Privacy Statement

1. Who is responsible?

ENCAS is the data controller for the personal data processed through this website. We will publish the full identification of the controller (legal name, place of business and trade register number) at the launch of the service, once those details are final.

2. Which data do we process?

• Account and authentication data: name, email address, login credentials, sessions and security events (such as sign-in attempts) when you create an account or sign in.
• Technical server logs: IP address, browser or device type, pages requested and timestamps, processed automatically to deliver and secure the site.

We do not place marketing or tracking cookies and run no analytics tools. The only cookies used are functional: keeping your session alive after you sign in.

3. For what purpose and on what legal basis?

• Accounts and access: creating and securing your account (basis: performance of a contract, or your consent upon registration).
• Availability and security of the site: technical logs (basis: legitimate interest — a secure and stable website).

4. Service providers (processors)

• Cloudflare — hosting and delivery of this site, including technical log data for security and availability.
• Clerk — authentication: account data, sessions and security events, solely for signing in.

Processor agreements with these parties have been concluded or will be concluded before launch. Once payment processing (Stripe) and case-file processing are activated, we will extend this list.

5. Retention periods

We keep account data for as long as your account exists, and thereafter only where legally required. Technical logs are kept no longer than necessary for security and stability.

6. Your rights

You may ask us for access to, rectification, erasure or restriction of your personal data, as well as data portability or withdrawal of consent given. To submit such a request, use the contact channel published on this site at launch. We respond within the statutory period of four weeks.

If you believe we are not handling your data correctly, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Further at launch

When ENCAS starts handling collection case files, a supplementary statement will apply to the processing of case-file data, together with the division of roles: your company remains the data controller for the debtor data you provide; ENCAS processes it as a processor under a data processing agreement.