Privacy policy
We ask for as little as possible. You make free cards without an account and without an email address. Only a paid order needs your email address.
DraftThis text is a draft and is still under legal review. Details in [brackets] are yet to be completed.
1. Who is responsible?
bingomaken is a service of [to be completed: legal name]. We are the controller for the processing of personal data described in this policy.
- Trade name
- bingomaken
- legal name
- [to be completed: legal name]
- address
- [to be completed: address]
- Chamber of Commerce number
- [to be completed: Chamber of Commerce number]
- VAT number
- [to be completed: VAT number]
- email address
- [to be completed: email address]
Questions about privacy? Email [to be completed: email address] or use the contact form.
2. Which data do we process?
That depends on what you do:
- Free cards (1–9): no name, email address or account. We do process the content of your design (the song list, your texts and any logos or photos) to make the PDF.
- Paid order: your email address, the country for VAT, your order and the payment status. Only if you want an invoice in a company name: company name and VAT number.
- Contact form: your name, email address and message.
- Spotify playlist: the link you paste and the titles and artists we fetch with it. That is data about the playlist, not about your Spotify account.
- Technical data: IP address, time and browser type in server logs, to secure the site and limit abuse.
Payment details such as your account or card number never reach us; Mollie processes them.
3. For what purpose and on what legal basis?
- Making and delivering your cards, and answering questions about your order: performance of the contract.
- Keeping records and invoices: legal obligation.
- Securing the site and preventing abuse and fraud: legitimate interest.
- Showing the Spotify player and keeping visitor statistics: only with your consent, which you can withdraw at any time.
We do not use your email address for newsletters or advertising.
4. How long do we keep data?
- PDF files: available for 30 days, then deleted. For a paid order we keep your design, the song list, uploaded logos and photos and your email address until 90 days after payment, so we can make your files again in that period through your order link. After that we delete this data. For a free download we keep nothing longer than 30 days.
- Order and invoice records: 7 years, because of the statutory tax retention period.
- Messages sent through the contact form: [to be completed: period] after handling.
- Server logs: [to be completed: period].
- Your design draft and your cookie choice exist only in your own browser, until you clear them.
6. Your rights
You may ask us for access to, correction or deletion of your data, for restriction of processing or for transfer of your data. You can also object to processing based on legitimate interest and withdraw consent you have given.
Send your request to [to be completed: email address]. We respond within one month. If you disagree with us, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
7. Security
Files are kept in private storage and can only be reached through a personal link that cannot be guessed and expires after 30 days. The connection to the site is encrypted. Keep your download link safe: anyone with the link can open the files.
9. Changes
We update this policy when the service changes. The date at the top shows which version you are reading.