Privacy statement

Data controller

TranspaClean B.V., Chamber of Commerce 87654321, Postbus 2417, 1000 CK Amsterdam. Privacy questions: privacy@transpasearch.nl.

What data we process

• From requesters: name, email address, phone number, postcode and address, the description of your job and any photos.
• From companies: company details, Chamber of Commerce number, contact details, insurance and certification evidence, and the details of the account's users.
• From everyone: IP address, browser details and use of the site, for security and statistics.

What we use them for

• Matching your request to suitable companies — necessary to perform the agreement.
• Informing you about your request, quotes and messages — necessary to perform the agreement.
• Checking companies for registration, insurance and certifications — legitimate interest: a trustworthy platform.
• Preventing abuse, spam and fraud — legitimate interest.
• Improving the service and producing statistics — legitimate interest, using as little data as possible.
• Sending newsletters and tips — only with your consent, with an unsubscribe link in every message.

Company profiles compiled from public sources

Some company profiles on TranspaSearch are compiled from public sources without the company having registered with us. We do this so that comparison is possible from the moment you search, rather than only once a company happens to be our customer. The legal basis is our legitimate interest, Article 6(1)(f) GDPR. Because we did not obtain these data from the company itself, Article 14 GDPR obliges us to state where they came from and what you can do about it.

As soon as we hold a business email address for the company, we notify it about the profile and about the right to object within one month. Where we hold no address, this statement serves as the notice Article 14 GDPR requires.

Where those data come from

The KVK trade register, the company's own website, public listings in business directories and in trade or certification registers, and publicly visible reviews on other platforms. We collect nothing from behind a login and we honour whatever a site excludes in its robots.txt.

Which categories we hold

Company name, KVK number, registered and postal address, telephone number, email address, website, services offered, service area, opening hours and publicly visible reviews with their source. For a sole trader or partnership the company name is often also a personal name; we treat that as personal data, even though it sits in a public register.

Objecting or having the profile removed

You may object to the processing and ask for erasure at any time. You need no account and you need not call us: the form at /en/remove-business-profile/ is enough. We assess the request within five working days and confirm our decision in writing. On an objection under Article 21 GDPR we take the profile offline unless we can demonstrate compelling legitimate grounds that override it.

Incorrect details

Where something is wrong we would rather correct it than delete the profile. Claim the profile or send us the correct details; we will amend them and record when, and at whose request, that happened.

Who we share data with

Your contact details are shared with the at most 4 companies that respond to your request, and only after you have confirmed it. Beyond that we use processors for hosting, email, storage and error reporting. A processing agreement is in place with each of them. We do not sell your data.

Transfers outside the EEA

Our servers and processors are located in the European Economic Area. Where a transfer outside it is unavoidable, it takes place under the European Commission's standard contractual clauses.

How long we keep them

• Requests and messages: 3 years after completion, so you can find them again and disputes can be assessed.
• Account details: for as long as your account exists, and at most six months afterwards.
• Reviews: for as long as they are published. If your account is deleted they remain, but anonymised.
• Billing data: seven years, because Dutch tax law requires it.
• Unclaimed company profiles: for as long as the company is actively registered with the KVK and the details are current, reassessed once a year. After a successful removal request we keep only the KVK number on a suppression list, so the profile is not created again.

Your rights

You have the right to access, rectification, erasure, restriction, objection and portability of your data. Send a request to privacy@transpasearch.nl; we respond within one month. If you disagree with how we handle it, you may lodge a complaint with the Dutch Data Protection Authority.

Automated decision-making

We take no decisions producing legal effects based solely on automated processing. The order of search results and the distribution of requests do come from a formula, which we publish in full at /en/how-our-ranking-works/.

Security

Traffic is encrypted, passwords are stored hashed with argon2id, session tokens are stored hashed, and access to personal data is limited to staff who need it. We report a data breach to the supervisory authority within 72 hours and, where required, to you as well.

Children

TranspaSearch is not aimed at people under the age of sixteen. We do not knowingly collect data from children.

Changes

We update this statement when our processing changes. The date at the top shows when that last happened.