Skip to content

Privacy policy

In short

Aanpakkers XL VOF handles your personal data with care. In this privacy policy you can read which data we use, why we do so, how long we keep it and what rights you have. We comply with the Algemene verordening gegevensbescherming (AVG, the GDPR as applied in the Netherlands). First, the main points:

  • We are Aanpakkers XL VOF in Schijndel. Send questions about privacy to info@aanpakkersxl.nl.
  • Our website does not place cookies on visitors’ devices. We do not use advertising and we do not track you. We only measure, anonymously, how fast the website loads.
  • Applying through the website? Then we delete your application no later than 4 weeks after the procedure. The system automatically deletes every application 8 weeks after receipt, unless you come to work for us.
  • Going to work through us? Then the law requires us to check your identity, keep a copy of your identity document and use your burgerservicenummer (BSN, your Dutch citizen service number) for your pay.
  • Are you ill? Then we never record what is wrong with you. Only the company doctor knows that.
  • We do not sell your data. Computers do not make decisions about you; people do.
  • You may view your data, have it corrected or have it deleted. You can always object. If we cannot resolve things together, you can complain to the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).

Who are we?

Aanpakkers XL VOF is responsible for the use of your personal data. In the AVG this is called the controller. So we decide why and how we use your data.

Aanpakkers XL VOF, De Heikampen 7, 5482 ZR Schijndel, the Netherlands. E-mail: info@aanpakkersxl.nl. Website: www.aanpakkersxl.nl.

We place temporary workers and crews with clients (temporary employment and secondment). We also carry out work ourselves as a subcontractor: on the railway (safety fencing, LTAE signs and track maintenance), in green spaces (landscape maintenance and construction) and on the water (watercourse surveys and inspections for water boards, partly from a boat). Many of our staff come from Poland. We also work with self-employed contractors (zzp’ers).

We have not appointed a data protection officer (functionaris gegevensbescherming, FG). Do you have a question about privacy? Then e-mail info@aanpakkersxl.nl.

Who is this privacy policy for?

This privacy policy is for everyone whose personal data we use:

  • anyone who visits our website, or e-mails, WhatsApps or calls us
  • applicants who respond to a vacancy through the website
  • candidates who register with us, and temporary workers and other staff who work through us
  • self-employed contractors we work with
  • contact persons at clients, main contractors, suppliers and other business relations

Above all, read the part that applies to you. The parts from “Data we receive from others” onwards apply to everyone.

Everyone who visits our website or contacts us

Server logs and security

When you visit our website, your browser automatically sends technical data along. Our hosting provider Vercel records this in log files.

  • Which data: your IP address, your browser and device, the page you request, the time and whether the request succeeded.
  • Why: to show you the website, to trace errors and to stop attacks and misuse.
  • Legal basis: our legitimate interest in a secure website that works properly (Article 6(1)(f) AVG).
  • How long: our server logs are automatically deleted after 1 day.

Vercel also uses some technical data, such as IP addresses, itself to secure its network. Vercel does so as an independent controller, under its own privacy policy at vercel.com/legal/privacy-policy. Vercel decides for itself how long it keeps that data.

Speed measurement (Vercel Speed Insights)

We measure how fast our pages load. For this we use Speed Insights from Vercel. A small script in your browser measures the loading speed and sends that measurement to Vercel.

  • Which data: the page, the measured speed, the type of network connection, your browser, the type of device, the operating system and the country. Vercel does not store an IP address with the measurement and does not use cookies. A measurement therefore cannot be linked to you.
  • Why: to see which pages are slow and make them faster.
  • Legal basis: the measurements themselves are anonymous. Your IP address is needed very briefly to send a measurement. We use it on the basis of our legitimate interest in a fast website (Article 6(1)(f) AVG).
  • How long: your IP address is not stored with the measurement. The anonymous measurements are not personal data.

We do not ask for consent for this measurement. The Telecommunicatiewet (Dutch Telecommunications Act) allows such a measurement without consent if it only measures the quality of the website and has no or little impact on your privacy (Article 11.7a(3)(b) Telecommunicatiewet).

