privacy statement

Special category data

I do not collect special category data.

Personal data of persons under 16

I have no intention of processing personal data of persons under 16. However, I cannot verify whether visitors to my websites and servers are over 16. If you believe I have collected personal data of a minor without parental or guardian consent, please contact info@bent-e.nl and I will delete that information. Where data of persons under 16 is collected, this will always be done with consent of their parent or guardian.

When do I process your personal data?

To help you when you have questions

I’m happy to help if you run into something or have a question. You can call, email, or fill in a form on the website. It’s also possible that I receive your data via third parties in connection with my services. To help you further, I store some of your data so I know who you are and can pick up where we left off in future contact.

If you have questions for me, I store:

• Name
• Email address
• Your message

Legal basis: legitimate interest.

To prepare and send you quotes

Before I start working for you, I can send you a quote. For this I store:

• Chamber of Commerce number
• Name and address details
• Email address
• Phone number
• Company name

Legal basis: legitimate interest.

To perform a contract and to schedule appointments via TidyCal

When you take services with me, you want to be helped well and receive what you’ve requested. I store the following data to perform a contract:

• Name and address details
• Email address
• Phone number
• Company name
• Chamber of Commerce number

Legal basis: performance of a contract.

To invoice and collect payment

The services you take must also be paid for. If you don’t, I start a collection process. For invoicing and collection, I store:

• Name and address details of contact person
• Email address
• Phone number
• Company name
• Chamber of Commerce number
• VAT identification number

Legal basis: legal obligation.

To keep you informed about changes in my services

When I make changes to my services, terms and conditions, privacy statement, or other important matters, I want to inform you. If you agree, I use the following data to add you to my newsletter system:

• Name
• Email address

Legal basis: performance of a contract.

To send you my newsletters

If you’ve indicated you want to receive my newsletter, I store:

• Name
• Email address

Legal basis: consent.

Sharing with partners

I work with various suppliers and partners to deliver my services.

These suppliers and partners include parties that:

• Send my newsletters and run email automations (MailerLite)
• Run my e-commerce (SureCart)
• Process my payments and invoicing (Moneybird)
• Handle my bookkeeping (Yvonne Oosterveen)
• Collect form and quiz responses (Tally)
• Store and organize my data (Airtable)
• Connect my tools and automate data flows (OttoKit, Zapier, Make)
• Provide my digital calendar and scheduling (TidyCal, Google Calendar)
• Provide my web hosting (Vimexx)
• Provide site analytics (Matomo)
• Host my online courses (Teachery)
• Embed live data on the website (BlockBuilder)
• Manage cookie consent (SureCookie)
• Support accessibility preferences (AccessiYes)
• Help with my work and project management (Notion, Tiimoo)
• Help with content drafting, summarization, and analysis (Claude, Littlebird)

I have data processing agreements and/or confidentiality declarations in place with sub-processors to safeguard your data. I only work with partners who can comply with the GDPR.

Some of my partners are located outside the European Economic Area (the countries within the European Union plus Liechtenstein, Norway, and Iceland). Your data may be processed in the United States and/or other countries where these companies have cloud storage, servers, or backups. With these partners, I have taken appropriate measures, contractually agreed via a Data Processing Agreement / Data Processing Addendum. The stricter GDPR has often already been signed and in effect by most of them. In this way I ensure your data is properly protected.

Sharing with third parties

In principle, I do not share or sell your data with persons or organizations outside Bent-e, except with partners as described above. I may also be required to share your data based on a legal obligation.

Security of your data

Bent-e has taken appropriate technical and organizational security measures to protect your personal data against misuse, unlawful or unauthorized use, and loss.

All parties that process your data on my behalf (sub-processors) or who can access it (such as employees or contractors) sign a data processing agreement or confidentiality declaration.

How long is your data kept?

For different data flows, I apply different retention periods. You always have the right to request deletion of your data — see the “Your rights” section.

Personal data: name, address, phone number, and email are deleted 2 years after our last contact.

Email: email older than 2 years is deleted, unless still relevant for performing a contract or resolving a dispute.

Invoices and quotes: invoices and quotes are deleted after the legal retention period of 7 years. Your data remains in my invoicing system until then.

Newsletter: you can remove your data from my newsletter system yourself at any time.

Your rights

You have the right to access, correct, and delete your personal data. You also have the right to withdraw your consent for data processing or to object to the processing of your personal data by Bent-e. You also have the right to data portability.

You can send a request for access, correction, deletion, data portability, withdrawal of consent, or objection to the processing of your personal data to info@bent-e.nl.

To verify that the request has been made by you, I ask you to send a copy of your identity document with the request. In this copy, please black out your passport photo, MRZ (machine readable zone — the line of numbers at the bottom of the passport), passport number, and BSN. This is to protect your privacy.

If your request relates to a cookie, please include that as well. I will respond as quickly as possible, and within four weeks at the latest.

Bent-e also wants to remind you that you have the right to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Reporting a data breach

If despite all precautions a data breach occurs, I follow the data breach reporting obligation and report the breach — where necessary — to the Dutch Data Protection Authority within 72 hours of detection. If you discover a data breach, please share it with me as soon as possible, and in any case within 24 hours of detection, by emailing info@bent-e.nl. I can then take immediate action.

Liability

This privacy statement only applies to the personal data Bent-e processes for the purposes described in this agreement. Bent-e accepts no responsibility or liability for (the operation and/or content of) websites or services of third parties.

Changes to this statement

The content of this privacy statement may be amended at any time by Bent-e to respond to new developments in laws and regulations or changes within my business. You can subscribe to my newsletter, where I will inform you of any changes.

In any case, I recommend that you consult my privacy statement regularly to stay informed of my privacy policy. By continuing to use Bent-e’s services after changes, you agree to those changes.

Contact

If you have any further questions or comments, you can contact me by email at info@bent-e.nl or by post:

Bent-e is registered with the Dutch Chamber of Commerce under number 54596467.

---

Version: May 2026