This notice explains what personal data Zandbak processes, why, and the rights you have. It applies to the account, invoicing and appointment-booking features of this service.
The service is operated by an individual operator (the data controller). All data is stored on the operator's own infrastructure located in the Netherlands (EEA).
Account details (email address); customer and invoice details (name, contact details, address, KvK and VAT numbers); appointment details and any notes you provide; for public bookings, the guest name, email address and phone number you enter; and technical security data such as your IP address, for abuse prevention and audit logging.
To create and manage your account, to schedule and confirm appointments, to issue and administer invoices, to send transactional email (activation, password reset, reminders, booking confirmations), and to keep the service secure.
Performance of a contract (accounts, bookings, invoicing); compliance with a legal obligation (retaining invoices under Dutch tax law); and our legitimate interest in keeping the service secure (audit and abuse-prevention logging).
Invoices and related fiscal records are retained for the statutory period (currently seven years). Security and audit logs are retained for a limited period. Unverified public-booking data is short-lived and removed automatically. Delivered email content is redacted once sent.
We do not sell your data or use third-party advertising or analytics trackers. A small number of technical processors support the service: a DNS provider and a certificate authority (domain data only), and — where configured — an email delivery relay that receives the messages we send you. Any such relay is located in the EEA and covered by a data-processing agreement.
You have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, and to data portability, subject to legal limits (for example, invoices we must retain for tax purposes cannot be erased).
To make a request, contact us at the address below. We may need to verify your identity, and we will respond within the period required by law (normally one month).
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
For any privacy question or request, contact: privacy@zandbak.local
We may update this notice; the current version is always available on this page.