Our data processing agreement (verwerkersovereenkomst) is available in Dutch only. It forms part of the terms: by accepting the terms, at registration or when a new version is published, the customer also concludes this agreement. Switch the language to NL at the top of the page to read the full, binding text.
In short
- JRK Digital Media B.V. processes the bookkeeping data in BTW Kwartier only on the customer's instructions, to prepare the VAT return, and never to train AI models.
- Staff access is limited, confidential and logged; security measures include two-step verification, separation between customers and encryption.
- Subprocessors are listed on the subprocessors page; changes are announced 30 days in advance and the customer may object.
- A data breach is reported to the customer within 36 hours of discovery.
- While the account exists, the files of original documents are deleted automatically 7 years after the end of their quarter. After the subscription ends (or immediately after a deletion request, without refund of prepaid time; for accounts that never paid, after 12 months without login or activity) the account is read-only and the customer has 90 days to export; everyone with access gets an email 14 days before deletion, and then all customer data is deleted (later if a payment is still outstanding). Backups age out within 35 days. We keep only our invoices, records of acceptances and confirmations, a log with references only a record that the deletion took place (dates and counts) and anonymised records of partner firms' fees, for 7 years.
- The statutory retention duty for the business's records stays with the customer.
If the Dutch text and this summary differ, the Dutch text prevails.