Cookies

Our website does not place cookies on visitors’ devices. We do not use visitor statistics that track you, advertising, social media buttons or videos, or tracking pixels. That is why you see no cookie banner on our website.

Only our own staff receive a login cookie when they log in to the admin area of the website. That cookie is needed to stay logged in.

Is the website under attack? Then Vercel may briefly check whether you are using a real browser. Your browser then keeps a security session for no more than 1 hour. It is used only for security.

If you e-mail, WhatsApp or call us

Using the buttons on the website, you can e-mail us, send us a WhatsApp message or call us.

  • Which data: your name, your e-mail address or phone number, what you write or tell us, and the time.
  • Why: to answer your question and to stay in touch with you.
  • Legal basis: if your question concerns an application, your work or an assignment, it is necessary for a (future) contract with you (Article 6(1)(b) AVG). Otherwise it is our legitimate interest in answering questions (Article 6(1)(f) AVG).
  • How long: if your message belongs to an application, your work or an assignment, we keep it for as long as the rest of that file. We delete other messages no later than 1 year after we have dealt with your question.

WhatsApp is a service of Meta. If you send us a WhatsApp message, WhatsApp also uses data itself, under WhatsApp’s privacy policy. Do not send us a copy of your identity document via WhatsApp. Never send us medical information, not even by e-mail.

Applicants

Every vacancy page has an application form. Below you can read what happens to what you fill in.

Which data

You fill in the following yourself:

  • your name, phone number and e-mail address (required)
  • a motivation statement (optional)
  • your CV as a PDF or .docx, maximum 4 MB (optional)

We also store:

  • which vacancy you are applying for
  • which language you were using the website in
  • that you ticked “I have read the privacy policy”
  • an encrypted code that we make from your IP address with a secret key (a hash). We do not store your IP address itself.

The form also has a hidden field. If a computer program (a bot) fills in that field, we know it is spam.

Only put in your CV what is needed for the vacancy. Leave out your BSN, your passport photo, information about your health, your religion and a copy of your identity document. If we receive such data anyway, we do not use it.

Why and on what basis

  • Handling your application: we read your data, contact you and see whether you are a good fit for the vacancy. We do this because you ask us to handle your application (Article 6(1)(b) AVG: steps taken at your request before there is a contract).
  • Preventing spam and misuse: with the encrypted code of your IP address, we make sure that no one can apply more than 5 times an hour. That is our legitimate interest in a form that is not misused (Article 6(1)(f) AVG).

We do not ask for your consent for your application. By ticking the box, you only let us know that you have read this privacy policy.

Who sees your application

Your application goes into our database. Your CV is kept in separate, secured storage. Only our staff who are logged in to the admin area of the website can open your application and CV. Brevo sends us an e-mail with your application at info@aanpakkersxl.nl, so that we see it quickly.

The database and the storage are in Frankfurt (Germany). You can read more about these service providers under “Who receives your data?” and “Data outside the European Economic Area”.

How long we keep your application

  • We delete your application and CV no later than 4 weeks after the application procedure has ended.
  • The system automatically deletes every application, with its CV and the encrypted code of your IP address, 8 weeks after receipt.
  • We delete the e-mail with your application from our mailbox at the same times.
  • Do you come to work for us? Then your data goes into your personnel file. The retention periods for staff then apply.

Do you have to provide this data?

Applying is voluntary. But without your name, phone number and e-mail address we cannot handle your application; the form will then not be sent. A motivation statement and CV are optional. If you leave them out, we will still handle your application as normal.

Candidates, temporary workers and other staff

Do you register with us to work through us, or do you already work through us? Then we use more data than for an application. Below you can read which data, per purpose.

Registering as a candidate

  • Which data: your contact details, your CV, work experience, education, certificates, languages and when you are available to work.
  • Why: to find work that suits you and to introduce you to clients.
  • Legal basis: you ask us to find work for you (Article 6(1)(b) AVG).
  • How long: for as long as you want to stay registered. After 1 year without contact, we ask whether you want to stay registered. If you do not, or we do not hear from you, we delete your data. We never keep it for longer than 2 years after the last contact.

