Privacy statement

The controller is Het Strategiebureau. You can ask questions about privacy via beleidsmonitor@hetstrategiebureau.com.

• Account data: name, email address, telephone number, password (encrypted) and two-factor settings.
• Business data: company name, position, address, postcode, town/city, country, Chamber of Commerce (KvK) number and VAT number.
• Private data: name, address, postcode, place of residence and country.
• Payment data: customer and subscription data at Stripe; full card details are not stored by us.
• Usage data: logged-in sessions, pages viewed, saved searches, notes and notifications.
• Technical data: IP address, browser, device characteristics and login times.
• Proof of consent: which document and which version was accepted at what moment, with IP address, browser and device.

• Performance of the agreement: account, subscription, payment and delivery of the Service.
• Legal obligation: statutory tax retention obligation for invoices and payments.
• Legitimate interest: security, fraud prevention, misuse detection, logging and product improvement.
• Consent: non-essential cookies and receiving product updates. Consent can be withdrawn at any time.

We use Stripe for payments. Stripe processes name, email address, billing details and payment method and acts as an independent controller for payment processing.

We receive from Stripe only the status of the payment, the subscription and limited characteristics of the payment method.

We send transactional emails, such as account confirmation, confirmation of the trial period, invoices and notifications of changes to the terms.

Product updates are only sent after express consent and can be unsubscribed from at any time.

To counter account sharing and misuse, we register which devices log in with the account and keep track of login attempts and security events.

IP addresses are processed for security, troubleshooting and recording declarations of consent.

We place essential cookies for the functioning of the website and the session. Other categories are only placed after consent. See the Cookie statement.

After consent for statistics, we use Google Analytics 4 from Google Ireland Ltd. Data such as your IP address and device characteristics may be processed by Google in that context, including outside the EEA under the EU-US Data Privacy Framework. We do not send names, email addresses, user IDs or file contents to Google; advertising features and Google Signals are switched off. See the Cookie statement.

The Service analyses public documents using AI in order to classify, summarise and connect them. These analyses are aimed at public sources and not at profiling users.

No automated decision-making with legal effects for users takes place.

• Account data: for the duration of the account and up to twelve months thereafter.
• Invoices and payment data: seven years, on the basis of the statutory tax retention obligation.
• Proof of consent: seven years after the end of the agreement.
• Security and access logs: a maximum of twelve months.

We engage processors for hosting, database, email delivery and payment processing. Data processing agreements have been concluded with these parties.

Data is preferably processed within the European Economic Area. Where transfer outside it takes place, this is done on the basis of appropriate safeguards.

Requests can be submitted via beleidsmonitor@hetstrategiebureau.com. We respond within one month.

• Right of access to the personal data we process.
• Right to rectification of inaccurate data.
• Right to erasure, insofar as no retention obligation applies.
• Right to restriction of processing and right to object.
• Right to data portability: provision of your data in a commonly used file format.
• Right to withdraw consent given.

If you disagree with the way we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).