Privacy policy

Kunstuitleen.nl takes the protection of your personal data seriously. This privacy policy explains clearly which data we process, why, how long we keep it, who we share it with and the rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR).

Last updated: 16 July 2026

1. Who are we?

Kunstuitleen.nl is the data controller for the processing of your personal data.

Kunstuitleen.nl
Hendrik Figeeweg 3, 2031 BJ Haarlem, The Netherlands
Phone: +31 (0) 23 211 22 00
E-mail: willem@kunstuitleen.nl
Chamber of Commerce (KvK): 33202103 · VAT: NL0015.25.386.B.09

2. What data do we process and why?

We only process the data needed for the purpose you provide it for.

Contact and enquiries

When you fill in the contact or request form, or call or email us, we process your name, email address, phone number and the content of your message. Purpose: to answer your question and get in touch. Basis: your consent and/or our legitimate interest in handling your enquiry.

With a business enquiry you may optionally attach your current quote or contract. We use it solely to prepare a suitable proposal. We do not store this file on the website; it goes straight to our team as an email attachment and we delete it once it is no longer needed. Attaching it is never required.

Renting art, orders and gift cards

To rent art, arrange a home trial or buy a gift card, we process your name, address, email, phone number and details of your order or agreement. Purpose: performing the agreement, delivery and administration. Basis: performance of the contract and compliance with legal (including tax) obligations.

Payments

Payments are handled by our payment provider Mollie. Your payment details are processed directly by Mollie; we do not store full payment data ourselves. Basis: performance of the contract.

Newsletter

If you subscribe to our newsletter we process your email address (and optionally your name) through ActiveCampaign. Purpose: keeping you informed about new art, offers and events. Basis: your consent. You can unsubscribe with one click in every newsletter.

Website, cookies and statistics

We use cookies and similar techniques to make the website work and — only with your consent — to measure usage (including Google Analytics via Google Tag Manager) and to run advertising. You manage your consent via the cookie banner and can change or withdraw it at any time. Basis: your consent for non-essential cookies; legitimate interest for strictly necessary cookies.

3. Who do we share your data with?

We never sell your data. We only share it with service providers that help us run the website and our service (processors), and only for the purposes stated above:

• Mollie — payment processing
• ActiveCampaign — newsletter delivery and email contact
• Vercel — website hosting
• Neon — database hosting (orders and account data)
• Google — statistics and advertising (only after consent)
• CookieYes — managing your cookie preferences

Where the law requires it, we have data processing agreements in place with these parties. We may also share data where we are legally obliged to.

4. Transfers outside the EU

Some of our providers (such as Google and ActiveCampaign) may process data outside the European Economic Area. In that case we ensure appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

5. How long do we keep your data?

We do not keep your data longer than necessary. Order and payment data is kept for as long as the statutory (tax) retention period of 7 years requires. Contact details and enquiries are kept as long as needed to handle your request and maintain our relationship. Newsletter data is kept until you unsubscribe.

6. How do we secure your data?

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secured access to our systems and the principle that only authorised people can access your data.

7. Your rights

Under the GDPR you have the following rights:

• access to the data we process about you;
• correction of inaccurate data;
• erasure of your data (the “right to be forgotten”);
• restriction of, or objection to, processing;
• portability of your data;
• withdrawal of consent previously given.

To exercise any of these rights, email willem@kunstuitleen.nl. We respond as quickly as possible, within one month at the latest. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Changes

We may update this privacy policy from time to time. The most recent version is always on this page, with the date of the last change at the top.