Privacy statement

This is a translation. The Dutch version is binding.

To enable you to prepare your annual accounts, we process personal data and financial data of your business. Below we set out exactly what we process, why, for how long and what your rights are.

1. Who is responsible

Woodlands Administration (sole trader (eenmanszaak), Bloemendaal) is the controller for the data processed via ZelfJaarrekening.nl. You can email questions or requests to support@zelfjaarrekening.nl; who that is exactly is set out on the about us page.

Woodlands Administration · sole trader (eenmanszaak) · Bloemendaal · KVK 94490171 · VAT ID NL005086896B69 · support@zelfjaarrekening.nl · +31 6 40896348

2. What data we process

Account data: your email address and an encrypted password.
Business data: name of the business, legal form, KVK number, place of establishment and date of incorporation.
Financial data of the financial year: balance sheet items, turnover, expenses, and the data you enter yourself in the notes and accounting policies.
Signing data: place, date, name and position of the director.
Payment data: whether and when a payment was made, the amount and a payment reference. Your card details do not reach us; they are processed by Stripe.
Technical data: what is needed to make the service work and to secure it.

3. Why we process it

To perform the agreement: your account, the annual accounts and the PDFs.
To comply with our legal obligations, such as our financial administration.
On the basis of a legitimate interest: security of the service and prevention of misuse.

4. How long we keep it

Your data is kept for as long as your account exists, so that you can continue working per financial year. If you delete your account, we delete the data within 30 days — except for data we must keep under the law, such as invoicing data (7 years).

5. Who we share it with

Supabase — database, authentication and storage. The data is stored in the European Union and is protected per account.
Stripe — processing of the payment. Stripe Payments Europe Ltd is based in Ireland.
Our hosting provider — for delivering the website and the app.

We do not sell your data and do not use it for advertising.

6. Cookies and local storage

To keep track of your session and of your work in the wizard, we use functional storage in your browser (localStorage). That requires no consent, and no cookie is involved.

In addition, we measure whether the site works, using Google’s measurement services (Google Analytics and Google Ads). We first ask for your consent, via a block at the bottom of the page. If you say no, or do nothing, we do not place measurement cookies and nothing about you is recorded. If you say yes, Google places a cookie to remember that you are the same visit: for Analytics that is _ga (up to 2 years) and for Ads _gcl_au (90 days). What we see with it is page views, the origin of the visit and whether a payment succeeded — not the content of your bookkeeping.

You can change your choice later by clearing the cookies of this site in your browser; the block will then appear again. In your browser settings you can also block measurement cookies altogether. In both cases the site and the app work exactly the same.

The website itself works without JavaScript, with one exception: the depreciation calculator. That little script calculates in your own browser and sends or stores nothing.

Separately, our pages load an invisible one-pixel image, with which we count ourselves which pages are read. We do not store an IP address, a visitor ID or a cookie with it: only the number of views per day and per page. Visits from search engines and from a local copy do not count.

7. Security

The connection to the website and the app is encrypted (TLS). Passwords are stored hashed and your data is accessible only to your account.

8. Your rights

You have the right to access, correction, deletion, restriction of processing, portability of your data and objection. Email your request to support@zelfjaarrekening.nl; we respond within one month. If you do not agree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).