Privacy Statement AllesOnline B.V.
Last updated: 30 September 2026
1. General
This privacy statement applies to all services and websites of AllesOnline B.V., established at Jan van der Heydenstraat 18, 2665 JA Bleiswijk, the Netherlands. AllesOnline respects your privacy and ensures that your personal data is processed carefully, confidentially and in accordance with the General Data Protection Regulation (GDPR).
Where we build, host or manage a website or application for a client, we process personal data on behalf of that client. The client is then the controller and AllesOnline is the processor; the client's privacy statement applies to visitors and users of that website or application. Which sub-processors we engage, where they process the data and which safeguards apply is set out in our Data Pro Statement and our Data Processing Agreement.
2. Controller
The data controller is:
AllesOnline B.V.
Jan van der Heydenstraat 18
2665 JA Bleiswijk, the Netherlands
Email: info@allesonline.nl
Phone: +31 85 003 03 02
3. Personal data we process
We process personal data that you provide to us or that is collected automatically via our websites, email systems and client portals. This may include:
- Name, company name, address, telephone number, email address
- IP address, browser data, browsing behaviour and device information
- Login details (for client portals and webshops)
- Invoicing and payment data
- The content of communications (such as emails or contact forms)
We do not process special categories of personal data.
4. Purposes of processing
- Providing web development, hosting, design and marketing services
- Maintaining client relationships and performing agreements
- Sending service notifications or updates
- Analysing and improving our websites
- Complying with legal obligations (administration and tax law)
5. Legal bases
- Performance of a contract
- Legitimate interest (client management, security, statistics)
- Consent (cookies and newsletters)
- Legal obligation (invoicing, statutory retention)
6. Sharing of data
We only share your personal data with third parties where necessary to provide our services or where legally required. We work with, among others:
- Hosting and CMS: Mach3Builders BV, DigitalOcean
- Domain registration: TransIP
- Transactional email: Mailgun
- Email marketing: Campaign Monitor
- Consent management (cookies): Cookiebot (Usercentrics)
- Web analytics: Google Analytics (via Google Tag Manager)
- Advertising: Google Ads
- Video: Vimeo
- Security and CDN: Cloudflare
We have concluded data processing agreements with these parties that comply with the GDPR.
7. Cookies
Our website uses cookies. Through Cookiebot we request consent for placing non-essential cookies (necessary, preferences, statistics, marketing). You can change your consent at any time via the Cookiebot icon at the bottom left of the page. More information can be found in our cookie statement.
8. Security and international transfers
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure. Our storage and hosting in principle take place within the European Economic Area (EEA). For a number of supporting services, in particular Google (Analytics, Ads, Tag Manager), Vimeo, Cloudflare and Campaign Monitor, transfer to the United States may take place. Transactional email via Mailgun is handled in the EU region; as Mailgun is a US-based provider, access from the United States cannot be ruled out. For these transfers we rely on a valid basis under Chapter V GDPR: the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs), with data minimisation.
9. Retention periods
- Client data: 7 years (statutory retention)
- Contact requests: a maximum of 12 months
- Project files and backups: for as long as the collaboration is active or as contractually agreed
10. Your rights
You have the right to access, rectification or erasure, withdrawal of consent, restriction or objection, and data portability. Send a request to info@allesonline.nl. We respond within 30 days.
11. Complaints
For complaints you may contact us or lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.