Skip to content

Where our company data comes from

Some of the company profiles on TranspaSearch are assembled from public sources, without the company having supplied them. This page states exactly which sources those are, which data we take from them, on what legal basis, and how long we keep it.

Version 1.0

Why you are reading this

When we collect personal data from a source other than you, Article 14 GDPR requires us to tell you about it — at the latest when we first contact you. Our first email to a company is that notification, and this page is the long form of it. For a sole trader or a partnership, the business email address and the mobile number are personal data too, and we treat them that way.

The sources

We take only what appears on a public page and is plainly meant as business contact information. We do not sign in, we do not bypass any access control, and we do not ignore robots.txt.

Sources, the data taken from them, and how often we re-check
SourceWhat we takeHow often
The Netherlands Chamber of Commerce trade registerCompany name, trading name, Chamber of Commerce number, registered address, legal form and registration statusOn intake, then re-checked weekly for status changes
The company's own public websiteGeneral email address, general telephone number, address, description of services, opening hours, certifications and logoOn intake, then re-fetched quarterly
Public trade directories and certification registersCertification or membership listings, and the service areaOn intake, and when the profile is re-checked

Which categories of data these are

Data about the business and how to reach it, and nothing else. We collect no special-category data, no data about employees, and no data about your customers.

  • Identification: company name, trading name, Chamber of Commerce number and legal form.
  • Contact: registered address, general telephone number, general email address and website.
  • Offering: which services the business names, the area it works in, and the certifications it holds.

On what legal basis

Legitimate interest, Article 6(1)(f) GDPR. Our interest is a usable directory with national coverage: a consumer who finds one cleaning company in their municipality cannot compare. Your interest is not being listed, and not being emailed, without having asked for it.

That balancing test is recorded and produces four hard limits: we take business contact details only, we email only once there is an actual request in your service area, we email at most twice, and one click is enough to stop it permanently.

How long we keep it

A profile stays for as long as the business exists and does not ask for it to go. The raw source material the crawler stored is erased after 180 days. The recipient address of a message we sent, and the text we sent, are kept for 90 days; after that only an irreversible hash and a masked form remain, which still show that something was sent but can no longer be written to.

An approved erasure request does not wait for any of that. The source material, the messages we sent and the profile itself are erased at once.

What you can do

None of this requires an account or a payment. We answer within one month, as Article 12(3) GDPR requires.

  • Object to the processing (Article 21): we then stop processing, unless we have compelling legitimate grounds. For a directory like this one we do not, so in practice we stop.
  • Have your profile erased (Article 17): the profile is anonymised and added to a suppression list, so a later crawl cannot recreate it.
  • Have data corrected (Article 16), or claim the profile and manage it yourself.

What we do not do

We do not sell this data, we do not rent it out, and we do not use it to enrich anybody else's file. It appears in the directory and it is used to match requests to nearby businesses; it goes nowhere else.

Contact

Questions about this page, or about what we hold on your business: privacy@transpasearch.nl. You may also lodge a complaint with the Dutch Data Protection Authority.