Privacy statement

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

• CheckBuurt.NL (sole proprietorship)
• Chamber of Commerce (KvK) number: 95491007
• Address: Groenestraat 26, 3512 PV Utrecht, the Netherlands
• E-mail: support@checkbuurt.nl

2. What data do we process?

We process the following personal data:

• Postcode and house number — entered by the user to identify the address and compile the report.
• E-mail address — provided with the order, used to send the report link.
• Payment status — we receive a payment confirmation from our payment provider. We receive no bank or payment-card details.
• Technical log data — server and application logs (IP address, timestamp, HTTP method) for security and troubleshooting.

The report uses only public source data and contains no personal data of third parties.

3. Purposes and legal basis

• Performance of the agreement (art. 6(1)(b) GDPR): processing of postcode/house number and e-mail address to generate and deliver the report.
• Legitimate interest (art. 6(1)(f) GDPR): technical log data for the security and stability of the service.

4. Categories of recipients

To deliver the service we engage processors, all bound by a data processing agreement. We share personal data with the following categories of recipients:

• Payment provider (EU) — processing of the iDEAL payment. We only receive a payment confirmation, no bank or card details.
• Cloud/hosting provider (EU) — hosting of the application and sending of the report e-mail; data is processed within the EU.
• Database provider (EU) — storage of order and report data within the EU.
• Website hosting provider — serving the pages; processes traffic for display only, without storing personal data.
• AI provider (US) — generation of the AI verdict in the report. Only non-personal report data (neighbourhood and address statistics) is processed; no personal data of the buyer is transferred. The transfer to the US takes place with appropriate safeguards (standard contractual clauses / SCCs).

5. Retention period

Report data and order information are retained as long as necessary for the performance of the service and the statutory retention obligation (fiscal retention: 7 years). Technical log data is retained for a maximum of 90 days.

6. Transfers outside the EU

Personal data (e-mail address, payment status) is not transferred outside the EU. Only non-personal report data is processed by an AI provider in the US, with appropriate safeguards for international transfers (SCCs).

7. Your rights

Under the GDPR you have the following rights:

• Right of access to your personal data
• Right to rectification of incorrect data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to object to processing
• Right to data portability

You can submit a request via support@checkbuurt.nl. We respond within the statutory period of one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

8. Cookies

CheckBuurt.NL uses strictly necessary cookies only, for the session and the payment. No tracking, marketing or analytics cookies are set.