Draft: this text has not been reviewed yet and is not yet in force.
Privacy policy
This policy explains which personal data Kwitaro Business Solutions B.V. ("we") processes when you visit wemovedata.eu or use the wemovedata portal and its modules, why, and what your rights are. For data our customers process with wemovedata, the customer decides and we act as their processor under the data processing agreement.
Last updated: [date]
Who is responsible
Kwitaro Business Solutions B.V., [address], KvK [number]. Questions and requests: privacy@wemovedata.eu.
What we process and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Website forms: name, company, e-mail address, message | Answer your question or request | Legitimate interest; pre-contractual steps | [e.g. 12 months after the last contact] |
| Account: e-mail address, password (hashed), two-step sign-in, sign-in sessions | Provide and secure your account | Contract | While the account exists |
| Billing details: company, address, VAT ID, invoice e-mail; invoices and payments | Invoicing, VAT, payment collection | Contract; legal obligation (7 years' retention for tax records) | 7 years |
| Usage: invocations, computing time, logs | Run the service, show you your usage, bill usage, find faults | Contract; legitimate interest | Logs 7 or 30 days depending on the plan; usage figures as long as invoices |
| Security data: IP addresses, audit log of account changes | Prevent abuse and fraud, investigate incidents | Legitimate interest | [e.g. 12 months] |
| Notification recipients: e-mail addresses our customers add | Send the notifications the customer set up, after the recipient confirms | On behalf of the customer (processor) | Until the customer removes them |
Cookies and local storage
wemovedata.eu sets no cookies and uses no analytics or tracking. Fonts are served from our own site.
The portal uses only strictly necessary cookies: a sign-in session cookie and a protection against cross-site requests. It keeps a few preferences in your browser's local storage (a collapsed menu, recently opened items). No consent is needed for these, and nothing is used for advertising.
At sign-up the portal uses Cloudflare Turnstile to keep out automated sign-ups; Cloudflare processes technical data of your browser for this.
Who receives data
We do not sell personal data. We use these service providers (processors), bound by agreements:
| Provider | For | Location |
|---|---|---|
| [Hostinger / Scaleway] | Servers running the platform | EU |
| Scaleway SAS | Sending e-mail; backups | France |
| Hostinger | Website hosting; mailboxes | EU |
| Mollie B.V. | Payments | Netherlands |
| Cloudflare, Inc. | DNS; CAPTCHA at sign-up (Turnstile) | United States (EU–US Data Privacy Framework, standard contractual clauses) |
| European Commission (VIES) | Checking VAT IDs | EU |
If you sign in with GitHub, GitHub receives the sign-in request under its own privacy terms.
Security
See Security for how we protect the platform and your data.
Your rights
You can ask to see, correct or delete your personal data, to restrict or object to processing, and to receive your data in a usable format. Mail privacy@wemovedata.eu; we answer within a month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We publish changes to this policy here and tell account holders about important ones by e-mail.