Privacy Policy
This policy explains how DutchRegist handles the personal data of people who visit this site, send us an enquiry or become our clients.
Who is responsible for your data
The controller of your personal data is the company named in the contact block below. Write to info@company-registration-netherlands.com with any question about this policy or your data.
- Company
- DutchRegist B.V.
- Address
- Herengracht 123, 1015 BG Amsterdam, Netherlands
The General Data Protection Regulation (EU) 2016/679 (GDPR) applies directly, read with the Dutch Uitvoeringswet Algemene verordening gegevensbescherming (the GDPR Implementation Act). The supervisory authority in the Netherlands is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
What we collect, why and on what legal basis
| Where it happens | What we receive | Why | Legal basis (GDPR art. 6(1)) |
|---|---|---|---|
| Contact form and the enquiry form on the home page | Your name, email, phone if you give it, the topic you choose, your message, and the reference of a ready-made company if you asked about one | To answer your enquiry | Steps you ask for before a contract (b) |
| Onboarding form | Your contact details, the company you plan, the services you want, your timing, and your confirmation on the lawful origin of funds | To prepare the work you ask us to do | Steps before a contract, then the contract (b); if you take our registered office service, the client due diligence the Wwft requires of us (c) |
| Payment page | Invoice number, amount, currency, your name and email. Card and crypto details are entered on the payment provider's own page and never reach this site | To take payment of an invoice and keep the record | The contract (b); keeping payment records is a legal obligation (c) |
| Context sent with every form | The technical details listed in the next section | To answer you and to tell enquiries from spam | Legitimate interest (f) |
| Spam and abuse protection on every form | A Cloudflare Turnstile check, your IP address as a short-lived rate-limit key, and a hidden field that only automated senders fill in | To keep automated spam out | Legitimate interest (f) |
| Analytics cookies, only after you accept | Google Analytics 4 and Microsoft Clarity identifiers, the pages you view, clicks and scrolling | To see how the site is used and improve it | Consent (a), which you can withdraw at any time through the cookie banner; see the Cookie Policy |
| Visit statistics without cookies | The page you view, the page you came from and your browser's technical details, sent to Ahrefs Web Analytics, Cloudflare Web Analytics and, before you choose, Google's tag without cookies; nothing is stored on your device | To count visits and see which pages are read | Legitimate interest (f) |
| Map on the contact page | A request to Google Maps, sent only when you accept or click the map | To show where our office is | Consent (a) |
| Hosting and delivery | IP address, browser type and request time in Cloudflare's logs | To deliver the site and keep it secure | Legitimate interest (f) |
We do not profile you, make automated decisions about you, show advertising or send newsletters, and we never sell your data.
Context sent with every form
Every form on this site (contact, home page enquiry, onboarding, payment and a ready-made company request) attaches technical context to your message:
- your IP address;
- the city-level location derived from your IP address (the network's location, not your device's);
- your internet provider or network operator;
- your browser and operating system (user agent);
- your browser language preferences;
- the referrer: the page or search that led here;
- the path through the site: the pages viewed before you sent the message, and your visit number;
- the time spent on the page, and your local time;
- your device: screen and window size (viewport);
- whether cookies are enabled, whether you accepted analytics, and the analytics id where you did.
We use this context to answer your enquiry and to tell real enquiries from spam, on the basis of our legitimate interest in both (GDPR art. 6(1)(f)). We keep it with the enquiry email it arrived with, for as long as we keep that email, and delete it with the email. You can ask us to erase both at any time.
The contents of your cookies are never sent. Before you accept analytics, nothing is stored on your device for this purpose and the path through the site is only the page you send the form from. This feature sets no cookie.
Who receives your data and where it is processed
| Recipient | What it does for us | Its privacy notice |
|---|---|---|
| Cloudflare | Hosts the site, counts page loads without cookies (Cloudflare Web Analytics), runs the Turnstile spam check, routes email sent to our address to our team, and holds the rate-limit counter and, where used, a short-lived copy of onboarding enquiries | Cloudflare privacy policy |
| Resend | Delivers the messages our forms send to info@company-registration-netherlands.com | Resend privacy policy |
| Google Analytics 4: a visit signal without cookies on every page, and statistics with cookies only after your consent; the map on the contact page only on a click | Google privacy policy | |
| Microsoft | Clarity analytics, only after your consent, including recordings of clicks and scrolling on our pages | Microsoft privacy statement |
| Ahrefs | Cookie-less visit statistics (Ahrefs Web Analytics) on every page | Ahrefs privacy policy |
| Stripe | Card payments on the payment page | Stripe privacy policy |
| NOWPayments | Crypto payments on the payment page | NOWPayments privacy policy |
Some of these companies process data outside the European Economic Area. Such transfers rely on an EU adequacy decision or on standard contractual clauses, as Chapter V of the GDPR (arts. 44 to 49) requires. We give personal data to a public authority only where a law obliges us to.
How long we keep it
| Record | How long | Why |
|---|---|---|
| Enquiry emails and the context attached to them | While we need them to answer and follow up your enquiry; if you become a client, they join your client record | To answer you |
| The copy of an onboarding enquiry in Cloudflare's store | Expires automatically, and never outlasts the enquiry email | A safeguard if an email fails to arrive |
| The rate-limit counter | Expires automatically when its time window closes | Abuse control |
| Payment and invoice records | For the period Dutch bookkeeping and tax law requires (art. 2:10 Dutch Civil Code, art. 52 General State Taxes Act) | Legal obligation |
| Analytics data (Google Analytics 4, Clarity, Ahrefs Web Analytics) | Until the retention period set in each tool ends | Measuring how the site is used |
| Client records, once you become a client | For the contract, then as long as bookkeeping law and, for the registered office service, the Wwft require | Contract and legal obligations |
When a period ends, we delete the record. You can ask us to erase your data sooner, and we will unless a law requires us to keep it.
Your rights, complaints and changes to this policy
Under the GDPR you have the right to:
- see the personal data we hold about you (art. 15);
- have inaccurate data corrected (art. 16);
- have your data erased (art. 17);
- restrict how we use it (art. 18);
- receive it in a portable format (art. 20);
- object to processing, including processing based on legitimate interest (art. 21);
- withdraw consent at any time, through the cookie banner or by email (art. 7(3)).
To use any of these rights, email info@company-registration-netherlands.com. We may ask you to confirm your identity first, and we answer within one month (GDPR art. 12(3)).
You may complain to the Autoriteit Persoonsgegevens or to the supervisory authority of the EU country where you live or work (GDPR art. 77). When we change this policy, we publish the new version on this page with a new "Last updated" date. Our Terms of Service and Cookie Policy complete it.