Privacy Statement

Data Controller

Eindstation.nl, registered at the Dutch Chamber of Commerce under number 97533327, is the data controller within the meaning of the General Data Protection Regulation (GDPR). For questions about this statement or your personal data, please contact us at [email protected].

What data do we collect?

Eindstation.nl does not collect personal data from visitors unless you voluntarily provide it (for example, via email or newsletter signup). We do not process financial data and do not store insurance details. When you select your age for personalized premium calculations, this is processed locally in your browser only and is not stored on our servers.

Legal basis for processing

We process personal data on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): for sending newsletters if you have subscribed. You may withdraw consent at any time by unsubscribing.
• Legitimate interest (Art. 6(1)(f) GDPR): for handling contact requests via email, enabling us to respond to visitor enquiries.

Our website statistics (Umami Analytics, self-hosted) are fully anonymous and contain no personal data. The GDPR does not apply to this data (Recital 26 GDPR).

Cookies and analytics

Eindstation.nl places one functional cookie (NEXT_LOCALE) to remember your language preference. We do not use Google Analytics or any other third-party tracking services. Our website statistics are collected via Umami Analytics, a privacy-friendly, self-hosted analytics system that operates without cookies and does not process personal data. When you click a referral link to an insurer, affiliate cookies may be placed by the partner programme of the respective insurer. See our cookie statement for more information.

Commercial relationships and data transfers

Eindstation.nl contains affiliate links to insurance providers. When you take out insurance or request a quote through our links, we receive a commission from the affiliate network. This does not affect our independent comparison or the price you pay. Your click behaviour may be shared with the affiliate network for commission processing purposes. No personal data is sold or shared with third parties for marketing purposes.

Data retention

• Anonymous website statistics (Umami): maximum 26 months.
• Newsletter email addresses: until unsubscription.
• Contact requests via email: maximum 12 months after resolution.

We do not retain personal data longer than necessary for the purpose for which it was collected.

Security

Our website uses SSL/TLS encryption (HTTPS) to secure the connection between your browser and our server. We take appropriate technical and organisational measures to protect data against unauthorised access, loss, or misuse.

Minors

Eindstation.nl is not directed at persons under the age of 18. We do not knowingly collect data from minors. If you suspect that we have collected data from a minor, please contact us at [email protected] so that we can delete this data.

Your rights

In accordance with the GDPR, you have the following rights:

• Access to your data
• Rectification of inaccurate data
• Erasure ('right to be forgotten')
• Restriction of processing
• Data portability
• Objection to processing

Because we process very little personal data, these rights are of limited practical relevance. Contact us at [email protected] for privacy questions. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).