Privacy Statement
Last updated: 1 May 2026
1. Introduction
This privacy statement applies to the website www.ere-vergelijk.nl (hereinafter: "the Website"), operated by ERE-vergelijk.nl (hereinafter: "we", "us" or "our"). We attach great importance to the protection of your personal data and the respect of your privacy. In this privacy statement we explain which data we collect when you visit our Website, why we collect this data, how we use it and which rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act.
2. Controller
The controller responsible for the processing of your personal data is: Email: privacy@ere-vergelijk.nl For questions about this privacy statement or about the processing of your personal data, please contact us using the details above.
3. Which personal data do we collect?
When you visit our Website, we automatically collect certain data to safeguard the functioning of the Website and to gain insight into the use of our Website. This concerns the following data:
3.1. Data automatically collected when visiting the website
Category: Technical data — IP address (anonymised), browser type and version, operating system, device type Usage data — Pages visited, date and time of visit, duration of visit, click behaviour, referring website Location data — Country and region (derived from anonymised IP address)
3.2. Data you actively provide
If you contact us via the contact form or by email, we collect the data you provide to us, such as: Name Email address Content of your message In addition, we collect the following data when you sign up for our newsletter: Email address (mandatory) First name (optional)
3.3. Data we do not collect
We do not collect special categories of personal data, such as data on health, political opinions, religious beliefs or criminal records. Nor do we collect your citizen service number (BSN).
4. Purposes and legal grounds for processing
We process your personal data exclusively for the purposes set out below and on the basis of the legal grounds mentioned alongside them: Purpose — Analysing website traffic. We analyse visitor numbers, popular pages and usage patterns in order to improve our Website and to make it attractive to booking service providers who wish to be visible via our platform. Categories of data — Technical data, usage data, location data Legal ground — Legitimate interest Purpose — Safeguarding the technical operation of the Website. We use certain data to make the Website function correctly and to detect security incidents. Categories of data — Technical data Legal ground — Legitimate interest Purpose — Answering questions and requests. When you contact us, we use your data to answer your question. Categories of data — Name, email address, content of message Legal ground — Consent Purpose — Sending the newsletter. If you sign up for our newsletter, we use your email address and optionally your first name to send you the newsletter periodically. Complying with legal obligations — we may be required to retain certain data or to provide it to competent authorities. Categories of data — Email address, first name (optional) Legal ground — Consent
4.1. Explanation of legitimate interest
Where we rely on our legitimate interest, we have weighed our interest against your privacy interests. Our interest consists of obtaining insight into the use of our Website so that we can improve it and make it attractive to booking service providers. We have taken measures to limit the impact on your privacy, including anonymising IP addresses. You can object to this processing at any time (see section 8).
5. Cookies and similar technologies
See our cookie policy here
6. Recipients of your personal data
In principle we do not share personal data with other parties (third parties), unless this is necessary for the functioning of our website or the provision of our services. With all of these parties we have concluded a data processing agreement in which arrangements have been made for the protection of your data. We may share personal data with: Google Ireland Ltd., for keeping website statistics (Google Analytics 4) and ad management and conversion measurement (Google Ads). Google is established in Ireland (EU). Transfer to the United States may take place on the basis of the Standard Contractual Clauses (hereafter: SCCs) and the EU-US Data Privacy Framework; Render Services, Inc., for hosting our website. Render is established in the United States. Transfer takes place on the basis of the SCCs; Cloudflare, Inc., for DNS, CDN and protection against attacks on our website. Cloudflare is established in the United States. Transfer takes place on the basis of the SCCs; Fastmail Pty Ltd., for processing incoming emails via the contact form. Fastmail is established in Australia and the United States. Transfer takes place on the basis of the SCCs. We never sell your personal data to third parties. We do not provide your data to other parties unless this is necessary for the performance of our services or if we are legally required to do so.Recipients of your personal data
7. Retention periods
We do not retain your personal data longer than necessary for the purposes for which they were collected. The following retention periods apply: Category of data — Website statistics (aggregated and anonymised) Retention period: Indefinite Category of data — IP addresses (anonymised) Retention period: 14 months Category of data — Contact form data Retention period: 1 year after handling your enquiry Category of data — Server log files Retention period — 6 months Category of data — Newsletter data Retention period — Until unsubscription, deleted within 30 days thereafter After the retention period expires, your data is deleted or anonymised.
8. Your rights
Under the GDPR you have the following rights regarding your personal data: Right of access — You have the right to know which personal data we process about you and to receive a copy of this data. Right to rectification — You have the right to have inaccurate or incomplete data corrected. Right to erasure ("right to be forgotten") — You have the right to request that we delete your personal data, if it is no longer necessary or if you withdraw your consent. Right to restriction of processing — You have the right to have the processing of your data temporarily restricted, for example when you contest the accuracy of the data. Right to data portability — You have the right to receive your data in a structured, commonly used and machine-readable format and to transfer it to another controller. Right to object — You have the right to object to the processing of your data based on our legitimate interest. We will cease the processing unless we can put forward compelling legitimate grounds. Right to withdraw consent — If processing is based on your consent, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing prior to the withdrawal.
8.1 How can you exercise your rights?
You can exercise your rights by contacting us via: Email: privacy@ere-vergelijk.nl We respond to your request within one month. If your request is complex or we receive a large number of requests, we may extend this period by two months. In that case we will inform you within one month. In order to verify your identity, we may ask you to provide additional information.
9. Security
We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration or disclosure. These measures include, among other things: Encrypted connections (HTTPS/TLS) for all communication with the Website Access security to our systems on the basis of the "need-to-know" principle Regular back-ups of our systems Security updates and patches
10. Links to other websites
Our Website may contain links to third-party websites, including the websites of booking service providers. We are not responsible for the privacy policy or the content of these external websites. We recommend that you consult the privacy policy of these websites before providing personal data.
11. Minors
Our Website is not aimed at persons under the age of 18 and we do not knowingly collect personal data from minors. If you believe that we have collected personal data from a minor, please contact us so that we can delete this data.
12. Complaints
If you have a complaint about how we process your personal data, we would like to hear it. You can contact us using the details in section 2. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority for privacy protection in the Netherlands:
Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag. Phone: 088 - 1805 250. Website: www.autoriteitpersoonsgegevens.nl
13. Changes to this privacy statement
We may amend this privacy statement from time to time, for example following new functionality on the Website or changes in laws and regulations. We recommend that you consult this privacy statement regularly. In the event of substantial changes that affect how we process your personal data, we will inform you about this through a clear notice on the Website. The date of the most recent change can be found at the top of this privacy statement.