Privacy statement
NederlandsVersion 1.0 - last updated: September 2026
VanMeijel Automatisering B.V. (“VanMeijel”, “we”, “us”) attaches great importance to the protection of your personal data. In this privacy statement we explain which personal data we process when you visit our websites, contact us or use our services, for what purpose and on what legal basis we do so, how long we retain your data and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Uitvoeringswet AVG (Dutch GDPR Implementation Act).
This statement applies to all VanMeijel websites and online services, including vanmeijel.nl and werkenbijvanmeijel.nl. Which of the processing operations described below applies to you may differ per website or service. For the processing of data within our software (including Metacom/BizzStream) we generally act as processor on behalf of our customers; that processing is governed by a data processing agreement and falls outside this statement.
1. Which websites does this statement apply to?
| Domain | Type of service / purpose | Data subjects |
|---|---|---|
| vanmeijel.nl | Corporate website: information, contact, newsletter, AI search function | Visitors, prospects, customers |
| werkenbijvanmeijel.nl | Recruitment & selection: vacancies and job applications | Job applicants |
2. Who is responsible for your data?
The controller is:
VanMeijel Automatisering B.V.
Duit 8, 8305 BB Emmeloord
Telephone: 0527 61 47 67
E-mail: info@vanmeijel.nl
KvK number: 39043044
For questions about this statement or about the processing of your personal data, you can contact us at privacy@vanmeijel.nl.
3. What data do we process, for what purpose and on what legal basis?
| Purpose of the processing | Categories of personal data | Legal basis (art. 6 GDPR) |
|---|---|---|
| Contact and sign-up forms / e-mail — answering and handling your question or request, and providing information about our software and services | First name and surname, company name, e-mail address, telephone number, content of your message | Performance of, or steps prior to entering into, a contract (art. 6(1)(b)) and/or our legitimate interests in responding to requests (art. 6(1)(f)) |
| Newsletter — informing you about news in the field of IT and construction, our services and related matters | Name, e-mail address, subscription/unsubscription data | Your consent (art. 6(1)(a)); you can unsubscribe in every newsletter |
| Customer relationship and service provision — performing contracts, support, invoicing and account management | Contact details, company and invoicing data, user and support data | Performance of the contract (art. 6(1)(b)); for invoicing/administration also a legal obligation (art. 6(1)(c)) |
| Website statistics and improvement — analysis of visit and click behaviour and optimisation of the website | IP address (truncated/pseudonymised where possible), time, device/browser data, pages viewed | Consent requirement for non-essential cookies (Telecommunicatiewet (Dutch Telecommunications Act)/ePrivacy, see §6); processing on the basis of consent (art. 6(1)(a)), or, where the set-up is demonstrably privacy-friendly, legitimate interests (art. 6(1)(f)) |
| Search function with AI support (vanmeijel.nl) — understanding and answering your search query, and evaluating and improving the search function, including generating suggested questions | The text of your search query and the data you enter in it. Only that text is sent to the AI providers, without your IP address or device/browser data. With the stored search query we additionally retain the time and a hashed IP address. | Our legitimate interests in helping visitors find the right information quickly and in improving our search function (art. 6(1)(f)); see “AI search function on our website” |
| Recruitment & selection (job applications via werkenbijvanmeijel.nl) — handling your job application and filling vacancies | First name and surname, contact details, CV, covering letter, education/employment history, and any assessment or reference data | Steps taken at your request prior to entering into an (employment) contract (art. 6(1)(b)) and/or legitimate interests in recruitment (art. 6(1)(f)); for retention after rejection, your consent (art. 6(1)(a)) |
| Security and prevention of misuse — securing the website and systems and preventing misuse | IP address, log files, technical data | Our legitimate interests in a secure environment (art. 6(1)(f)) |
| Compliance with legal obligations — including the tax retention obligation and handling requests concerning rights | Depending on the obligation | Legal obligation (art. 6(1)(c)) |
We do not ask for special categories of personal data via the website and do not use them for our purposes. If you nevertheless enter such data yourself — for example in a message or in the search bar — we process it solely in order to handle your question and no longer than is necessary for that purpose. We do not engage in automated decision-making or profiling with legal effects for you.
Mandatory or voluntary provision of data (art. 13(2)(e) GDPR). In order to perform a contract or to answer your request, certain data (such as your name and contact details) are necessary; without that data we cannot handle your request or provide the service. A statutory obligation to provide data applies to the tax administration. Other provision of data, such as subscribing to the newsletter, is entirely voluntary.
4. From whom do we receive your data?
As a rule we collect personal data directly from you (for example via a form or by e-mail). In addition, we may receive contact details from public sources or from parties who have referred you to us, only insofar as this is permitted.
5. With whom do we share your data?
We do not sell your data. We share personal data only with:
- Processors that provide services on our instructions, such as our hosting/IT provider, the supplier of our e-mail/newsletter system, our CRM and our analytics service. We conclude data processing agreements with these parties.
- The recruitment/application platform (ATS) behind werkenbijvanmeijel.nl, which processes application data on our instructions.
