Last updated: 12 October 2026.
Who we are
Mijn Bestel App is a service of Industrial IT, Molecatenlaan 57A, 7339 LJ Ugchelen, the Netherlands. Questions about privacy can be asked through the contact form.
A supplier (the company that uses Exact Online) invites its customers to order. The supplier is responsible for the data of those customers; Industrial IT processes it on the supplier's behalf. Industrial IT is responsible for the data of the supplier itself and of visitors to this website.
Which data
- Suppliers: name and e-mail address of the Exact Online user, the chosen administration, the settings and the access keys Exact Online issues after logging in. We do not store the Exact Online password.
- Customers: e-mail address and name of the contact person, the password (only as a one-way hash), the time of the last login, draft orders, cart, favourites and placed orders.
- Data from Exact Online: items, prices, stock, customers, contacts, addresses and sales orders of the supplier's administration, so the app works fast. They are kept in a separate database per administration.
- Technical data: IP address, browser, time and the requested page, in log files for security and for solving errors.
Android app
- Camera: only to scan barcodes, and only when you allow it. The barcode is recognised on the device; camera images are not stored and not sent.
- Device: when you log in, the app sends the name of the device and the version of the app, so the connection can be recognised.
- Usage: for each request to the server we keep the time, the part of the app, the result and the duration, linked to the login. This is how we find errors and abuse.
- On the device: the catalogue, prices and draft orders are kept in an encrypted database, so the app also works without a connection; the login is encrypted with the Android Keystore. Every login and administration has its own encrypted database with its own key; it stays when logging out or switching, so afterwards only the changes are fetched. A database that was not used for 60 days is deleted, as is the database of a login that is no longer valid. Everything goes when the app is uninstalled.
- The app contains no advertising and no third-party tracking or analytics services.
AI assistant
A customer can connect an AI assistant (such as Claude or ChatGPT) if the supplier allows it. The assistant then sees what it asks for on behalf of the customer: items, prices, draft orders and orders of that customer. What the provider of the assistant does with the conversation is described in its own privacy statement. For 180 days we keep a record of the actions the assistant performed and what it got back, with the name of the assistant, to find errors and improve the connection. An order is only placed after the customer confirms it. The connection can be revoked at any time under Linked apps.
Website and cookies
- The web app uses a session cookie to keep you logged in and a cookie for the chosen language. They are needed for the service to work.
- The website and the web app measure usage with web analytics from trackingandtracing.app (pages visited, clicks and mouse movements) to improve the service.
Purposes and legal grounds
- To provide the service: logging in, showing the catalogue and putting orders into Exact Online (performance of the contract).
- To keep the service secure and working and to improve it: log files and web analytics (legitimate interest).
- To invoice the supplier's subscription (performance of the contract and legal obligation).
Who we share data with
- Exact Online: orders go to the supplier's administration as sales orders.
- Mollie: for the payment of the supplier's subscription.
- E-mail: invitations and password e-mails are sent through our mail server.
- Hosting: our servers are located in Europe.
- AI assistant: only when the customer connects one (see above).
- We do not sell data and do not use it for advertising.
How long we keep data
- A customer login exists until the customer deletes it or the supplier removes it.
- Data of a supplier and its administration is deleted 30 days after the end of the subscription, or earlier on request.
- Invoice data is kept for 7 years, as required by law.
- The log of the AI assistant is kept for 180 days; other log files no longer than needed for security and for solving errors.
Security
- All connections use HTTPS. Passwords and the login keys of the app are stored only as a hash.
- A customer only sees the data of his own company, and only at suppliers that invited him.
Your rights
You can view your data, have it corrected or deleted, and object to its processing. Customers can contact their supplier or us through the contact form; we respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Delete your account
As a customer you delete your account yourself: go to www.mijnbestel.app/app/accountdelete.php and log in. In the Android app the button Delete account is under Settings. You confirm with your password.
- Deleted: your login with your e-mail address at every supplier, the connections with the Android app and with AI assistants, and failed login attempts.
- Kept: placed orders, because they are sales orders in Exact Online that the supplier keeps for its accounts, and the draft orders and favourites of your company, which you share with colleagues. Your name is removed from them.
- Cannot log in any more? Request a new password on the login page, or ask for deletion through the contact form with the e-mail address of your account. We delete it within one month.
- Suppliers cancel the subscription; the data of the administration is deleted 30 days after the end, or earlier on request.
Changes
This statement may change when the service changes. The date at the top shows when that last happened.
