Privacy statement
Which personal data we use, what for, how long we keep it and what you can do about it.
Last updated: 31 October 2026
Who we are
Julian Stoop, handelend onder de naam Vindo, is responsible for the personal data in this statement. Registered with the Dutch Chamber of Commerce (KvK) under number 99745305, located at Populierendreef 964, 2272 HG Voorburg. Email: [email protected].
What data we have
You fill in the contact form
- What you fill in: your name and, if you add them, your company, phone number, email address, type of property, town, message and when you'd like to be called. Also the language of the page.
- A code calculated from your IP address with a secret key, not the IP address itself. We use it to stop abuse: at most 5 messages an hour. If we recognise a message as spam, we keep no name, company, phone number, email address, town or message from it.
- We use this to call or email you back. If you entered a company name, we look it up in the public Dutch business register (KvK).
- Legal basis: you ask us to get in touch (performance of a contract or steps taken at your request, article 6(1)(b) GDPR).
We contact you as an owner
- If your property is listed to let or for sale, we may contact you to offer our help. Your details come from public sources: the Dutch business register (KvK), the listing of your property and your company's website.
- We keep your company's details (name, KvK number, legal form and address), your company's phone number and email address, your name if we know it, and the details of your property and your listing.
- We keep track of when we were in touch with you, the outcome, our notes, our emails and your replies.
- When we first contact you, we tell you where we found your details and where to find this statement.
- Legal basis: our legitimate interest in offering our service to businesses (article 6(1)(f) GDPR).
- If you don't want to be contacted any more, just tell us. You always have the right to object to this, and we then stop straight away. If you reply to an email that you're not interested, we put your email address on our list of people we no longer contact.
You become a client
- What you fill in on your overview page: your name, email address, the address and details of your property, the asking price, the listing text, the phone number for enquiries, how you want to receive enquiries, an email address for enquiries if you give one, and your photos.
- The agreement you sign, with your name and email address, and your invoices and payments: amount, status and date. The invoice shows your company name, address and Chamber of Commerce number.
- The statements you tick, such as your acceptance of the terms and conditions: the text, the version, the time and a code of your IP address (not the IP address itself). That way we can show what you agreed to.
- If you report a new tenant to us (lead protection), the name or company name of that tenant, the start date and the rent. We use these only to check whether the tenant came through us.
- We use this to do the work: creating your listing and putting it online, passing on enquiries and handling the payments.
- Legal basis: performance of the agreement (article 6(1)(b) GDPR). We keep invoices because the law requires it (point c). We keep the statements as evidence (legitimate interest, point f).
You respond to a listing we manage
- We keep your name, phone number or email address, your message, the channel you responded through, how well your enquiry seems to fit and, if there is one, the date of a viewing.
- We ask you a few questions about budget, intended use and start date. Julian sees every enquiry and decides personally who is passed on.
- If you're a good fit for the property, we pass your name and contact details to the owner so they can contact you. The owner then becomes responsible for your details themselves. The owner's overview page only shows your first name.
- We keep a register of who responded to a property. That lets us show that a tenant came through us, if the owner has to pay us for it.
- Legal basis: steps taken at your request to rent the property (point b) and our legitimate interest in being able to show our fee is due (point f).
Who sees your details
Julian, and anyone who calls you on our behalf. We don't sell your details. These services process data on our behalf:
| Service | What they do | Which data |
|---|---|---|
| Google (Gmail, Google Workspace) | What they do: Our emails to you and your replies. | Which data: Your email address and the content of the emails. |
| Anthropic | What they do: Writes the first version of an email to owners and sorts replies. Julian reads and sends every email himself. The data is not used to train the service. | Which data: For an email: your name, company name and the details of your property, not your phone number or email address. For sorting: the text of your reply. |
| xAI (Grok) | What they do: Helps answer enquiries and in our internal tools. | Which data: Enquiries from tenants and buyers, the intake and the clients' listings. |
| Yousign | What they do: Signing online, if you become a client. | Which data: Your name, email address and the agreement. |
| Tailscale | What they do: A secure connection to our server. The server itself is in the Netherlands, on our own hardware. | Which data: Technical connection data. |
The KvK is not a processor but a source: we take company details from the public Dutch business register.
Data outside Europe
Some of these services are based in the United States. We only use services that are certified under the EU-US Data Privacy Framework or that have signed the European Commission's standard contractual clauses.
How long we keep it
| Data | How long |
|---|---|
| Contact form, and owners we approach, without an assignment | How long: 24 months after the last contact |
| Client details and intake | How long: Up to 12 months after the assignment ends |
| Signed agreement and the statements that go with it | How long: 7 years after the assignment ends |
| Invoices and payments | How long: 7 years, because the law requires it |
| Enquiries from tenants and buyers (lead register) | How long: Up to 12 months after the assignment for that property ends |
| List of people we no longer contact | How long: As long as needed so we don't contact you again: your phone number, email address, your company's KvK number or place id, the reason and the date |
| Backups of our database | How long: 14 days, then deleted automatically |
If you ask us to delete your details sooner, we will, except what the law requires us to keep.
Cookies
Our website sets no cookies when you visit it. We use no tracking or advertising cookies and no analytics services. Fonts and images come from our own server. Your overview page as a client sets no cookies either; we store your language choice there with your details. Only people who log in to our app get a cookie to stay logged in, and the app remembers a few display settings in the browser while the tab is open. That's why we don't ask for cookie consent anywhere.
Your rights
You can always ask which details we have about you, and have them corrected or deleted. You can also object to how we use them, ask us to restrict their use, or ask for a copy to take elsewhere.
Email [email protected]. We respond within one month.
We don't take decisions about you that are made by a computer alone.
If you're not happy with how we handle your details, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If we change this statement, you'll see it from the date at the top. Last updated: 31 October 2026.