Privacy Policy

1.1 Information You Provide

We collect information that you voluntarily provide when using our services, including:

• Account information (name, email address)
• Tax calculation inputs (salary, municipality, personal circumstances)
• Saved tax scenarios and preferences
• Communications with our support team

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Device information (browser type, operating system)
• Usage data (pages visited, time spent, interactions)
• IP address and general location data
• Cookies and similar tracking technologies

We use your personal information for the following purposes:

• To provide and maintain our tax calculation services
• To personalize your experience and save your preferences
• To communicate with you about service updates and improvements
• To analyze and improve our website performance
• To comply with legal obligations and protect our rights
• To detect and prevent fraud or security issues

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: When you agree to specific data processing (e.g., analytics cookies)
• Contract Performance: To provide our tax calculation services
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with Dutch tax and financial regulations

We do not sell your personal information. We may share your data with:

• Service Providers: Cloud hosting, analytics, and email services (with data processing agreements)
• Legal Requirements: When required by Dutch law or to protect our legal rights
• Business Transfers: In case of merger, acquisition, or asset sale (with notice to users)

Third-Party Services

We use the following third-party services that may collect data:

• Google Analytics: For website analytics (anonymized IP addresses)
• Hosting Providers: For secure data storage within the EU

Under GDPR and Dutch data protection law, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@belastbaar.com. We will respond within one month.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data centers within the European Union
• Employee training on data protection

We retain your personal data only as long as necessary:

• Account Data: Until you delete your account or request deletion
• Tax Calculations: Retained for your convenience until you delete them
• Analytics Data: Anonymized and retained for up to 26 months
• Legal Requirements: As required by Dutch law (typically 7 years for financial records)

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and features

Cookie Management

You can manage cookie preferences through our cookie banner or browser settings. Disabling certain cookies may affect website functionality.

Your data is primarily stored and processed within the European Union. If we transfer data outside the EU, we ensure:

• Adequate level of protection (adequacy decisions)
• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Appropriate safeguards in accordance with GDPR

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting a notice on our website
• Sending an email notification (for material changes)
• Updating the "Last Updated" date at the top of this policy

For questions about this Privacy Policy or to exercise your rights, contact us:

• Email: privacy@belastbaar.com
• Data Protection Officer: dpo@belastbaar.com
• Address: Belastbaar, Amsterdam, Netherlands

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

• Website: autoriteitpersoonsgegevens.nl
• Address: Bezuidenhoutseweg 30, 2594 AV Den Haag