — you may request deletion of your data, insofar as we are not legally obliged to retain it.
- Right to restriction — you may request restriction of the processing of your data.
- Right to data portability — you may receive your data in a structured form or have it transferred.
- Right to object — you may object to processing based on legitimate interest.
- Right to withdraw consent — you may withdraw consent at any time.
You can exercise these rights by sending an email to info@mmedienstverlening.nl. MME will respond within four weeks. We may ask for additional identification to prevent abuse.
Filing a complaint
If you believe MME does not handle your data with due care, we would appreciate it if you raised this with us first via info@mmedienstverlening.nl so we can find a solution together. You always have the right to file a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.
Changes
MME may amend this privacy statement. The most recent version is always available on mmedienstverlening.nl with the version date. We recommend reviewing this statement regularly.
Anything unclear in this document?
We are happy to explain in person. Call, message or email — whichever works best for you.