1. Who we are
NLYZED B.V. is the controller for the processing described here.
- Company
- NLYZED B.V.
- Address
- Beethovenhof 26, 2807 PZ Gouda, the Netherlands
- KvK
- 42066048
- info@nlyzed.nl
We have not appointed a data protection officer. For any privacy question, write to the email address above.
2. What we process, why, and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your request via the form, email, phone, WhatsApp or Telegram | Name, email address, phone number, the service you chose, your message | Steps taken at your request before a contract (Art. 6(1)(b) GDPR) | Up to 12 months after the last contact if no engagement follows |
| Booking and holding a consultation | Name, email address, chosen time, notes you add, payment status | Performance of a contract (Art. 6(1)(b)) | For the duration of the engagement; invoices for 7 years |
| Providing our services | Identity and contact details, citizen service number (BSN), family situation, employment and income, tax and financial data, company data, residence history | Performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) where tax or other laws require it | 7 years after the end of the engagement, in line with Dutch tax record-keeping rules |
| Client identification under the Dutch anti-money laundering act (Wwft) | Copy of identity document, details of ultimate beneficial owners, information on the source of funds where required | Legal obligation (Art. 6(1)(c)) | 5 years after the end of the business relationship |
| Invoicing and our own administration | Name, address, VAT number, invoice and payment data | Legal obligation (Art. 6(1)(c)) | 7 years |
| Running and securing the website | IP address and technical data, processed briefly by our hosting provider; anonymous visit statistics | Legitimate interest in a secure, working website (Art. 6(1)(f)) | Technical logs for a short period; statistics only in aggregated form |
We only use your citizen service number (BSN) where the law requires or allows it, for example in tax returns and applications to government bodies.
Some immigration matters involve sensitive information, such as health data, data about family relationships or a certificate of conduct. We process this only when your case requires it and on the legal ground that applies, such as your explicit consent or a legal exemption.
3. Who receives your data
We share personal data only when it is needed for the purposes above:
- Authorities and institutions involved in your case, such as the IND, the Dutch Tax Administration (Belastingdienst), the Chamber of Commerce (KvK), the Netherlands Enterprise Agency (RVO), municipalities, notaries and banks, when you instruct us or the law requires it.
- Service providers working on our behalf (processors), under a processing agreement: website hosting and analytics (Cloudflare), the contact form (Web3Forms), the booking calendar (Cal.com), email and document storage, and bookkeeping and tax software.
- Independent providers you choose to use, such as Stripe for payments, and WhatsApp or Telegram when you contact us through them. Their own privacy terms apply.
We do not sell personal data and do not use it for advertising.
4. Transfers outside the European Economic Area
Some of our providers process data outside the EEA, for example in the United States or India. In those cases we rely on an adequacy decision, such as the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. Please send identity documents and other sensitive files by email or through a secure link we provide, not through messaging apps.
5. Security and confidentiality
We protect your data with appropriate technical and organisational measures, including encrypted connections, access controls, two-factor authentication and confidentiality obligations for everyone who works with your data.
6. Automated decisions
We do not make decisions about you based solely on automated processing.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Some rights are limited where the law requires us to keep data, for example for tax or anti-money laundering purposes.
Send your request to info@nlyzed.nl. We respond within one month and may ask you to confirm your identity.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Cookies
How we use cookies and similar techniques is explained in our Cookie Statement.
9. Changes
We may update this statement when our services or the law change. The date at the top shows the latest version.