1. Who is responsible?
Mokhles Food B.V. is the controller for the processing of customer data in connection with these services.
- Address: Kanaalstraat 289, 7547 AS Enschede, the Netherlands
- Chamber of Commerce (KvK): 99003767
- Email: info@mokhlesfood.com
- Phone: +31 6 15646643
You can also use this email address to ask privacy questions and exercise your rights. Do not send passwords, verification codes or full copies of identity documents.
2. Where do we obtain data from?
We receive data from you when you complete a form, use an account, place an order or contact us. Your employer or an authorised administrator may provide your business contact details so that you can be given access on behalf of your company. Technical data is generated when you use our website, app or servers. For administration and payment we may receive data from the business administration and from service providers engaged for that purpose.
These services are intended for business customers. Business contact details can also be personal data, for example the name of a contact person or the address of a sole trader.
3. Which data do we use and why?
The table below shows, for each purpose, which data we use and on which legal basis.
| Purpose | Data | Legal basis |
|---|---|---|
| Contact and customer applications | Name, company name, email, any phone and address details, application or message and reference | Performance or preparation of a contract where you are a party yourself; otherwise our legitimate interest in answering business enquiries and serving your company |
| Account and access | Account identifier, business contact details, access rights and relevant sign-in and security data | Performance of a contract or our legitimate interest in secure access for authorised users of a business customer |
| Orders and services | Order lines, prices, delivery details, order status and correspondence | Performance of the contract or our legitimate interest in serving your company |
| Invoicing and administration | Invoice and payment data and data required for business administration | Performance of the contract and statutory administrative obligations |
| Support and data requests | Content of your request, relevant changes, status and record of how it was handled | Answering your request, legal obligations and our legitimate interest in verifiable and secure handling |
| Security and availability | IP address, time, requested page, technical error information and limited device or browser information | Our legitimate interest in a secure, working service and the prevention of misuse |
| Optional website statistics | Page visited, time, language, type of referrer, random session code and country and region derived from the connection | Your consent, where this feature is enabled |
| Optional push notifications | Push token, installation identifier, language and notification preferences, linked to your account | Your consent to optional notifications; technical steps needed to carry out your choice |
We only ask for data that is needed for the purpose concerned. Without necessary account, contact or order data we cannot provide the related service. Declining optional statistics or push notifications does not prevent normal use of the website or app.
4. Forms, orders and your account
A customer application does not automatically create an account. We review the application and let you know about access. Enabled website forms send your message or application by email to Mokhles Food and record it in the business system of Mokhles Food. When you submit a form, a security check against automated abuse takes place. For this check, a provider of form security processes technical data, such as your IP address and browser characteristics, solely for this security purpose. The message after submission shows whether your application or message has been received. If submission through a form is not available, the form says so.
Orders and invoices may be linked to your company and to your personal user account. Authorised staff may use data to handle the order, the administration or your request. This does not give every colleague access to all your account data; access follows from the rights that have been set.
5. Cookies, statistics and technical logs
Our servers process technical data to operate and secure the website. This is separate from optional visitor statistics.
If website statistics are active, we only start after you have given consent. The measurement record contains no IP address, name or email address; country and region are derived from the connection. Random codes are used to distinguish visits and consent. We do not treat those codes as anonymous data. A server may still process an IP address for the connection, security and logging. We do not use Google Analytics, Meta Pixel or advertising cookies.
You can decline statistics or later withdraw your consent via Cookie settings, where that feature is active. Withdrawal stops future optional measurement; it does not make earlier lawful processing unlawful. The cookie policy describes the storage, purposes and periods. If statistics are switched off, we place no measurement code or session storage for them.
6. Push notifications and storage on your device
Push notifications are optional. The app asks for permission through your device. You can change that permission in the system settings and manage your notification preferences in the app.
For delivery we use a technical push token and an installation identifier. Notifications are delivered through a push notification service provider and the notification service of your device’s operating system. Visible payment reminders contain no invoice number or amount. Tapping a notification opens an app screen where access is checked again.
The app stores data on the device, such as session data, language choice, cart and technical push data. When you log out, the app tries to remove the push link. Without a connection the server cannot receive that removal straight away. On a shared device a general notification may therefore still arrive for a short time until the unlinking has been processed. You can also switch off notifications directly in the device settings.
