Privacy statement
1. Who processes your data
KVK Uittreksel Aanvragen is a trade name of Ecrivus International V.O.F., Vliegveldweg 106, 6199 AD Maastricht-Airport, Netherlands, registered in the Dutch Business Register under number 14093828. Ecrivus International V.O.F. is the controller for the data processed through kvkuittrekselaanvragen.nl.
For questions about your data you can reach us at info@kvkuittrekselaanvragen.nl.
We have no data protection officer. We are not required to have one: we are not a public authority and we do not monitor people systematically on a large scale.
2. What data we process
From you as the person ordering
- Your email address. We need it, because the Dutch Chamber of Commerce sends the certified extract straight to that address.
- Your postal address, only if you order a paper extract: name, company name if applicable, address, postcode, town and country.
- Your name and address or your Business Register number, if a full invoice is required.
- The moment and the IP address at which you requested immediate delivery and waived your right of withdrawal.
- The content of your email or telephone contact with us.
About the company you look up
- The data that is public in the Business Register: name, address, Business Register number and branch number. We retrieve it from the Chamber of Commerce. Where the company is a sole trader, that data is also personal data.
About your order
- Order number, chosen products, quantity, language of the document, amounts, the delivery status and the reference number the Chamber of Commerce assigns to the order.
- The transaction number of your payment at Mollie, the payment method and the payment status. Your payment details themselves, such as your account number or card number, never reach us. You enter those at Mollie.
Technical
- Server logs with IP address, time, page requested and browser type.
- If the automated ordering fails, we take a screenshot of the ordering screen. Your email address and the company details may appear on it.
3. Why we use that data, and on what basis
| Purpose | Data | Basis |
|---|---|---|
| Carrying out your order and placing it with the Chamber of Commerce | email address, postal address, company data, order lines | performance of the contract, Art. 6(1)(b) GDPR |
| Keeping you informed and showing the status page | email address, order status | performance of the contract |
| Handling your question or complaint | contact details, order details | performance of the contract |
| Invoicing and keeping our accounts | name or Business Register number, address, amounts | legal obligation, Art. 6(1)(c) GDPR |
| Recording that you requested immediate delivery | time, IP address | legal obligation and evidence, Art. 6(1)(c) and (f) GDPR |
| Protecting the site against misuse and automated traffic | IP address, technical characteristics, Turnstile check | legitimate interest, Art. 6(1)(f) GDPR |
| Detecting and resolving faults | server logs, screenshots on failure | legitimate interest |
We do not use your data to profile you and we take no decisions about you based solely on automated processing.
We send you no advertising by email unless you asked for it. You receive from us only messages that belong to your order: the confirmation, the invoice, what is happening with your order, and the answer to your question.
4. Who we share your data with
The Chamber of Commerce. For delivery we pass on your email address, and with a paper extract your postal address. For that processing the Chamber of Commerce is its own controller and not our processor. Without this transfer the Chamber of Commerce cannot deliver to you.
Mollie B.V. (Amsterdam) handles the payment. Mollie is a controller for the payment data itself, because a payment service provider has its own legal obligations.
Processors working for us
| Party | For what | Where the data is held |
|---|---|---|
| Supabase | database and storage of orders and documents | Frankfurt, Germany |
| Vercel | running the website and the ordering environment | Frankfurt region |
| Resend | sending our email | European Union |
| Microsoft 365 | our mailbox and the email you send us | European Union |
| Moneybird | invoices and accounts | Netherlands |
| Cloudflare | security check against automated traffic (Turnstile) | worldwide network |
With each of these parties we have concluded a processing agreement setting out what they may do with your data.
We also pass on data where the law requires us to, for example to the Dutch tax authorities.
We do not sell your data and we do not rent it out.
5. Transfers outside the European Economic Area
Your data is stored and processed within the European Economic Area. Several of our processors belong to groups with establishments outside that area, which means access from outside cannot be fully ruled out — during maintenance, for example, or while resolving a fault.
For those cases the transfer rests on the standard contractual clauses adopted by the European Commission, included in the processing agreement with that party, and on the additional measures agreed there.
If you would like to see exactly what has been agreed, request it at info@kvkuittrekselaanvragen.nl.
6. How long we keep your data
- Invoice and accounting data: seven years. This is the tax retention obligation under Article 52 of the Dutch State Taxes Act.
- Order data: traceable for 24 months. After that we make it untraceable: your email address is replaced by an encrypted representation and the IP address is erased. What remains is the order without you in it.
- The link to your status page: 90 days. After that the link expires.
- Server logs: 30 days.
- Screenshots of a failed order: 90 days. They exist to resolve one fault and are removed afterwards.
- Email in our mailbox: 24 months. If a complaint or dispute is running, we keep that correspondence until the matter is settled.
7. Your rights
You have the right to:
- see what data we hold about you;
- have data corrected if it is wrong;
- have data erased, in so far as we are not legally required to keep it;
- have the processing restricted;
- object to processing based on our legitimate interest;
- receive your data in a common file format or have it transferred.
Send your request to info@kvkuittrekselaanvragen.nl. We respond within one month. To prevent us giving data to the wrong person, we may ask you for your order number or for the email address you ordered with.
If the extract contains incorrect data about your company, we cannot change it. That data comes from the Business Register and you change it at the Chamber of Commerce.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, Postbus 93374, 2509 AJ The Hague, the Netherlands.
8. How we protect your data
- All traffic with our site is encrypted over https.
- The link to your status page is signed and has a limited life. Our database holds only an encrypted representation of that link, not the link itself.
- There is no customer account and no password, so there is no password to steal from us.
- The computer that places your order with the Chamber of Commerce has its own limited access to the database and cannot reach everything.
- Only the staff who handle orders have access to orders.
9. Cookies
We use no tracking cookies and therefore show no consent banner. What is stored on your device is set out in our cookie policy.
10. Changes
We adjust this statement when our service or our way of working changes. The version in force is always published on kvkuittrekselaanvragen.nl.
Version of 7 September 2026.