Version 21 September 2026
1. Who is responsible?
Klaren Subsidieadvies B.V. is the controller for personal data processed through this website, by email, by telephone and during an engagement.
Klaren Subsidieadvies B.V.
Markenhaven 28, 3826 AC Amersfoort
KvK (Trade Register) 32099461
info@klarensubsidieadvies.nl
033 – 453 08 18
2. Which data do we process?
- Contact details: name, email address, telephone number, company name and the content of your enquiry.
- Project and engagement data: information you provide for a WBSO, Innovatiebox or RVO assessment, including technical project information and correspondence.
- Administrative data: quotation, engagement, invoice and payment details where an engagement is entered into.
- Technical data: IP address and timestamp are used temporarily by the form solely to limit automated abuse. Regular web-server logs may also contain technical request information.
3. Purposes and legal bases
We process personal data only for clear business purposes and on an appropriate legal basis under the GDPR.
- answering your enquiry and carrying out an initial assessment: taking pre-contractual steps at your request;
- performing an agreed advisory engagement: performance of the contract;
- invoicing, administration and statutory retention obligations: legal obligation;
- website and form security, prevention of abuse and business file management: legitimate interest;
- processing that requires consent: only after your separate consent, which you can withdraw.
4. Form, security and IP addresses
The contact form uses a honeypot, input validation and a limit of five messages per IP address per hour. The IP address is retained for this rate limit for no more than one hour in a protected file and is not included in the forwarded contact message. Form data is stored outside the publicly accessible web directory until it has been securely forwarded to the KSA mailbox.
5. With whom do we share data?
We do not sell personal data. Data may only be shared with parties needed for our services, such as the hosting provider, email and office-software provider, IT administrator and professional advisers. During an engagement, data may, in consultation with you or where necessary, be shared with RVO, the Belastingdienst or another competent authority.
Where service providers process personal data on our behalf, we make appropriate arrangements on security and processing where required. If a supplier processes data outside the European Economic Area, we use a legally permitted transfer mechanism and appropriate safeguards.
6. Retention periods
- enquiries that do not lead to an engagement: generally no more than one year after the last substantive contact;
- engagement, correspondence and project files: for as long as necessary for performance, accountability and possible claims; after that they are deleted or archived in accordance with the applicable period;
- tax administration and relevant invoice data: seven years insofar as the tax retention obligation applies;
- temporary IP rate-limit data: no more than one hour;
- technical server logs: no more than 30 days, unless a specific security incident requires longer retention.
7. Map and external websites
On the contact page, the OpenStreetMap map is loaded only after you click to load it. From that moment, your browser connects directly to OpenStreetMap and that party may receive technical information such as your IP address and browser information. If desired, read the OpenStreetMap Foundation privacy policy first. External route services and social-media channels have their own privacy policies.
Google Analytics 4
With your consent, we measure use of the website with Google Analytics 4 (Google Ireland Ltd.). Retention period for measurement data: 14 months. Purposes: statistics on reach and use of pages and improvement of services. Legal basis: your consent (Article 6(1)(a) GDPR), which can always be withdrawn through the cookie notice or your browser settings. We do not share analytics data for advertising purposes; ad personalisation is disabled. See also the cookie policy.
8. Your rights
You can request access, rectification, erasure, restriction or portability of your personal data. You can also object to processing based on legitimate interests and withdraw consent. Send your request to info@klarensubsidieadvies.nl. To prevent misuse, we may ask for additional information to verify your identity.
We generally respond within one month. If you are not satisfied with how your request is handled, you can lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
9. Automated decision-making and changes
Klaren Subsidieadvies does not make decisions with legal effects solely through automated processing or profiling. We may amend this statement if our services, technology or legislation change. The current version is always available on this page.