7. Who receives data?
Data is used by authorised staff and by service providers needed for our services. These include:
| Service provider or category | Function |
|---|---|
| Our IT supplier | Technical services, management and support of the website, the app and the business system of Mokhles Food |
| Hosting and storage providers | Hosting of the website and server functions, database, storage and authentication |
| Email delivery provider | Transactional email, such as confirmations, service emails and form messages to Mokhles Food |
| Providers of form security against spam | Security check when a website form is submitted; processes technical data for this, such as IP address and browser characteristics |
| Push notification providers | Technical delivery of enabled push notifications, including the notification service of your device’s operating system |
| Administrative, transport or other executing parties | Only to the extent actually needed for your order, administration or legal obligations |
We share no more than necessary. Where a party processes personal data on our behalf, we make appropriate arrangements about that processing. A service provider may be independently responsible for some of its own activities; the actual role and arrangements determine this. You can request more information about the recipients of your data from info@mokhlesfood.com.
Product translation is intended for product texts, not customer data. We do not send customer data to a translation service.
8. Processing outside the EEA
Your data is stored and processed on servers in the European Union. Some service providers, such as the push services of your phone and the spam protection of forms, may process data outside the European Economic Area. This only happens with appropriate safeguards, such as standard contractual clauses. You can request more information about these safeguards from info@mokhlesfood.com.
9. How long do we keep data?
We do not keep personal data longer than needed for the purpose for which it was obtained. The criteria below determine when data is deleted or anonymised.
| Data | Retention policy |
|---|---|
| Contact enquiries and customer applications | As long as needed for handling and necessary follow-up; if no customer relationship arises, we do not keep a completed application indefinitely |
| Active account data | As long as access is needed; when an account is deleted, data that does not have to be kept is deleted or irreversibly anonymised |
| Invoices and tax records | For the statutory retention period, usually seven years; specific legal obligations may prescribe a different period |
| Order data | For performance and necessary follow-up; only parts subject to a record-keeping obligation are kept for that statutory period |
| Security and application logs | Limited, for technical diagnosis and security; longer only for a specific incident or another demonstrable need |
| Records of profile and deletion requests | For demonstrable and secure handling, with as little identifying data as possible |
| Website statistics, only if enabled | Individual page visits 7 days, sessions 24 hours, combined totals per day and page without session code at most 13 months |
| Proof of your cookie choice | 36 months; the choice cookie in your browser expires after 12 months |
An ongoing dispute or a legal obligation may be a reason to keep certain data for longer. That does not justify keeping the entire account. We use backups only to restore data after a failure, not to reactivate a deleted account.
10. Deleting your app account
You can request deletion in the app: open Account, choose Account details and then Delete account. You do not need to call or email for this. If you no longer have the app, send an email to info@mokhlesfood.com with the subject Mokhles Food: delete account, stating your account email address and your company name. The procedure is also described on the page /account-verwijderen of this website.
We complete your request within 14 days and confirm when deletion is complete. A requested deletion is not yet a deleted account: your account remains active until the request has been processed. We may verify in an appropriate way that the request comes from the account holder.
Account deletion removes your personal access and associated data that does not have to be kept. Business invoice data may be retained because of legal obligations. Your colleagues’ access and the business customer relationship are not automatically removed. Open orders and payment obligations do not lapse because of account deletion; your personal login does not need to remain active to settle them.
11. Your privacy rights
You can ask us for access to, correction, deletion or restriction of personal data. Where the conditions are met, you can request data portability or object to processing based on a legitimate interest. You can withdraw consent you gave earlier. You can always object to any direct marketing.
Email your request to info@mokhlesfood.com. We only check what is needed to establish your identity and the request. We respond without undue delay, in principle within one month. If a legally permitted extension is needed, we inform you within that month of the reason and the new deadline. Account deletion is subject to the separately committed period of 14 days.
Not satisfied? Please contact us. You can also lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
12. Security, external services and changes
We take appropriate technical and organisational measures to protect personal data. No digital service can guarantee absolute security.
We do not use the app for advertising profiling or for solely automated decisions with legal effects or similarly significant effects on individuals. WhatsApp and external maps only open when you choose to open them; the privacy statements of those providers then also apply.
If our services or data processing change, we update this statement. We inform you appropriately of important changes. For new processing that requires consent, we ask for it in advance.