handtekeningmaken.nl (“we”) processes personal data. The controller is handtekeningmaken.nl, Vrijthof 11, 5081 CA Hilvarenbeek, the Netherlands. KvK 17158679, VAT NL001951535B48. Contact: info@handtekeningmaken.nl.
1. What we process
- Account: name and email address, and whether the account is verified.
- Sign-in: a one-time magic link by email. We store a hash of the token, not a password.
- Orders: company name, address, country, optional VAT number, invoice email and payment status via Mollie.
- Signatures and saved style: the details you enter (name, job title, photo, logo, colours). Photos and logos are embedded in the generated HTML.
- Technical: IP address to limit abuse (login and contact form), and a session cookie to keep you signed in.
2. Why, and on what legal basis
- Creating an account, signing in and storing your signatures — performance of a contract.
- Selling credits, taking payment via Mollie and sending an invoice — performance of a contract and a legal bookkeeping duty.
- Sending login or order emails — performance of a contract.
- Preventing abuse (too many login links or contact messages) — legitimate interest.
- Replying to a contact-form message — legitimate interest, or consent because you contacted us.
3. Who we share data with
We do not sell your data. We only share it when needed:
- Mollie — to process payments.
- SendGrid — to send magic links, invoices and replies to the contact form.
- Our hosting provider, as needed to run the site.
Those parties may only use the data for that job.
4. How long we keep it
- Account, saved style and generated signatures: until you ask us to delete them, or for as long as the account exists.
- Invoices and order data: seven years, as required by Dutch tax law.
- Magic-link tokens: until they are used or expire (30 minutes).
- Contact messages: until we have handled your question, then we delete them from the mailbox when they are no longer needed.
- IP counts against abuse: at most one day.
5. Cookies
We only use a functional session cookie to keep you signed in. No tracking cookies, no marketing pixels. The generator also stores a local flag in your browser (whether you have used your free signature). That stays on your device and is not sent to our server.
6. Your rights
You may access, correct or delete your data, restrict processing, object, and receive a copy (data portability). When signed in you can send a deletion request from your dashboard; otherwise email info@handtekeningmaken.nl. We reply within one month. We keep invoices for seven years because tax law requires it. If you disagree with how we handle your data, you can complain to the Dutch Autoriteit Persoonsgegevens.
7. Security
We use HTTPS, we do not store passwords (magic links only), and session cookies are HttpOnly. Photos in a signature live inside the HTML; only share that HTML with people who may use the signature.
Questions: see the contact page or email info@handtekeningmaken.nl.
