Translation note: This English version is provided for information. Until legally reviewed, the Dutch version remains leading.

Privacy policy

This privacy policy explains which personal data Prepaidfactuur.nl processes, why that processing is needed, with whom data may be shared and which rights users and data subjects have.

Who is responsible?

Prepaidfactuur.nl is part of OzHold. OzHold is responsible for account, payment, support, security and website data. For customer, invoice, quote and expense data that users enter into the application themselves, the user usually determines the purpose and content of the processing. Prepaidfactuur.nl then mainly processes that data to technically provide the service.

Which data do we process?

Account data such as email address, login status, language and country settings.
Company data such as company name, address, chamber of commerce number, VAT number, logo, IBAN and document settings.
Data entered by users about customers, products, invoices, quotes, expenses, reports and email settings.
Wallet, order, payment and usage data.
Support information, technical logs, error messages and security data.

Why do we process data?

To create, secure and keep accounts available.
To make invoices, quotes, customers, products, expenses, reports and PDF documents work.
To process credit, payments, orders and usage.
To send emails when the user configures this.
To provide support, resolve errors, prevent abuse and secure the service.
To comply with administrative, tax or legal obligations.

Legal bases

Depending on the situation, we process data because this is necessary to perform an agreement, to comply with legal obligations, based on legitimate interests such as security and fraud prevention, or based on consent when consent is specifically requested.

Sharing with suppliers

Prepaidfactuur.nl does not sell personal data. Data may be processed by suppliers that are needed for hosting, databases, storage, email, payments, backups, security, logging, analytics or support. Appropriate agreements should exist with suppliers that process personal data, covering security, confidentiality, subprocessors, data breaches and deletion or return of data.

Retention periods

Data is retained for as long as needed for the account, service, administration, security or legal obligations. Account data can be deleted on request where there is no statutory retention obligation, open administrative obligation or other valid reason to retain data longer.

Security

Prepaidfactuur.nl uses appropriate technical and organisational measures, such as secure connections, account separation, restricted access, logging and backups where needed. No online service can guarantee absolute security. Users remain responsible for careful use of their account and email settings.

User and data subject rights

Users and data subjects may, under certain conditions, request access, correction, deletion, restriction, portability or objection. Privacy requests can be sent to [email protected]. For account questions, please include the account email address so the request can be handled carefully.

Complaints

If we cannot resolve the matter together, you may submit a complaint to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. Please send privacy questions through our contact details first so we can investigate and respond.