When you register, we do not ask for your BSN. Nor do we ask about your health or about previous sickness absence.

You can deregister at any time. Send an e-mail to info@aanpakkersxl.nl. We will then delete your data, except what the law requires us to keep.

Checking your identity before you start work

Before we let you work or introduce you to a client, we must check your identity.

  • Which data: your passport or identity card and a copy of it.
  • Why: to establish who you are.
  • Legal basis: a legal obligation (Article 6(1)(c) AVG and Article 7c of the Wet allocatie arbeidskrachten door intermediairs, the Waadi (Placement of Personnel by Intermediaries Act)).
  • How long: if you do not join us as an employee, we destroy the copy as soon as we no longer need it, and no later than 4 weeks after we made it. If you do join us, the copy goes into your personnel file.

Personnel and payroll administration

Are you employed by us as a temporary worker or staff member? Then we are your employer and we keep personnel and payroll records.

  • Which data: your name, address, contact details, date of birth, nationality, BSN, a copy of your identity document, your bank account number, your employment contract, job, hours worked, pay, allowances, holiday entitlement, your payroll tax form (opgaaf voor de loonheffingen) and the data for your pension.
  • Why: to perform your employment contract, pay your wages, pay taxes and contributions and arrange your pension.
  • Legal basis: your employment contract (Article 6(1)(b) AVG) and legal obligations (Article 6(1)(c) AVG). Article 28 of the Wet op de loonbelasting 1964 (Wage Tax Act 1964) requires us to establish your identity and to include a copy of your identity document and your BSN in the payroll records. Article 52 of the Algemene wet inzake rijksbelastingen (AWR, the General State Taxes Act) requires us to keep those records.
  • How long: payroll data 7 years; the copy of your identity document and your payroll tax form 5 years after the end of the calendar year in which you left our employment; and the rest of your personnel file 2 years after you left our employment.

We use your BSN only for what the law allows, such as the payroll tax return to the Belastingdienst (the Dutch Tax Administration) (Article 46 of the Uitvoeringswet Algemene verordening gegevensbescherming, the UAVG (Dutch GDPR Implementation Act)).

Do you build up a pension through us? Then we pass on the data needed for this to the pension fund. That follows from your employment contract (Article 6(1)(b) AVG) and, if membership of a pension fund is compulsory, from the law (Article 6(1)(c) AVG and the Wet verplichte deelneming in een bedrijfstakpensioenfonds 2000 (Compulsory Membership of an Industry-wide Pension Fund Act 2000)). We keep this data for 7 years, just like your payroll data.

Are you allowed to work in the Netherlands?

We must check whether you are allowed to work in the Netherlands.

  • Which data: your nationality and your identity document. If you come from outside the EU, the European Economic Area (EEA) or Switzerland, also your residence document and, if needed, your work permit.
  • Why: we may only let people work who are allowed to work in the Netherlands.
  • Legal basis: a legal obligation (Article 6(1)(c) AVG, the Wet arbeid vreemdelingen (Wav, the Foreign Nationals Employment Act) and Article 28 Wet op de loonbelasting 1964).
  • How long: 5 years after the end of the calendar year in which you left our employment.

Do you come from the EU (for example from Poland), the EEA or Switzerland? Then you do not need a work permit.

Working for clients

We place you with clients (hirers) or on projects where we are a subcontractor ourselves.

  • Which data: your schedule, workplace, hours worked, allowances and arrangements about the work. Clients also pass on your hours worked to us and report accidents or incidents at work.
  • Why: to plan your work, process your hours and prepare your pay and our invoices.
  • Legal basis: your employment contract (Article 6(1)(b) AVG). For the hours records, also a legal obligation (Article 6(1)(c) AVG and Article 52 AWR).
  • How long: 7 years, because this data forms part of the payroll and financial records.

What we share with clients and main contractors

Do you work through us for a client or main contractor? Then that party receives some of your data. That party is itself responsible for what it does with your data and may use it only for the work you do there.

