Privacy Policy
Version: 29 December 2025
Brand Boekhouders B.V. (hereinafter referred to as “We”), Keizersgracht 62, 1015 CS Amsterdam, is responsible for the processing of personal data as described in this privacy policy.
Personal data we process
We process your personal data because you use our services and/or because you provide these data to us yourself.
Below is an overview of the personal data we process:
Contact details:
- First and last name;
- Address details;
- Phone number;
- Email address.
Identification details:
- Citizen Service Number (BSN);
- Passport details;
- ID number;
- Gender;
- Date of birth;
- Place of birth;
- Copy of identification documents;
- Contact details entered by you via an app.
Financial data:
- Bank account number (IBAN);
- Turnover data;
- Loans;
- Financial obligations.
Location data:
- IP address.
Other personal data:
- Data you actively provide, for example through correspondence or by telephone.
Special and/or sensitive personal data we process
- BSN number;
- Financial data;
- Data of persons under 16 years of age.
Our website and/or service does not intend to collect data about website visitors under the age of 16, unless permission has been granted by parents or guardians. However, we cannot verify whether a visitor is older than 16. We therefore advise parents to be involved in their children’s online activities in order to prevent data about children from being collected without parental consent.
If you believe that personal data of a minor have been collected without consent, please contact us at hallo@brandboekhouders.nl, and the information will be deleted.
Bank and transaction data via authorized payment service providers
When you link your bank account to our platform via an authorized payment service provider, account and transaction data are processed.
This includes data such as:
- account holder;
- IBAN;
- transaction amounts;
- dates, descriptions, and counter accounts;
- The account balance.
These data are processed exclusively to perform your financial administration and bookkeeping correctly and efficiently.
The connection to your bank account is always established via a secure connection in accordance with PSD2 guidelines.
Brand Boekhouders does not have access to your bank login details and only receives the transaction data that you have explicitly shared via the connection.
We do not retain these data longer than necessary for the performance of our services and the statutory retention periods arising from fiscal obligations.
Documents in the client portal
Clients can upload documents via the portal, such as receipts, invoices, and other administrative records.
These documents may contain personal data of the client or of third parties (for example suppliers or employees).
Brand Boekhouders processes and stores these documents exclusively for the purpose for which they were provided — namely, the performance of administrative and tax services.
Documents are retained as long as legally required (usually 7 years under tax retention obligations), unless the client requests earlier deletion and this does not conflict with legal obligations.
Legal basis and purpose of processing personal data
We process your personal data:
- To perform the agreement we have entered into with you;
- To contact you by phone or email if necessary to carry out our services;
- On the basis of legal obligations, such as data required for tax declarations;
- To inform you about changes to our services and products;
- To provide our administrative, tax, and advisory services;
- To send (electronic) newsletters.
Automated decision-making
We do not make decisions based on automated processing that could have (significant) consequences for individuals.
How long we retain personal data
We do not retain your personal data provided via the website or our client portal longer than strictly necessary to achieve the purposes for which the data are collected.
Certain documents are subject to statutory retention obligations. Entrepreneurs are required to retain their administration for at least seven years for the Dutch Tax Authority. This period starts after the end of the financial year. We will therefore retain certain documents for seven years for tax purposes.
Sharing personal data with third parties
We do not sell your data to third parties and only disclose them if necessary to perform our agreement with you or to comply with a legal obligation.
We conclude data processing agreements with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. We remain responsible for these processing activities.
Use of processors and sub-processors
For our services, we use carefully selected third parties that support us in processing personal data. This includes, among others:
- IT and hosting providers for the client portal and secure data storage;
- GoCardless for retrieving bank and transaction data via PSD2 connections;
- OCR providers, Klippa and Taggun, for processing and recognizing receipts and invoices;
- HubSpot for client management and communication.
All these parties process personal data exclusively on our behalf and not for their own purposes. They are required to take appropriate technical and organizational measures to protect your data.
Cookies or similar technologies we use
The website uses analytical cookies from Google Analytics, Google Ads, Google Tag Manager, Posthog, Sentry, and Calendly.
Your IP address is not fully used, ensuring anonymous data sharing.
The results of Google Analytics are used exclusively to track visitor statistics.
Accessing, correcting, or deleting your data
You have the right to access, correct, or delete your personal data. In addition, you have the right to withdraw any consent for data processing or object to the processing of your personal data, as well as the right to data portability.
You may submit a request for access, correction, deletion, data transfer, withdrawal of consent, or objection to processing.
To verify that the request has been made by you, we ask that you include a copy of your identification document with your request. In this copy, please black out your photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN), to protect your privacy.
We will respond as soon as possible, but no later than four weeks after receiving your request.
You also have the right to lodge a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
How we secure personal data
We take the protection of your data seriously and implement appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification.
If you believe that your data are not properly secured or there are indications of misuse, please contact us.
Changes to our privacy policy
We update our privacy policy from time to time.
We will inform you of any changes by publishing the updated privacy policy on this website.
Contact details
Brand Boekhouders B.V.
Data Protection Officer: Ruben Baggen
Herengracht 39, 1015 BB Amsterdam
www.brandboekhouders.nl
hallo@brandboekhouders.nl
