About this notice
This notice explains how personal data is handled when you use this website or first contact ZZP Belastingzaken. Further arrangements apply to the processing of bookkeeping and tax information during an engagement.
Who is responsible?
ZZP Belastingzaken, at Aletta Jacobslaan 27, 2104 TN Heemstede, the Netherlands, is responsible for personal data processed through enquiries to this business. For privacy questions, email info@zzpbelastingzaken.nl or call 06 2705 7592.
What happens to your message?
When you select “Send message”, the contact form transmits your name, email address, optional telephone number, topic and message over an encrypted connection to the web server. The server then submits the message to the mail server for delivery to ZZP Belastingzaken. You do not need to open an email application. The form does not store message contents in a separate website database or text archive, but messages are processed and retained within the email environment.
When you contact me, I process your name, contact details and information you choose to share. I use this to answer your question, prepare for an initial conversation and discuss potential services. Do not include a Dutch citizen service number (BSN), passwords, tax returns or other confidential documents in an initial message.
Purposes and lawful bases
I process enquiries and prepare potential engagements at your request. Where processing is necessary to enter into or perform a contract, that is the lawful basis. Other correspondence is handled on the basis of a legitimate interest in responding carefully to business enquiries. Technical data used to operate and secure the website is processed on the basis of a legitimate interest in a reliable website.
Website, hosting and cookies
This website does not use tracking cookies placed by ZZP Belastingzaken, advertising pixels, third-party analytics scripts or embedded social media widgets. Images, styling and scripts are served from the same website, without external web fonts. Using the contact form creates an essential session cookie to validate requests. It contains a random session identifier, not your message, and is not used for tracking. Session data expires after two hours of inactivity; the cookie is a session cookie.
When you visit, the hosting provider receives technical information needed to serve the website, such as your IP address and information about the page requested and your browser. The hosting provider may retain technical logs for operation and security. The website is hosted by XEL.
Who receives the data?
Hosting and email providers process data as needed to deliver their services. The contact form uses the website host and mail facilities, not a third-party form service. Your own email provider may process data if you email us or receive a reply. Personal data is not sold or used for advertising. Data is otherwise shared only when necessary to answer your request, fulfil an agreed engagement or comply with a legal obligation.
How long is data retained?
Correspondence is retained only as long as needed to answer your enquiry and handle any follow-up. If an engagement starts, relevant information may become part of the client file, subject to the agreements and applicable statutory retention periods. Technical logs are managed by the hosting provider. To limit abuse and duplicate submissions, the form temporarily stores timestamps, a reference, delivery status and keyed verification codes derived from the IP address and submitted content, outside the public web directory. This control file does not contain names, email addresses, raw IP addresses or message text. Records are active for no more than 24 hours and are cleared during subsequent requests. No separate message content log is kept.
Your rights
You can request access to, correction or erasure of your personal data and, where applicable, restriction or portability. You may object to processing based on a legitimate interest. Contact us using the email address above. You can also lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens.
Secure document transfer
The contact form is for an initial, brief enquiry. We will agree on an appropriate secure way to share client documents and other sensitive information.
This website privacy notice was updated on 27 October 2026.