  • Which data: to introduce you, your name, experience, certificates and when you are available. If you start work, also your address, date of birth, BSN, nationality, the type, number and validity of your identity document, your hours worked and, if necessary, your residence document or work permit.
  • Why: the client must know who is working at its workplace and must be able to show that it complies with the law. It must check whether you are allowed to work in the Netherlands. It is also jointly liable for the wage tax on your work (hirer’s liability, inlenersaansprakelijkheid). From 1 January 2027 it must also keep a record of which temporary workers work for it.
  • Legal basis: to introduce you, Article 6(1)(b) AVG. If you start work: legal obligations (Article 6(1)(c) AVG, the Wav and, from 1 January 2027, Article 12d Waadi) and the legitimate interest of the client and of us in showing that wage tax and contributions are properly handled (Article 6(1)(f) AVG, because of the hirer’s liability in Article 34 of the Invorderingswet 1990 (Tax Collection Act 1990)).
  • How long: we keep what we have shared for as long as your payroll data (7 years). The client decides for itself, within the law, how long it keeps the data.

The client receives a copy of your identity document only if you do not come from the EU, the EEA or Switzerland (Article 15 Wav). If you come from the EU, for example from Poland, the client does not receive a copy (Article 15(3) Wav). It may, however, look at your identity document and note down the details.

Sickness and absence

If you are ill, we must continue to pay your wages or arrange a benefit, and help you return to work. For this we may record only a few details. This is what we record:

  • the phone number and address where you can be reached while you are ill
  • how long you expect to be ill
  • which work and appointments we need to take over
  • whether your illness is related to an accident at work
  • whether it concerns a road accident for which someone else may be liable
  • whether you fall under a safety-net scheme of the Ziektewet (Sickness Benefits Act), but not which one
  • what you can still do, as the company doctor reports it to us

We do not record what is wrong with you or what caused your illness. Not even if you want us to. Those medical details stay with the company doctor or our occupational health service (arbodienst). The occupational health service is itself responsible for them.

  • Why: to continue paying your wages, report your illness where required, take over your work and help you return.
  • Legal basis: legal obligations (Article 6(1)(c) AVG: the Ziektewet, the rules on pay during illness in the Burgerlijk Wetboek (Dutch Civil Code) and the Wet verbetering poortwachter (Gatekeeper Improvement Act)). For health data, the exception in Article 9(2)(b) AVG together with Article 30(1) UAVG applies.
  • How long: 2 years after you left our employment. If we are a self-insurer (eigenrisicodrager) for the Ziektewet, 5 years, because UWV (the Dutch Employee Insurance Agency) can then check this data.

Does the law require a medical examination for a job? Then we receive only the result: fit or not fit. The medical details stay with the doctor who carries out the examination.

Certificates and passes, such as VCA

For a lot of work, clients ask for certificates or passes, such as VCA.

  • Which data: the type of certificate or pass, the number, the date of issue and until when it is valid.
  • Why: to show that you can and may do the work safely, and to meet the requirements of clients and workplaces.
  • Legal basis: your registration or employment contract (Article 6(1)(b) AVG) and our legitimate interest in deploying only qualified people (Article 6(1)(f) AVG).
  • How long: for as long as you are registered or work through us. If you work through us, for 2 more years after you left our employment.

Clients receive from us only the details of the certificates and passes that they need for the work.

Verklaring Omtrent het Gedrag (VOG, certificate of conduct)

Does a client or the law require a VOG for a job? Then we ask you to apply for one and show it to us.

  • Which data: only that we have seen your VOG, and on what date. We do not keep the VOG itself and do not make a copy of it.
  • Why: to show that you have a VOG for the job.
  • Legal basis: a legal obligation if the law requires a VOG (Article 6(1)(c) AVG), and otherwise our legitimate interest and that of the client (Article 6(1)(f) AVG). For data about criminal offences, Article 10 AVG and Articles 32 and 33 UAVG also apply.
  • How long: for as long as you work through us and 2 years after that, just like the rest of your personnel file.

