Privacy statement

1. Who is responsible?

Klaren Subsidieadvies B.V. is the controller for the personal data processed via this website, by e-mail, by telephone and during an engagement.

Klaren Subsidieadvies B.V.
Markenhaven 28, 3826 AC Amersfoort
Dutch Chamber of Commerce no. 32099461
info@klarensubsidieadvies.nl
033 – 453 08 18

2. Which data do we process?

• Contact details: name, e-mail address, telephone number, company name and the content of your question.
• Project and engagement data: information you provide for a WBSO, Innovation box or RVO assessment, including technical project information and correspondence.
• Administrative data: quotation, engagement, invoice and payment data insofar as an engagement is concluded.
• Technical data: IP address and timestamp are used at the form only temporarily to limit automated abuse. Regular web server logs may additionally contain technical request information.

3. Purposes and legal bases

We process personal data only for clear business purposes and on an appropriate legal basis under the GDPR.

• answering your question and carrying out a first assessment: performance of pre-contractual measures at your request;
• carrying out an agreed advisory engagement: performance of the agreement;
• invoicing, administration and statutory retention obligations: legal obligation;
• security of website and form, abuse prevention and business file formation: legitimate interest;
• a processing for which consent is required: only after your separate consent, which you can withdraw.

4. Form, security and IP addresses

The contact form uses a honeypot, input validation and a limit of five messages per IP address per hour. For this limit, the IP address is stored for a maximum of one hour in a protected file and is not included in the forwarded contact message. Form data are stored outside the publicly accessible web directory until they have been securely forwarded to the KSA mailbox.

5. With whom do we share data?

We do not sell personal data. Data can only be shared with parties necessary for our services, such as the hosting provider, e-mail and office software supplier, IT administrator and professional advisors. In an engagement, data can, in consultation or when necessary, be shared with RVO, the Dutch Tax and Customs Administration or another competent authority.

With service providers that process personal data on our behalf, we make agreements on security and processing where necessary. When a supplier processes data outside the European Economic Area, we use a legally permitted transfer basis and appropriate safeguards.

6. Retention periods

• questions that do not lead to an engagement: in principle a maximum of one year after the last substantive contact;
• engagement, correspondence and project files: as long as necessary for performance, accountability and possible claims; afterwards they are deleted or archived according to the applicable period;
• fiscal records and relevant invoice data: seven years insofar as the fiscal retention obligation applies;
• temporary IP rate-limit data: a maximum of one hour;
• technical server logs: a maximum of 30 days, unless a concrete security incident makes longer retention necessary.

7. Map and external websites

On the contact page, the OpenStreetMap map is loaded only after you click on it yourself. From that moment, your browser connects directly to OpenStreetMap and that party may receive technical data, such as your IP address and browser information. If desired, read the privacy policy of the OpenStreetMap Foundation in advance. External route and social media channels have their own privacy policy.

Google Analytics 4

With your consent, we measure the use of the website with Google Analytics 4 (Google Ireland Ltd.). Retention period of the measurement data: 14 months. Purposes: statistics on reach and use of pages and improving the services. Legal basis: your consent (Art. 6.1.a GDPR), always revocable via the cookie notice or your browser settings. We do not share measurement data for advertising purposes; ad personalisation is disabled. See also the cookie policy.

8. Your rights

You can request access, correction, deletion, restriction or transfer of your personal data. You can also object to a processing based on legitimate interest and withdraw consent. Send your request to info@klarensubsidieadvies.nl. To prevent abuse, we may ask additional information to establish your identity.

We respond in principle within one month. If you are not satisfied with the handling, you can file a complaint with the Dutch Data Protection Authority.

9. Automated decision-making and changes

Klaren Subsidieadvies does not take decisions with legal consequences solely through automated processing or profiling. We may amend this statement when the services, technology or legislation changes. The current version is always on this page.