Privacy policy

The controller within the meaning of the GDPR is:

• [Statutaire naam B.V./eenmanszaak], trading under the name Agency F2F
• Address: [Vestigingsadres]
• Chamber of Commerce no.: [KvK-nummer]
• Email for privacy questions: [privacy@voorbeeld.nl]

We only collect what is strictly necessary. Specifically:

Data you give us yourself

• Contact form: name (or alias), email address and the content of your message.
• WhatsApp: your phone number, your WhatsApp profile name and the content of the chat. WhatsApp messages run through Meta Platforms Ireland Ltd. See section 4.
• During a collaboration: additional information you share to carry out the collaboration, such as account information and bank details for payouts.

Data collected automatically

• Technical data: IP address, browser type, device type, pages visited, referring URL and time of visit. These are used for security and the proper functioning of the site.
• Cookies: see section 7.

Under the GDPR we may only process personal data if there is a legal basis for it. We use four:

• Performance of an agreement (art. 6(1)(b) GDPR), to be able to guide you, manage accounts, plan content and process payouts.
• Legal obligation (art. 6(1)(c) GDPR), mainly for the seven-year tax retention requirement.
• Legitimate interest (art. 6(1)(f) GDPR), to keep the site secure, prevent abuse and spam, and communicate with you when you get in touch.
• Consent (art. 6(1)(a) GDPR), for optional cookies (analytics, marketing) and for any newsletters. You can withdraw that consent at any time.

We never sell your data. We only share it with parties that help us deliver our service (processors within the meaning of the GDPR), or when we are legally obliged to. We have a data processing agreement with all of these parties.

• Vercel Inc.: hosting and serverless infrastructure of this website. Server logs are kept temporarily for security.
• Resend: sending emails that come from the contact form.
• Meta Platforms Ireland Ltd. (WhatsApp): if you contact us via WhatsApp, those messages run through Meta. WhatsApp chats are end-to-end encrypted, but metadata (who chats with whom and when) is visible to Meta. Read the WhatsApp privacy policy for more information. Prefer not to use WhatsApp? Then use the contact form or email.
• Platforms you are active on (such as OnlyFans, Fanvue, etc.), only to the extent necessary to manage your account, and always at your request.
• Our accountant and accounting software: for financial administration and tax returns.
• Competent authorities: when we are legally obliged to, for example on the basis of a court order.

Some of our processors (such as Vercel and Resend) have servers or parent companies in the United States. For transfers of data to countries outside the EEA we rely on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses. This ensures an adequate level of protection.

We do not keep personal data longer than necessary for the purpose for which we collect it.

• Contact form and WhatsApp messages without a follow-up: a maximum of 6 months.
• Data of active clients: for the duration of the collaboration and then a further 12 months for reference and aftercare.
• Financial administration (invoices, payments): 7 years, on the basis of article 52 of the Dutch General Tax Act.
• Server logs and security logs: a maximum of 30 days.
• Cookies: see section 7.

A cookie is a small text file placed on your device when you visit this site. We distinguish three categories. On your first visit we ask via a cookie banner which categories you allow.

• Necessary cookies: required for basic functions such as remembering your cookie choice and securing forms. These are always placed and do not require consent. Retention period: a maximum of 12 months.
• Analytics: anonymized statistics about visits and usage, so we can see what works and what does not. Only placed with your consent.
• Marketing: for measuring campaigns and any advertising via external parties. Only placed with your consent.

You can always change or withdraw your choice via Cookie preferences. You can also block or delete cookies through your browser settings.

We take appropriate technical and organizational measures to protect your data against loss, unlawful use and unauthorized access. Think of: encryption of traffic (HTTPS), role-based access control, two-factor authentication on critical systems, and the principle of data minimization. We do not ask for more than necessary.

Should a data breach unexpectedly occur, we will report it within 72 hours to the Dutch Data Protection Authority and inform you directly if your data is involved and it is likely to pose a high risk to you.

Under the GDPR you have the following rights:

• Access: you may request which data we process about you.
• Rectification: you may have incorrect data corrected.
• Erasure ("right to be forgotten"): you may request deletion of your data, insofar as we have no legal retention obligation.
• Restriction: you may ask us to temporarily suspend processing.
• Objection: you may object to processing based on our legitimate interest.
• Data portability: you may request a copy of your data in a common format to take with you.
• Withdraw consent: for processing based on your consent, you can withdraw that consent at any time (without affecting processing that has already taken place).

You can send a request to [privacy@voorbeeld.nl]. We respond within one month.

Do you disagree with how we handle your data? Then please contact us first. We are happy to resolve it together. If we cannot work it out, you have the right to file a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority.

We do not use automated decision-making or profiling that has legal consequences for you or otherwise significantly affects you.

This privacy policy may be changed, for example if we start using new tools or if the law changes. You can always find the most recent version on this page; the date at the top states when it was last updated. Where possible we also actively announce important changes, for example via a notice on the site or by email.

Questions, comments or a request about your data? Email [privacy@voorbeeld.nl] or get in touch via our contact page. We are happy to help.