Processing terms
Who processes which data.
Version 14 October 2026. Article 28 GDPR.
When we keep your books, you are the controller and DT Admin is the processor. For the contact form on this site we are the controller ourselves. That is in the privacy notice. This page belongs to the engagement once we confirm it by email.
Subject
We process bookkeeping and tax data only to do the agreed work. We do not use it for advertising and we do not sell it.
Which data
Invoices, receipts, bank statements, revenue per channel, VAT data, and payroll data when you provide it.
Instructions
We follow your instructions for the engagement. If an instruction conflicts with a legal duty, such as the tax retention duty, we follow the duty and tell you.
People
Only the people doing the work have access. They are bound to confidentiality.
Sub-processors
The bookkeeping package we agree processes the books. This website is hosted at Vercel. Email from the form goes through Resend once that sending is switched on. We email you before a new sub-processor handles the books.
Security
Where the package allows it, we work through your login. Otherwise access is limited to the people on the engagement.
Breach
We report a breach of your data without undue delay, so you can inform the Dutch Data Protection Authority when you have to.
Retention
We keep the books for seven years under the tax retention duty, and for ten years when they concern real estate. After that we delete or return what we no longer have to keep. Correspondence about a call that does not become an engagement is kept for at most twelve months.
Data subject rights
If you receive a request for access, correction or deletion, we help you carry it out for the data we process for you.
End
At the end of the engagement we hand over the books and delete our copies, except what the retention duty still requires.