Date: 25th June 2026

Privacy Statement

Welcome to MythWatch and Stichting Mythemakers. MythWatch is owned by Stichting Mythemakers. This privacy statement describes how we handle personal data and the rights you, as the data subject, have.

All personal data is collected, processed, and secured in accordance with the General Data Protection Regulation (GDPR). Stichting Mythemakers is responsible for the processing activities listed below.

For questions or comments about the processing of personal data by Stichting Mythemakers, please contact us at mythemakersfriesland@gmail.com

1. Whose personal data do we process?

We process personal data of individuals with whom we want to establish contact, have contact, or have had contact, either directly or indirectly. Examples include: people who purchase MythWatch as a game, and individuals connected to our suppliers and other companies we interact with.

2. What personal data do we process?

Below is an overview of the categories of personal data we process:

Categories of personal data	Examples
Identifying and contact details	• First and last name • Address details • Phone number • Email address
Data about your order	• What you order, such as game details • The price of your order • Other elements of your order that may be relevant
Payment details	• Bank account number • Payment method
Correspondence, conversations, and chats	• Chats, conversations, and (email) correspondence • Messages you send us via social media
Data related to the use of our website and social media	• Activities on our website and social media • IP addresses • Data you actively provide or enter into forms • Data about the device you use to access our website or online environment
Public posts about MythWatch and Stichting Mythemakers that you leave online	• Social media posts • Reviews

3. How do we obtain your personal data?

Most data is provided by you, for example when you place an order, fill in information on our website, or communicate with us.

If you follow MythWatch or Stichting Mythemakers on social media or communicate with or about us, we may gain access to part of your public profile information. If you share information about MythWatch or Stichting Mythemakers via social media, your data may become visible through those platforms. MythWatch and Stichting Mythemakers also monitor social media channels and may access data about you in that way.

4. For what purposes do we process your personal data, and on what legal basis?

Purpose & legal basis	Examples
To establish a relationship with you and to execute agreements and assignments
Legal basis: necessary for the performance of the contract	Registering you as a customer • Recording, executing, and shipping orders • Receiving payments • Responding to messages you send us
For the development and improvement of products and services
Legal basis: legitimate business interest	To maintain a clear overview of our customers and their relationships • To improve our website and services
For relationship management, promotion, and marketing
Legal basis: legitimate business interest and consent	Informing you about a product that may be of interest to you, or changes to your existing product(s) • Showing relevant information and offering specific promotions • Using advertising services to target specific audiences • Promotion via social media
To combat fraud and protect the position of MythWatch, Stichting Mythemakers, and third parties
Legal basis: legitimate business interest and compliance with legal obligations	Protecting intellectual property rights • Sharing personal data with third parties when legally required • Ensuring the security and stability of IT systems
To ensure the security and stability of IT systems
Legal basis: legitimate business interest	Monitoring IT systems • Conducting internal audits and investigations
To enter into agreements with suppliers and other partners
Legal basis: necessary for the performance of the contract	Maintaining contact with you

5. To whom do we disclose personal data?

Stichting Mythemakers may use third-party services to process your data in accordance with this privacy statement. These parties act as processors for Stichting Mythemakers, and Stichting Mythemakers ensures that they provide sufficient guarantees regarding technical and organizational security measures.

Third parties acting as processors have signed a data processing agreement stating, among other things, that they will only process data on behalf of Stichting Mythemakers.

Your data may also be shared with other parties outside Stichting Mythemakers if we are legally required to do so, such as supervisory authorities, or when necessary to execute an agreement with you. Additionally, we may share your data with other parties needed for our services.

6. Do we transfer personal data to other countries?

Stichting Mythemakers may use third-party services to process your data in accordance with this privacy statement. These parties may be located outside the European Economic Area (EEA). We only do this in compliance with applicable regulations for transferring personal data outside the EEA.

7. How long do we retain your data?

Your data is not kept longer than necessary for the purposes for which it was collected or processed. Stichting Mythemakers applies different retention periods depending on the purpose and category of data. If we no longer need the data for the purposes described above, we may still retain it for archiving, for example for legal proceedings.

8. What are your rights?

You have several rights regarding the processing of your data (see below). If you want more information or wish to exercise any of these rights, send an email to mythemakersfriesland@gmail.com

Right to withdraw your consent, if we requested your consent for a specific processing activity
Right of access
Right to rectification if personal data is incorrect or incomplete
Right to erasure if personal data is no longer relevant for the purpose for which it was collected, when consent is withdrawn, when you object to processing based on legitimate interest, or when processing is unlawful
Right to restriction of processing if you dispute the accuracy of the data processed by Stichting Mythemakers, or if you have objected to the processing
Right to data portability
Right to object to processing or direct marketing. You may object to processing based on our legitimate interest. We will then reassess whether your data may still be used. You may also specifically object to the use of your data for direct marketing
Right to object and request human intervention in automated decisions
Right to file a complaint with Stichting Mythemakers or the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

9. How do we protect your personal data?

We take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unlawful alteration of personal data. Only individuals who require access due to their role can access your data. All such individuals are bound by confidentiality.

10. Changes

We may update our privacy statement from time to time. This may occur if new data processing activities arise or due to changes in legislation or technological developments. In the event of substantial changes, we will inform you. If necessary, we will request your consent for a modified or new processing activity.