If the client asks, we only tell them that we have seen your VOG and on what date.

Your name or photo on our website

  • Which data: your name, job title and photo if you are shown on the website as a contact person, and photos of our work in which you can be recognised.
  • Why: to show who we are and what we do.
  • Legal basis: your consent (Article 6(1)(a) AVG). You can withdraw it at any time; we will then remove your name and photo.
  • How long: until you withdraw your consent or no longer work for us.

Do you have to provide this data?

For your registration, you decide for yourself which data you provide. The more we know, the better we can find suitable work.

Your identity document, your BSN and the data for your pay and tax are required by law if you are going to work through us. Other data, such as your bank account number, is needed for your employment contract. Without this data we cannot let you work through us.

Self-employed contractors

Do you work for or with us as a self-employed contractor? Then you are not employed by us and we use less data.

  • Which data: your name and the name of your business, your contact details, KVK number (Dutch Chamber of Commerce number), VAT number, bank account number, the contract, hours worked, invoices and the certificates and passes needed for the work.
  • Why: to agree and carry out the assignment, schedule you, pay your invoices and keep our records.
  • Legal basis: the contract with you (Article 6(1)(b) AVG) and the legal obligation to keep our records (Article 6(1)(c) AVG and Article 52 AWR).
  • How long: contracts, invoices and other records 7 years. Other data 2 years after our last assignment together.

We do not make a copy of your identity document. We ask for your BSN only if tax law requires us to report payments to you to the Belastingdienst (the renseigneringsplicht, the obligation to report payments).

Do you work at a client’s site? Then the client receives your name, your certificates and what is needed to give you access to the workplace (Article 6(1)(b) and (f) AVG).

Clients, main contractors and other business contacts

Do you work for a client, main contractor, water board, supplier or other business relation, and are you in contact with us? Then we use your business details.

  • Which data: your name, organisation, job title, business e-mail address and phone number, our correspondence, and quotations, assignments and invoices that show your name.
  • Why: to prepare quotations, agree and carry out assignments, invoice and stay in touch.
  • Legal basis: the contract with you (Article 6(1)(b) AVG). If you are a contact person of an organisation, our legitimate interest in doing business with that organisation (Article 6(1)(f) AVG). For invoices and contracts, the statutory retention obligation applies (Article 6(1)(c) AVG and Article 52 AWR).
  • How long: for as long as we work together and 2 years after that. Invoices and contracts 7 years.

Do we send you e-mails about our services? We only do so if the law allows it (Article 11.7 Telecommunicatiewet): with your consent (Article 6(1)(a) AVG), or because you are a customer of ours and the e-mails concern similar services (Article 6(1)(f) AVG). You can unsubscribe in every e-mail. We use your e-mail address for this until you unsubscribe.

Data we receive from others

Sometimes we receive data about you from someone else. Below you can read from whom and which data.

  • Clients and main contractors: your hours worked, how the work went, accidents and incidents at work, and details of passes for access to the workplace.
  • The company doctor or occupational health service: what you can and cannot do when you are ill. Never what is wrong with you.
  • UWV: data about the Ziektewet and benefits when you are ill.
  • The Belastingdienst: data for your payroll taxes.
  • References: what a previous employer or client says about your work, if you have given us their name.
  • Other employment agencies: if you come to work for us through another employment agency, that agency gives us your name, your contact details and what is needed for your placement.
  • Public sources: if we approach you because we saw your profile on, for example, a job site or LinkedIn, we tell you so when we first contact you.
  • Your own organisation: as a business contact, we sometimes receive your name and contact details from your employer.

If we receive data from others, we let you know within 1 month, or sooner if we contact you. This privacy policy forms part of that information.

Who receives your data?

We never sell your data. We share it only when that is needed for the purposes in this privacy policy.

Service providers who work for us

These companies use data on our instructions. In the AVG they are called processors. They may use your data only as we agree with them in a data processing agreement.

