This is an English translation provided for convenience. The Dutch version is legally binding and prevails in case of any differences between the two versions.

Last updated: 23 June 2026

Privacy Statement

Vakmeister B.V. (hereinafter: Vakmeister) values your privacy. In this statement we explain which personal data we process, why we do so and what rights you have. We comply with the General Data Protection Regulation (GDPR).

1. Who is the controller?

Vakmeister B.V., Laan van Bovenduist 113, 3826 JA Amersfoort, the Netherlands. KvK number available on request. Contact: support@vakmeister.nl.

For personal data that our customers process themselves through the Vakmeister platform (for example data of their own customers), the customer is the controller and Vakmeister acts as a processor. We enter into a data processing agreement for this.

2. What data do we process?

  • Account data: name, e-mail, phone number, company name, KvK number, VAT number, password (hashed).
  • Billing data: billing address, bank details, payment history.
  • Usage data: IP address, device information, browser, click behaviour, log files, error reports.
  • Communication: e-mails, support messages, chat logs.
  • Marketing: completed forms, lead source, e-mail engagement (open/click).
  • Content: data that you place in the Platform - we only process this to deliver the service.

3. What do we use your data for?

  • Providing, maintaining and securing the Platform.
  • Performing the agreement, including invoicing and support.
  • Improving our service (aggregated analysis).
  • Sending service and product updates by e-mail.
  • Marketing for which you have given consent or where a legitimate interest exists (B2B).
  • Complying with legal obligations (such as tax retention requirements).

4. Legal bases

We process personal data based on: (a) performance of the agreement, (b) legal obligation, (c) legitimate interest (such as security, fraud prevention and direct B2B marketing to existing customers), or (d) your consent. Consent can always be withdrawn.

5. Retention periods

  • Account data: up to 12 months after termination of the subscription.
  • Invoice and administrative data: 7 years (tax retention obligation).
  • Support communication: a maximum of 24 months.
  • Marketing leads without a customer relationship: a maximum of 24 months or until consent is withdrawn.
  • Log data: a maximum of 12 months, after which it is aggregated or deleted.

6. Who do we share data with?

Vakmeister never sells personal data. We do engage processors who help us deliver the service, such as:

  • Lovable - managed platform (Lovable Cloud) on which Vakmeister runs.
  • Supabase - database, authentication and file storage within the EU/EEA, used via Lovable Cloud.
  • Cloudflare - edge hosting, CDN and DDoS protection, used via Lovable Cloud.
  • E-mail and transactional mail providers.
  • Payment and collection partners.
  • Analytics and monitoring tools (configured to be privacy-friendly).
  • Support and CRM software.

We enter into a data processing agreement with all of these parties. An up-to-date overview of sub-processors is available on request via support@vakmeister.nl. See also our page security & platform.

7. Transfers outside the EEA

We prefer to host data within the EU/EEA. If a supplier unexpectedly processes data outside the EEA, this only happens on the basis of appropriate safeguards such as the EU Standard Contractual Clauses.

8. Security

We take appropriate technical and organisational measures, including encryption in transit (TLS 1.2+) and at rest, role-based access control, row-level security, logging, daily backups and periodic security reviews. The underlying infrastructure (Supabase + Cloudflare via Lovable Cloud) provides DDoS protection, a WAF and redundant storage. No system is 100% secure; in the event of a data breach we report this in accordance with the GDPR to the Dutch Data Protection Authority and, where required, to affected individuals. More details at vakmeister.nl/en/security.

9. Cookies

On vakmeister.nl we use functional cookies (always placed), analytical cookies (configured to be privacy-friendly) and, only with consent, marketing cookies. You can manage your preferences via the cookie banner.

10. Your rights

You have the right to:

  • access, correct or have your data deleted;
  • restrict processing or object to it;
  • have your data transferred (data portability);
  • withdraw consent given;
  • file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Send requests to support@vakmeister.nl. We respond within 30 days. To prevent misuse, we may ask for additional identification.

11. Changes

We may amend this privacy statement. The most current version is always available on this page. We announce material changes by e-mail or within the Platform.