Privacy policy

1. Introduction

CreditCheck.nl respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR (AVG)) and the Dutch GDPR Implementation Act. This privacy policy describes how we handle your personal data.

Please note: CreditCheck.nl provides credit information about both businesses and individuals. We provide credit information about individuals exclusively to business customers who can demonstrate a valid lawful basis under the GDPR (AVG), never publicly on the website. Data subjects can always request access, rectification or erasure.

2. Data controller

CreditCheck.nl is responsible for processing personal data as described in this privacy policy. Do you have any questions about our privacy policy? Please contact us using the contact details on our website.

3. What data do we process?

We may process the following categories of personal data:

• Contact details: name, email address (only if you contact us)
• Technical data: IP address, browser type, device information
• Usage data: pages visited, click behaviour, time of visit

We process no financial data, credit information, credit registration data or other sensitive financial information about visitors.

4. Purposes of processing

We process personal data for the following purposes:

• Providing and improving our website and information services
• Analysing website usage to improve our services
• Responding to questions and requests
• Complying with legal obligations

5. Lawful bases for processing

We process personal data on the basis of:

• Consent: for placing non-essential cookies
• Legitimate interests: for website analysis and improvement
• Legal obligation: where applicable

6. Retention periods

We retain personal data for no longer than necessary for the purposes for which it was collected. Specific retention periods:

• Contact details: a maximum of 2 years after the last contact
• Analytics data: a maximum of 26 months
• Technical log data: a maximum of 12 months

7. Sharing with third parties

We never sell your personal data to third parties. We may share data with:

• Hosting providers to keep our website available
• Analytics services for website statistics (anonymised where possible)

We have entered into data processing agreements with these parties in accordance with the GDPR (AVG).

8. Your rights

Under the GDPR (AVG), you have the following rights:

• Right of access: you can request details of the data we hold about you
• Right to rectification: you can have inaccurate data corrected
• Right to erasure: you can request deletion of your data
• Right to restriction: you can have processing restricted
• Right to data portability: you can receive your data in a standard format
• Right to object: you can object to certain processing activities

Contact us to submit a request. We will respond within 4 weeks.

9. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Our website uses an SSL certificate for a secure connection.

10. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first. If we cannot resolve the matter together, you have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

11. Changes

We may amend this privacy policy from time to time. The latest version is always available on our website. We will notify you of significant changes.