- The AI providers behind our search function (OpenAI and Google) and our search database (Supabase, hosted in Frankfurt), which process search queries on our instructions. See “AI search function on our website”.
- Third parties to whom we are legally obliged to provide data, such as supervisory authorities or the Belastingdienst (Dutch Tax Administration).
6. Cookies
Our website uses cookies and similar techniques:
- Functional and necessary cookies — needed to make the website work and to remember your preferences. No consent required.
- Analytical cookies — to measure visits and use and to improve the website.
- Tracking/marketing cookies and social media cookies — including for share buttons (LinkedIn, Facebook, X). These parties may process data via these cookies; please read their own privacy statements.
For analytical cookies that are not configured in a privacy-friendly way and for tracking/marketing cookies we ask for your consent in advance via the cookie banner. You can change or withdraw your preferences at any time via the “Cookie preference” at the bottom of the webpage. A full overview of the cookies used can be found in our cookie statement.
7. AI search function on our website
On vanmeijel.nl you can ask a question in your own words. The search function uses artificial intelligence (AI) to interpret your question and guide you to the most relevant information on our website. Below we explain what this means for your data.
- Processing by our suppliers — in order to answer your question, we send the text of your search query to the AI services of OpenAI and Google and to our search database Supabase (hosted in Frankfurt), which uses it to look up the relevant pages and does not store the query itself. In doing so we send only the text of your search query, not your IP address or device/browser data. These parties process the query solely on our instructions and under a data processing agreement.
- Storage and improvement — we retain the questions that are asked in order to evaluate and improve the search function and to generate suggested questions that we show to other visitors. We do not link search queries to your name or to a profile of you and do not use them to approach you personally.
- What you enter yourself — the search bar is intended for questions about our software and services. Please do not enter personal or confidential data in it, whether your own or someone else’s, and certainly no special category data such as health data. If you have a personal question, please use the contact form or privacy@vanmeijel.nl.
- No decisions about you — the search function does not take automated decisions about you and does not build a profile of you. The answers are generated by AI and may be incomplete or incorrect; no rights can be derived from them.
Legal basis and rights. We process search queries on the basis of our legitimate interests in helping visitors find the right information quickly and in improving the search function (art. 6(1)(f) GDPR). You may object to this processing; see “Your rights”. How long we retain search queries is set out in “How long do we retain your data?”. Because OpenAI and Google may process data outside the European Economic Area, “Transfers of data outside the EEA” also applies.
8. Transfers of data outside the EEA
We prefer to process your data within the European Economic Area (EEA). Some of our suppliers — including the AI services behind our search function (OpenAI and Google) — are established outside the EEA or may process data outside the EEA. In that case we ensure an appropriate level of protection, for example because the recipient is covered by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework), or because we have entered into the European Commission’s Standard Contractual Clauses (SCCs), supplemented where necessary with additional measures. Would you like to know which safeguard applies to a specific transfer, or receive a copy of it? Please send a message to privacy@vanmeijel.nl.
9. How long do we retain your data?
We do not retain your personal data for longer than is necessary for the purposes for which they were collected:
| Data | Retention period |
|---|---|
| Contact/sign-up forms and e-mail correspondence | For as long as necessary to handle the matter and thereafter no longer than 12 months |
| Newsletter subscription | Until you unsubscribe. After you unsubscribe we retain your e-mail address on a limited unsubscribe/suppression list in order to prevent you from being approached again |
| Job application data | Up to 4 weeks after completion of the procedure; with your consent up to 1 year. |
| Customer and contract data | For the term of the contract and the statutory periods following it |
| Financial/tax administration | 7 years (statutory tax retention obligation) |
| Security/misuse logs (IP, log files) | 6–12 month, aligned with our logging/monitoring policy |
| Search queries in the AI search function | 90 days, after which the stored search query is deleted in full (not anonymised or aggregated). A search query that we publish on the website as a suggested question after review remains in place as website text |
| Cookie/statistics data | In accordance with the retention periods in the cookie statement (§6) |
10. How do we secure your data?
We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing, such as access control, encryption where appropriate (including secure connections/HTTPS), and agreements with our processors. Our information security is organised in accordance with a management system based on ISO 27001.
11. Your rights
Under the GDPR you have the following rights in relation to your personal data:
- Access to the data we process about you;
- Rectification (correction) of inaccurate data;
- Erasure (the “right to be forgotten”);
- Restriction of processing;
- Objection to processing based on legitimate interests, and to direct marketing;
- Portability of data (data portability);
- Withdrawal of consent that you have given earlier, without this affecting the lawfulness of the processing before that withdrawal.
You can submit a request at privacy@vanmeijel.nl. We will in principle respond within one month. In order to verify your identity we may ask you for additional data.
Are you dissatisfied with the way we handle your data? You then have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) (www.autoriteitpersoonsgegevens.nl).
12. Changes
We may amend this privacy statement from time to time. This is one central privacy statement that is published in the same version on all our websites; the current version is always available on our websites. This version is dated September 2026 (version 1.0).