Contents
Introduction
Personal data is processed as part of the services provided by 42 BV (also referred to as “we” or “us”). This Privacy and Cookie Policy informs you about the use of your personal data and your privacy rights when 42 BV qualifies as a “controller” under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) for the processing of personal data relating to, among others, customers and website visitors.
42 BV may also qualify as a “processor”. This is the case when you have us process personal data through our SaaS solutions, including Normatik. We therefore enter into data processing agreements with our customers. This Privacy and Cookie Policy does not apply to the processing of personal data by our customers through our SaaS solutions.
Our websites may also contain links to other websites. 42 BV is not responsible for the processing of personal data on those websites.
Please feel free to contact us if you have any questions:
42 BV
Zilverstraat 1
2718 RP Zoetermeer
Phone: 088 - 42 42 042
Email: info@42.nl
1. Which personal data do we process?
Depending on our relationship with you, we process certain personal data.
Customers
We process the following categories of personal data relating to our current and former customers and their contacts:
- Identity and address details (surname, first names, initials, title, gender, address, postcode and place of residence) as provided by the customer;
- Other contact details (telephone number, email address and similar details needed for communication) as provided by the customer;
- Data for calculating and recording fees and making payments, including bank account numbers;
- Other data whose processing is required to comply with applicable legislation or regulations.
Third parties
We may also process personal data relating to third parties, such as prospective customers and website visitors:
- Identity, address and contact details, insofar as disclosed to us;
- Information collected during visits to our websites, including IP addresses;
- Data needed to maintain contact;
- Other data from public sources or provided by third parties.
2. Legal bases and purposes
We process your personal data on one or more of the following legal bases:
- (a) Necessary for the performance of a contract or pre-contractual steps;
- (b) Necessary to comply with a legal obligation;
- (c) Necessary for our legitimate interests or those of a third party;
- (d) With your consent.
Where we process your personal data based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
We use the personal data described above for the following purposes:
- Providing the requested services, including Normatik and handling quotations (a, b, c);
- Developing new products and services and improving our websites (c);
- Our administration: fees, expenses, payments and collection (a, b, c);
- Handling complaints and disputes (a, b, c);
- Contact in response to questions, comments or the exercise of privacy rights (c);
- Direct marketing and related activities (c, d);
- Audits and internal controls (a, b, c);
- Complying with legal and statutory obligations (b, c).
3. With whom do we share your personal data?
42 BV does not disclose your personal data to third parties unless necessary for the purposes described, required by law or authorised by your consent.
We may share your personal data with:
- Suppliers, such as software suppliers, legal advisers and accountants;
- Legal successors in the event of an acquisition or merger;
- Courts and government bodies;
- Other parties, such as regulators, where required by law or with your consent.
When transferring personal data outside the European Economic Area, we ensure appropriate safeguards in accordance with applicable legislation and regulations.
4. How long do we retain your personal data?
42 BV retains your personal data no longer than necessary for the purposes described. Specifically:
- Tax-relevant data: 7 years (under Article 52 of the Dutch General Taxes Act);
- Complaint data: up to 6 months after the complaint or legal proceedings have concluded;
- Contact requests: up to 6 months after your request has been handled;
- Job application data: up to 4 weeks after the procedure ends, or 1 year with your consent;
- Newsletter data: until you unsubscribe.
These periods may be extended where statutory retention obligations apply or to pursue legitimate interests, such as resolving legal disputes.
5. Security
42 BV has implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against loss, destruction, damage, alteration or disclosure. These measures are regularly evaluated and updated where necessary.
Access to your personal data is arranged so that only authorised employees have access, insofar as necessary to perform their duties.
Our websites are secured so that personal data is transmitted through a secure connection.
For questions about security or suspected misuse: info@42.nl.
6. Cookies
Our website uses cookies, small text files placed on your device, and similar storage technologies such as localStorage. On your first visit, a cookie banner asks whether you consent to non-essential cookies. Until then, we only place the necessary items listed below.
We use Google Consent Mode v2: even after you consent, IP addresses are anonymised before reaching Google, and analytics and marketing cookies remain blocked when you choose “Reject”.
Necessary cookies and storage
These items are needed for the website to function and to remember your cookie choice. Consent is not required for necessary functionality.
Analytics cookies (consent required)
When you choose “Accept”, we place analytics cookies through Google Analytics 4. These provide an aggregate view of which pages are visited and the routes visitors take — not who you are. We do not share individual profiles with Google and we use IP anonymisation.
Marketing/attribution cookies (consent required)
With your consent, we measure whether visitors arriving through a Google Ads campaign also contact us. We do not use profiles for ad targeting; this cookie is used solely for click-to-conversion attribution.
What we do not do
- We do not place social media tracking cookies from Facebook, LinkedIn or similar services.
- We do not use fingerprinting or similar alternatives to cookies to track you anyway.
- We do not share personal data with data brokers or advertising networks.
- We do not use cookies for profiling or automated decision-making within the meaning of Article 22 GDPR.
Changing or withdrawing your choice
You can review your previous choice at any time using the “Cookie settings” link at the bottom of every page. Clicking it reopens the cookie banner so you can choose again whether to consent. Your new choice applies from that moment.
Deleting cookies through your browser
Alongside our own preference setting, you can delete cookies or block new cookies through your browser. Please consult your browser's instructions:
More general information about cookies is available from the Dutch Consumers' Association or through Your Online Choices.
7. Your privacy rights
You have the following rights concerning 42 BV's processing of your personal data:
- The right to access your personal data;
- The right to rectify inaccurate or incomplete personal data;
- The right to have your personal data erased (“right to be forgotten”);
- The right to object to processing or restrict it;
- The right to withdraw consent;
- The right to data portability.
42 BV does not use automated decision-making within the meaning of Article 22 GDPR.
To exercise your rights, contact us using the details at the top of this policy. We will inform you no later than one month after receiving your request. More information is available on the website of the Dutch Data Protection Authority.
8. Complaints
If you have a complaint about the processing of your personal data, 42 BV would like to work with you to resolve it. If this does not produce the desired result, you have the right to lodge a complaint with the Dutch Data Protection Authority.
9. Changes
This Privacy and Cookie Policy was last amended on 13 May 2026. 42 BV reserves the right to amend it. The latest version will always be published on this website. Where substantial changes may significantly affect data subjects, we aim to inform them directly.