Privacy statement

[Bedrijfsnaam / Company name](“we”) processes personal data through this proposal platform. We handle your data carefully and comply with the GDPR (AVG in the Netherlands). The controller is [Bedrijfsnaam / Company name], reachable at [privacy@uwbedrijf.nl].

What data we process

• Account data of users: name, email and an encrypted (hashed) password.
• Client/prospect data you enter into a proposal: name, company and email.
• View analytics of public proposals: time of viewing, view duration and browser type. We do not store IP addresses for these analytics.
• Security log: actions such as sign-in/out and changes, with a pseudonymised(hashed) IP address, solely for security and fraud prevention.
• Cookies: a strictly necessary login (session) cookie and a language-preference cookie. No marketing or tracking cookies.

Why and on what basis

We process account data to perform our contract, client/prospect data on the basis of legitimate interest or a contract, and view analytics on the basis of legitimate interestto measure proposal effectiveness. Security logs are processed on the basis of legitimate interest (security).

Retention

We keep data no longer than necessary. View analytics are deleted after 12 months, security logs after 24 months, and expired tokens/sessions are cleaned up immediately. Account and proposal data are kept while you hold an account or as legally required.

Recipients and transfers

We share data with our processors: our email provider (for verification and notification emails) and our hosting/database provider. We sign data-processing agreements with them. Where a processor is located outside the EEA, we ensure appropriate safeguards (such as the EU-US Data Privacy Framework or standard contractual clauses).

Platform administration

The owner of this platform administers user accounts (creating, approving, suspending and deleting them) and may view account data (name, email, status) to operate and secure the service. These actions are recorded in our security log. The content of your proposals is not accessed for this purpose, except where necessary for maintenance or a legitimate request.

Your rights

You have the right to access, rectification, erasure, restriction, portability and objection. Send your request to [privacy@uwbedrijf.nl]. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Security

Passwords are hashed with Argon2id, connections use HTTPS, and we apply access control, security headers and logging.