Effective date: 30 September 2026

1. Who we are

Bizhost B.V. ("Bizhost", "we") is the controller for the personal data described in this statement. Contact details are in section 12. Bizhost has not appointed a data protection officer. Privacy questions go to [email protected].

2. Scope

This statement covers personal data that Bizhost processes as controller: data of website visitors, of people who contact us or request a quote, and of contacts at customers and suppliers.

When Bizhost hosts or processes data on behalf of a customer (the content of websites, databases and mailboxes), Bizhost is a processor. In that case the data processing agreement (Verwerkersovereenkomst) applies, and the customer's own privacy statement governs that data.

3. Visiting our website

• The website sets no cookies.
• The website uses no analytics or tracking.
• The website loads no resources from third parties. Fonts are hosted on our own server.

The web server records technical log data: IP address, date and time, requested page and browser user agent. We use it for security and troubleshooting. Logs are kept for a limited period of at most 30 days. Legal basis: our legitimate interest in a secure, working website (art. 6(1)(f) GDPR).

4. Quote requests and email

When you use the quote request form or send us an email, we process:

• name, company and email address;
• phone number (optional);
• the selected service and your message;
• the time of submission and your IP address.

Purpose: to answer your request, plan a meeting and prepare a quote. Legal basis: steps at your request before entering into a contract (art. 6(1)(b) GDPR) and our legitimate interest (art. 6(1)(f) GDPR).

The form is sent as an email via Mailgun (Sinch Mailgun, EU region) to our mailbox (Microsoft 365). We keep the data for up to 2 years after the last contact if no agreement follows. If an agreement follows, the data becomes part of the customer administration.

5. Service desk

Support requests are handled through the Service Desk Portal (support.bizhost.nl, Atlassian Jira Service Management). We process your name, email address and the content of your request. Purpose: support and incident handling under the agreement (art. 6(1)(b) GDPR). We keep this data for the duration of the agreement plus up to 2 years.

6. Customers and suppliers

For customers and suppliers we process contact details of contact persons, contract data, and invoicing and payment data. Purpose: executing the agreement, invoicing, payments and meeting legal obligations (art. 6(1)(b) and (c) GDPR). Invoicing and accounting run in Exact Online; payments run via Mollie. Financial records are kept for 7 years, based on the Dutch fiscal retention obligation.

7. Who receives personal data

We do not sell personal data.

We use service providers (processors) that process data on our behalf under a data processing agreement. Besides the providers named in this statement, the current list of providers that process customer data, including country and transfer basis, is in appendix 2 (Bijlage 2) of the Verwerkersovereenkomst.

Some providers are established in the United States. Transfers outside the EEA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

We also share data where the law requires it, for example with authorities.

8. Retention

• Website server logs: at most 30 days.
• Quote requests and email without an agreement: up to 2 years after the last contact.
• Service desk requests: duration of the agreement plus up to 2 years.
• Financial records: 7 years.

9. Security

• Encryption in transit (TLS).
• Access on a least-privilege basis with strong authentication.
• Backups and monitoring.
• Regular review of the measures.

10. Your rights

You have the right to:

• access your personal data;
• have it rectified;
• have it erased;
• restrict its processing;
• data portability;
• object, including to processing based on legitimate interest.

Send requests to [email protected]. We respond within one month. We may ask you to verify your identity.

We do not use automated decision-making.

You have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

11. Changes

Bizhost may update this statement. The effective date shown on this page identifies the current version.

12. Contact

Bizhost B.V.
Julianaweg 200,
1131 DL Volendam
The Netherlands
KvK 83053328
VAT NL862707432B01

Privacy questions and requests: [email protected]
Service desk: support.bizhost.nl