Privacy policy

Kunstuitleen.nl takes the protection of your personal data seriously. This privacy policy explains clearly which data we process, why, how long we keep it, who we share it with and the rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR).

Last updated: 9 October 2026

1. Who are we?

Kunstuitleen.nl is the data controller for the processing of your personal data.

Kunstuitleen.nl
Hendrik Figeeweg 3, 2031 BJ Haarlem, The Netherlands
Phone: +31 (0) 23 211 22 00
E-mail: willem@kunstuitleen.nl
Chamber of Commerce (KvK): 33202103 · VAT: NL0015.25.386.B.09

2. What data do we process and why?

We only process the data needed for the purpose you provide it for.

Contact and enquiries

When you fill in the contact or request form, or call or email us, we process your name, email address, phone number and the content of your message. Purpose: to answer your question and get in touch. Basis: your consent and/or our legitimate interest in handling your enquiry.

With a business enquiry you may optionally attach your current quote or contract. We use it solely to prepare a suitable proposal. We do not store this file on the website; it goes straight to our team as an email attachment and we delete it once it is no longer needed. Attaching it is never required.

Renting art, orders and gift cards

To rent art, arrange a home trial or buy a gift card, we process your name, address, email, phone number and details of your order or agreement. Purpose: performing the agreement, delivery and administration. Basis: performance of the contract and compliance with legal (including tax) obligations.

Payments

Payments are handled by our payment provider Mollie. Your payment details are processed directly by Mollie; we do not store full payment data ourselves. Basis: performance of the contract.

Account and favourites

If you create an account to save your favourites and rooms, we process your email address and the works you save. Purpose: keeping your selection and showing it on all your devices. Basis: performance of the contract (the service you request).

Newsletter and email marketing

Our marketing emails are sent by ActiveCampaign. For this we process your email address, name, language, how you came to us (for example through a home trial or a gift card) and whether you have saved favourites. We also use whether you open our emails and click links, so we can send you emails that suit you better.

• Newsletter, reminders about your saved works and new art: only with your consent (you subscribe or tick the box).
• Tips and new art after a home trial or a gift card purchase: based on our legitimate interest (the so-called soft opt-in for existing customers). You can switch this off when you make the request and you can always object.
• Service emails (confirmations, login links, your gift card) and a review request after you start renting: for the performance of the contract. These service emails are sent through Postmark.

You can unsubscribe with one click at the bottom of every marketing email. We record when and how you gave consent (date, form and the text you saw), without your IP address.

Website, cookies and statistics

We use cookies and similar techniques to make the website work and — only with your consent — to measure usage (including Google Analytics via Google Tag Manager) and to run advertising. You manage your consent via the cookie banner and can change or withdraw it at any time. Basis: your consent for non-essential cookies; legitimate interest for strictly necessary cookies.

3. Who do we share your data with?

We never sell your data. We only share it with service providers that help us run the website and our service (processors), and only for the purposes stated above:

• Mollie — payment processing
• ActiveCampaign — newsletter and email marketing
• Postmark — service emails (confirmations, login links, gift cards)
• Vercel — website hosting
• Neon — database hosting (orders and account data)
• Sentry — tracking down website errors
• Google — statistics and advertising (only after consent)
• CookieYes — managing your cookie preferences

Where the law requires it, we have data processing agreements in place with these parties. We may also share data where we are legally obliged to.

4. Transfers outside the EU

Some of our providers (such as Google, ActiveCampaign and Postmark) may process data outside the European Economic Area, mainly in the United States. This is based on the EU-US Data Privacy Framework or, where that does not apply, the Standard Contractual Clauses approved by the European Commission.

5. How long do we keep your data?

We do not keep your data longer than necessary. Order and payment data is kept for as long as the statutory (tax) retention period of 7 years requires. Contact details and enquiries are kept as long as needed to handle your request and maintain our relationship. Newsletter data is kept until you unsubscribe, or until you have not interacted with our emails or website for two years. Proof of your consent is kept for five years.

6. How do we secure your data?

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secured access to our systems and the principle that only authorised people can access your data.

7. Your rights

Under the GDPR you have the following rights:

• access to the data we process about you;
• correction of inaccurate data;
• erasure of your data (the “right to be forgotten”);
• restriction of, or objection to, processing;
• portability of your data;
• withdrawal of consent previously given.

To exercise any of these rights, email willem@kunstuitleen.nl. We respond as quickly as possible, within one month at the latest. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Changes

We may update this privacy policy from time to time. The most recent version is always on this page, with the date of the last change at the top.