Privacy statement
Last updated 6 July 2026
You trust us with your data, and we handle it with care. On this page you can read exactly what data we process, why, and what rights you have.
1. Who we are
This privacy statement is from Veentjer Business Development, based at Jakob Israël de Haanstraat 10, 9745 DK Groningen, the Netherlands. We are responsible for the processing of personal data described on this page.
- Chamber of Commerce (KvK) number: 86116843
- VAT number: NL004192774B47
- Email: info@veentjeragency.com
If you have a question about your data or about this statement, you can always email us. We reply within a reasonable time.
2. What data we process
We only process data that you give us yourself or that is needed to make the website work properly. Specifically:
- Contact details you enter in our contact form or send us by email: your name, email address, phone number (if you provide it) and the content of your message.
- Information about your business that you share during an enquiry or project, such as your company name and the service you are interested in.
- Technical data that is recorded automatically when you visit our website, such as your IP address, browser type and the pages you view. This data is only used for statistics and advertising if you give consent through the cookie notice.
3. Why and on what basis
We only use your data for the purposes you left it for. The law requires a legal basis per purpose. These are set out below:
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to your enquiry or message | Name, email, phone, message | Performance of a contract or your consent |
| Carrying out a project or collaboration | Contact and business details | Performance of a contract |
| Invoicing and administration | Name, address, business details | Legal obligation |
| Website usage statistics | Technical data via analytics | Consent (cookie notice) |
| Advertising and measuring it | Technical data via advertising pixels | Consent (cookie notice) |
4. Businesses we contact
Besides visitors to our website, we also reach out to businesses ourselves with an offer for web design and online visibility. Below we explain how we handle data when we do.
Who we contact. We only contact legal entities (such as a private or public limited company, foundation or cooperative) in the construction and technical sector in the Netherlands. We only email general business role addresses, such as info@ or contact@. So we do not contact personal addresses of individual employees, nor sole traders, freelancers or partnerships.
What data we process. For each business we record a limited set of business details:
- Company name and legal form
- General business email address
- Website URL and phone number
- Business address and city
- An automated assessment of the company website, with a score and notes on possible improvements
Where the data comes from. We collect this data from public sources, namely Google Maps and the company websites themselves. So we do not receive it directly from the data subject.
Purpose and legal basis. We use this data for direct marketing, that is, approaching business prospects with our offer. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). We have made a balancing of interests. Because we only contact legal entities at general role addresses, and not personal addresses, the interests and privacy of the recipient are only minimally affected. Our interest in finding new clients reasonably outweighs this.
Who processes the data. For sending and receiving email we use email service providers, namely Google (Gmail) and the mail hosting of Vimexx and zxcs. To draft the messages we use an AI service from Anthropic, based in the United States. This may involve a transfer of data outside the European Economic Area. That takes place on the basis of appropriate safeguards, such as the EU Standard Contractual Clauses.
How long we keep it. The personal data in our working files is anonymised or deleted after thirty days. For opt-outs and undeliverable addresses we only keep an encrypted (hashed) reference, so we do not contact those addresses again. That reference does not contain a readable email address.
Our message sequence. An outreach consists of a first message and then at most two follow-up messages, after around four and nine days. The sequence stops immediately once someone replies, opts out, or once a message turns out to be undeliverable.
Opting out and your rights. If you no longer wish to receive messages, you can opt out directly by replying to a message with the word “stop”, or via the unsubscribe link in the email. We then remove the address from our list for good. You also have the right to access, rectification, erasure, restriction and portability of your data, and the right to object to this processing (Article 21 GDPR). If you disagree with something, you can also file a complaint with the Dutch Data Protection Authority.
7. How long we keep data
We do not keep your data longer than needed for the purposes above:
- Enquiries that do not lead to a collaboration are kept for up to two years after the last contact.
- Data around a project is kept for the duration of the collaboration and as long as necessary afterwards.
- Invoices and administration are kept for seven years, because Dutch tax law requires this.
8. Security
We take appropriate technical and organisational measures to protect your data against loss or unauthorised access, such as a secure connection (https) and access limited to the people who genuinely need it. If you notice something is not right, please let us know.
9. Your rights
Under privacy law you have a number of rights. You can ask us to:
- Access the data we hold about you.
- Correct data that is inaccurate.
- Delete your data.
- Restrict the use of your data.
- Transfer your data to you or another party.
- Object to a particular processing activity.
- Withdraw your consent, for example for cookies. You can do this at any time, without affecting what happened before.
To exercise these rights, email us at info@veentjeragency.com. We respond as soon as possible and within one month at the latest. To make sure the request comes from you, we may ask you to identify yourself.
10. Filing a complaint
If you disagree with how we handle your data, we would prefer to hear it from you first so we can resolve it. You also always have the right to file a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.
11. Changes
We may update this privacy statement, for example when we start using a new tool or when the law changes. The current version is always on this page. For important changes we will let you know where possible.