Privacy policy
Last updated: April 2026
This privacy policy explains what data we collect through fin-wijzer.nl, why we collect it, and how we handle it. We keep things clear and honest — no fine print.
Who are we?
Fin-Wijzer is a sole proprietorship (eenmanszaak) under Dutch law, owned by Bastiaan Both. We are building a tax information platform that answers tax questions based on official legal sources.
- Chamber of Commerce (KvK) number: 96224096
- Website: fin-wijzer.nl
- Email: info@fin-wijzer.nl
Fin-Wijzer is the controller responsible for the processing of personal data as described in this privacy policy, within the meaning of the General Data Protection Regulation (GDPR).
What data do we collect?
1. Website visits (analytics)
We use Vercel Web Analytics and Speed Insights to understand how our website is used. This includes page views, unique visitors, referring websites, country, device, browser, and page load speed.
This service operates without cookies. Your IP address is hashed (made unrecognisable) and then discarded. No personal data is stored.
Legal basis: legitimate interest (Article 6(1)(f) GDPR). We want to improve our website without compromising your privacy.
2. Language preference (cookie)
We set one functional cookie:
| Cookie | Purpose | Retention |
|---|---|---|
| NEXT_LOCALE | Remembers your language preference (nl/en). This cookie does not store location data. | Browser session |
This cookie is necessary for the website to function properly. No consent is required.
3. Waitlist / sign-up form
When you sign up for our waitlist, we ask for:
- Email address, to keep you informed about Fin-Wijzer's progress and launch
- Your question or comment (optional, free text), to understand what you're looking for
We use double opt-in: after signing up, you will receive a confirmation email. Your sign-up only becomes active once you click the confirmation link. Sign-ups that are not confirmed within 14 days are automatically deleted.
Legal basis: consent (Article 6(1)(a) GDPR)
Unsubscribe: you can unsubscribe at any time using the link in our emails or by contacting us at info@fin-wijzer.nl.
4. Contact form
When you contact us through the contact form, we process:
- Name and email address, to respond to your inquiry
- Subject (dropdown) and message, to handle your question. Your message may contain personal data if you choose to include it.
Optionally, you can indicate that you'd like to receive updates and news from Fin-Wijzer.
Legal basis: necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR). You submit a contact request and we need your data to handle that request.
Who processes your data?
We do not sell your data or share it with third parties for commercial purposes. We do use the following service providers (processors) who process data on our behalf:
| Service | What they do | Location |
|---|---|---|
| Supabase | Database (PostgreSQL) | EU (Frankfurt) |
| Resend | Email delivery | US, with Data Processing Agreement |
| Vercel | Hosting and analytics | US, analytics without personal data |
| Upstash | Rate limiting (spam protection) | EU |
Data Processing Agreements (DPAs) have been concluded with all processors. For transfers outside the EU, Standard Contractual Clauses (SCCs) apply.
How long do we retain your data?
| Data | Retention period |
|---|---|
| Waitlist data | Until 12 months after product launch or a maximum of 24 months after sign-up (whichever comes first), or until you unsubscribe |
| Unconfirmed sign-ups | Automatically deleted within 14 days |
| Contact form | Up to 12 months after last contact |
| Analytics | No personal data, not applicable |
Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), secured access to systems, and spam protection. We only work with processors that meet established security standards.
Your rights
Under the GDPR, you have the following rights:
- Access: you can request to see what data we hold about you.
- Rectification: if your data is incorrect, we will correct it.
- Erasure: you can request that your data be deleted.
- Restriction: you can request that we temporarily restrict processing.
- Objection: you can object to processing based on legitimate interest.
- Data portability: you can request to receive your data in a standard format.
Send your request to info@fin-wijzer.nl. We will respond within 30 days. For complex requests, we may extend this period once by 60 days. If so, we will inform you within the initial 30-day period, with an explanation.
For data portability requests, we will provide your data in a structured, commonly used, and machine-readable format (such as CSV or JSON).
Filing a complaint
If you disagree with how we process your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Cookies and tracking
We do not use tracking cookies or advertising cookies. As a result, no cookie banner is required. The only cookie we use (NEXT_LOCALE) is functional and falls outside consent requirements.
Children
Fin-Wijzer is not directed at children under the age of 16. We do not knowingly collect data from minors. If you believe a child under 16 has provided us with data, please contact us so we can delete it.
Profiling and automated decision-making
We do not engage in profiling or automated decision-making that produces legal effects concerning you.
Changes
We may update this privacy policy. In the event of material changes, we will notify you at least 14 days in advance via the website. The date at the top indicates when the policy was last updated.
Contact
Questions about this privacy policy? Get in touch:
- Email: info@fin-wijzer.nl
- Website: fin-wijzer.nl