  • Vercel Inc. (United States): hosting of the website, server logs, the storage of photos and CVs, and the speed measurement. The website functions and both storage locations run in Frankfurt (Germany).
  • Neon, LLC, part of Databricks, Inc. (United States): our database, which is located in Frankfurt (Germany). Among other things, it holds the applications.
  • Brevo (Sendinblue SAS, Paris, France): sends us the e-mail with a new application. Brevo uses servers in the EU.
  • our payroll bureau or the supplier of our payroll software
  • the supplier of our e-mail and office software

Of these e-mails, Brevo keeps only data about the sending, such as the time, the recipient and the subject, and deletes it after 1 month.

Others who are responsible themselves

These parties receive data from us when that is needed. After that, they are themselves responsible for what they do with it.

  • clients (hirers) and main contractors you work for
  • our occupational health service and the company doctor
  • the pension fund
  • the Belastingdienst and UWV
  • the Nederlandse Arbeidsinspectie (the Netherlands Labour Authority) and other supervisory authorities, if they ask for it
  • from 1 January 2027: the bodies that supervise the rules for employment agencies under the Wet toelating terbeschikkingstelling arbeidskrachten (Wtta, the Admission of Placement of Workers Act), such as the admission authority and designated inspection bodies, to the extent the law gives them access
  • organisations that audit our records for a quality mark, if we hold or apply for a quality mark
  • our accountant, insurer or lawyer, when needed, for example in the event of damage or a dispute
  • the police, the judicial authorities or other public authorities, if the law requires us to provide data
  • Vercel, for the technical data that Vercel itself uses to secure its network
  • WhatsApp, if you send us a message via WhatsApp

Data outside the European Economic Area

Our website, database and storage are in Frankfurt (Germany). Even so, data may end up outside the EEA. Vercel and Databricks/Neon are American companies. According to Vercel’s data processing agreement, Vercel’s main processing facilities are in the United States. Staff of these companies may also access data from the United States, for example for maintenance or support.

This is how your data is protected in that case:

  • Vercel Inc. and Databricks, Inc. (with Neon, LLC) are certified under the EU-US Data Privacy Framework. For certified companies, the adequacy decision of the European Commission applies (Implementing Decision (EU) 2023/1795). That decision says that they protect your data adequately.
  • In addition, the data processing agreements with Vercel and Databricks/Neon contain the standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/914). This means your data also remains protected if the Data Privacy Framework were to lapse.
  • Brevo stores data in the EU (France, Germany and Belgium). Staff and service providers of Brevo outside the EEA, for example in the United States and India, may access data for support. The standard contractual clauses apply to this and, for the United States, the Data Privacy Framework.

Do other service providers of ours use servers outside the EEA? Then only with one of these safeguards.

Would you like a copy of these safeguards? Then e-mail info@aanpakkersxl.nl. You can also check for yourself: the list of certified companies is on dataprivacyframework.gov and the standard contractual clauses are on eur-lex.europa.eu.

How long do we keep your data?

We do not keep your data longer than necessary. Sometimes the law prescribes a period. After that, we delete the data or make it anonymous. An overview:

  • Server logs: 1 day.
  • Speed measurements: anonymous, without IP address.
  • Application and CV: no later than 4 weeks after the end of the procedure, and always automatically 8 weeks after receipt. This also applies to the encrypted code of your IP address and the e-mail with your application.
  • Copy of your identity document if you do not join us as an employee: as soon as we no longer need it, and no later than 4 weeks after it was made (Article 7c Waadi).
  • Registration as a candidate: for as long as you want to stay registered, and never longer than 2 years after the last contact.
  • Payroll records, employment contracts, hours records, pension data, invoices and other financial records: 7 years (Article 52 AWR).
  • Copy of your identity document, residence document or work permit and your payroll tax form: 5 years after the end of the calendar year in which you left our employment (Wet op de loonbelasting 1964).
  • Other data in your personnel file, such as certificates and the note that we have seen your VOG: 2 years after you left our employment.
  • Absence and reintegration file: 2 years after you left our employment. If we are a self-insurer for the Ziektewet, 5 years.
  • From 1 January 2027, data about your placement that the Waadi requires: 7 years after the end of the year in which that placement ended (Article 12c Waadi).
  • Self-employed contractors: contracts and invoices 7 years, other data 2 years after the last assignment.
  • Business contacts: for as long as we work together and 2 years after that. Invoices and contracts 7 years.
  • E-mails, WhatsApp messages and notes of conversations: for as long as the file they belong to. Separate questions: no later than 1 year after we have dealt with them.
  • Name and photo on the website: until you withdraw your consent or no longer work for us.

