🔒 Privacy Policy

1. Data We Collect

• Account: name, email, company name, KVK number
• Project data: names, addresses, descriptions, amounts
• Receipts & invoices: suppliers, amounts, files
• Banking data (via EnableBanking): account statements, transactions — only with your explicit PSD2 consent
• Trip records: addresses, distances, vehicle data
• Technical: IP address, browser, login timestamp

2. Purpose & Legal Basis

• Contract performance (GDPR art. 6(1)(b)): providing the service
• Legal obligation (sub c): 7-year tax retention (Dutch Tax Act art. 52)
• Explicit consent (sub a) + PSD2: bank account connection via EnableBanking AISP
• Legitimate interest (sub f): security, abuse prevention

3. Third Parties & Sub-processors

We share data only with the processors below, under data processing agreements (GDPR art. 28).

4. Retention Periods

• Account data: 30 days after deletion
• Financial data: 7 years — statutory obligation (Dutch Tax Act art. 52)
• Banking data (EnableBanking): not stored after processing; session-based
• AI cache: maximum 24 hours
• Log files: maximum 90 days

5. Your Rights (GDPR Art. 15–22)

• Access (art. 15)
• Rectification (art. 16)
• Erasure (art. 17)
• Restriction (art. 18)
• Portability (art. 20)
• Objection (art. 21)
• Withdrawal of PSD2 consent (banking data) at any time

Requests to mijnbouwapp@gmail.com — response within 30 days. Complaints: Dutch Data Protection Authority.

6. Cookies

Functional cookies only (login session). No tracking or marketing. No cookie banner required.