Subprocessors

This page lists the parties that process personal data for BTW Kwartier: the subprocessors of JRK Digital Media B.V., and the parties that are themselves responsible for what they do with data. We announce a new or different subprocessor at least 30 days in advance.

Microsoft Azure

Party: Microsoft Ireland Operations Ltd.
Service: hosting of the website and the app, the database, storage of documents and bank statements in Azure Blob Storage, daily database backups (kept for 14 days) and log files.
Location: European Union, West Europe region (the Netherlands).
Data: all data of the service.

Google Cloud Vertex AI

Party: Google Cloud EMEA Ltd.
Service: AI models from Google (Gemini), through Google Cloud Vertex AI, that read invoices, match payments and check the draft.
Location: in the EU (the Netherlands or Belgium, or Google's EU region).
Data: content of documents and transactions, with BSNs and full account numbers masked. Not used to train models.

Email service

Party: Resend, Inc. (United States). Service: sending the emails that belong to the service, such as invitations, login links, notifications, invoices as PDF and emails about a referral, from noreply@btwkwartier.nl. Location: sending through Resend's EU region (Ireland); Resend may also process data in the United States, with the safeguards of the EU-US Data Privacy Framework (Resend is certified) and standard contractual clauses. Data: name, email address, the content of the email and delivery data; no bank statements or documents from your records.

Website statistics

Google Analytics receives no data from the app or from your bookkeeping and is therefore not a subprocessor for customer data. For completeness:

Google Ireland Ltd. (Google Analytics 4): statistics of the public website, only with the visitor's consent in the cookie notice, never in the app behind the login. Google processes this as processor of JRK Digital Media B.V., keeps the statistics for 14 months and may also process data in the United States, with the safeguards of the EU-US Data Privacy Framework and standard contractual clauses. More in the privacy statement.

Independent controllers

These parties are not subprocessors: they decide themselves how they process data, under their own privacy statement.

Stripe Payments Europe Ltd. (Ireland): payments for your subscription. Stripe receives your name, email address and your account or card details and may also process data outside the EU, with the safeguards of the EU-US Data Privacy Framework and standard contractual clauses.
Partner accounting firm: only if you consent to a referral, and only the data shown on the consent screen.
European Commission (VIES): only your customer's VAT number, to check whether it is valid.

Language

This page is available in Dutch, English and Chinese. If the languages differ, the Dutch text prevails.