Is there a dispute or court case? Then we keep the data needed for it until it has been concluded.

How do we secure your data?

We protect your data against loss and against use by people who are not allowed access to it. For example:

  • The website uses a secure connection (https).
  • Applications are kept in a secured database and CVs in separate, secured storage. Only logged-in staff can open them.
  • Only staff who need your data for their work have access to it.
  • The application form is protected against spam and misuse.
  • With an application, we keep only an encrypted code of your IP address.
  • Applications are deleted automatically.
  • We work only with service providers who have made arrangements with us about security.
  • We do not hold medical data. It stays with the company doctor.

If something does go wrong and data ends up with the wrong person (a data breach), we report it to the Autoriteit Persoonsgegevens within 72 hours where required. If this puts you at high risk, we will let you know too.

No decisions by a computer

We do not make decisions about you that are taken solely by a computer. Nor do we create profiles of you with software. People decide whether you can work with us and which work suits you.

Your right to object

Do we use your data on the basis of our legitimate interest (Article 6(1)(f) AVG)? Then you can always object to that (Article 21 AVG). This applies, for example, to server logs, the spam protection of the application form and the data of business contacts.

After your objection, we stop that use of your data. The only exceptions are if we have compelling grounds that outweigh your interests, or if we need the data for legal proceedings. We will then explain to you why.

Do you object to e-mails about our services? Then we will always stop sending them.

Objecting is free of charge. Send an e-mail to info@aanpakkersxl.nl.

Your other rights

You also have these rights:

  • Access: you may know which data we hold about you and receive a copy.
  • Rectification: is your data incorrect or incomplete? Then we will correct it.
  • Erasure: you can ask us to erase your data. We will do so, unless the law requires us to keep it or we need it for legal proceedings.
  • Restriction: you can ask us to temporarily stop using your data, for example while we check whether it is correct.
  • Portability: data that you have given us yourself and that we use on the basis of a contract or your consent can be provided to you in a commonly used digital file. Or we send it to another organisation.
  • Withdrawing consent: if we use your data with your consent, you can always withdraw it. What we did with your data before that remains valid.
  • A human who decides: we do not make decisions that are taken solely by a computer.

How to exercise your rights

Send an e-mail to info@aanpakkersxl.nl. State which right you want to exercise and which data it concerns. This is free of charge.

We want to be sure that the request comes from you. We may therefore ask you to e-mail us from the e-mail address we already have for you, or to show your identity document when we meet. We do not ask you for a copy of your identity document with your BSN on it. Please do not send us one either.

We respond within 1 month. If your request is complex or we receive many requests, we may extend that period by 2 months. We will then let you know within the first month, with the reason.

If we cannot carry out your request, or cannot carry it out in full, for example because the law requires us to keep data, we will explain why.

Making a complaint

Are you not satisfied with how we handle your data? Then please let us know first via info@aanpakkersxl.nl. We are happy to look for a solution together.

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the supervisory authority for privacy in the Netherlands. You can do so via autoriteitpersoonsgegevens.nl. Do you live or work in another EU country, such as Poland? Then you can also complain to the supervisory authority in that country.

Changes

We update this privacy policy when our way of working or the law changes. The latest version is always on www.aanpakkersxl.nl. At the bottom you can see the date of the last change. If something important changes that affects you, we will let you know if we have your contact details.

Language

This privacy policy is available in Dutch, English and Polish on www.aanpakkersxl.nl. Do the versions differ from each other? Then the Dutch text prevails.

Version: 16 October 2026