This is a translation of the Dutch original. In the event of any discrepancy between this translation and the Dutch text, the Dutch version prevails.

Who we are

Taxua is the trading name of Dazh B.V. (Chamber of Commerce number 98371819), established in Heemstede. Dazh B.V. is the controller for the personal data described below. Our contact details are at the bottom of this privacy policy.

What data we collect

In order to provide our tax advice and bookkeeping services, we process:

Name, address, e-mail address, telephone number
Citizen service number (BSN)
Financial data (income, expenses, bank details, annual accounts and the like)
Other data you provide through our forms or during consultations

Are you obliged to provide this data?

Yes, for the most part. Without your BSN and financial data we cannot file a tax return for you or keep your books — this data is legally required for these services. If you do not provide it, we cannot (fully) perform the agreed service.

Why and on what basis we process your data

We process your data for the purposes below, in each case on the basis of article 6 GDPR:

Tax return and bookkeeping services, communication about them, processing payments — performance of the agreement (article 6(1)(b) GDPR)
Filing your tax return with the Dutch Tax Administration, and complying with our own obligations under the Wwft (including client due diligence and the associated retention obligation) — legal obligation (article 6(1)(c) GDPR)
Improving our services — legitimate interest (article 6(1)(f) GDPR), on the basis of anonymised or aggregated data where possible

Processing of your BSN

Your BSN is sensitive personal data. Under article 46 of the Dutch GDPR Implementation Act (UAVG), organisations outside government may process the BSN only where a law specifically prescribes it. We process your BSN solely:

because the Dutch State Taxes Act (AWR) and tax legislation require the BSN to be stated when filing your tax return, and
because it is necessary for the performance of our legal obligations as tax adviser/bookkeeper towards the Dutch Tax Administration.

We do not use your BSN for any other purpose (such as internal administration, customer numbers or communication) and share it solely with the Dutch Tax Administration, as legally required.

Automated decision-making

We do not use automated decision-making, including profiling, that has legal consequences for you or otherwise significantly affects you.

Cookies

Our website uses essential cookies to guarantee that it works properly. We do not use tracking cookies or third-party advertising cookies. Analytical cookies are placed only with your explicit consent.

Data sharing

We do not sell your personal data. We may share your data with:

The Dutch Tax Administration, as legally required for filing tax returns
Payment processors for handling transactions
Our hosting and infrastructure providers, bound by data processing agreements

We do not transfer personal data to countries outside the European Economic Area (EEA). Should this change in the future, we will amend this privacy policy and inform you about the safeguards put in place.

Retention periods

Please note: the statutory 7-year tax retention obligation (article 52 AWR) rests on you as an entrepreneur, not on our office. You remain responsible for retaining your own records. Our office applies the following retention periods to the data we process on your behalf:

Client due diligence data (Wwft) — name, date of birth, address, a copy or the details of the identity document with which we verified your identity, and (where applicable) UBO data and the established nature and purpose of our business relationship: up to 5 years after the end of our business relationship with you, as we are legally required to do as a Wwft institution (article 33 Wwft).
Financial and administrative data we process on your behalf (invoices, ledger, tax return data, the BSN in that context): we retain these for the duration of our services and for 2 years thereafter, so that you and we can fall back on this data in the event of an audit by the Dutch Tax Administration. This is a practical/contractual arrangement, not a direct tax obligation resting on us — you remain responsible for complying with your own 7-year retention obligation.
Contact details and correspondence that do not form part of your file (for example via the contact form with no follow-up): a maximum of 2 years after the last contact, unless you request erasure sooner.
After these periods expire, your data is deleted or destroyed, unless a longer retention period is legally required or necessary to defend against possible liability claims.

Your rights (GDPR)

Under the General Data Protection Regulation (GDPR) you have the right to:

Request access to your personal data
Request rectification of inaccurate data
Request erasure of your data (right to be forgotten) — note: this right is limited for as long as the data is still needed to perform our services, or for as long as we must retain it under the Wwft (5 years) or other legal obligations
Request restriction of processing
Data portability — to receive your data in a structured format
Object to the processing of your data (in particular where processing is based on legitimate interest)
Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal

Contact

To exercise your rights or ask questions about our privacy practices:

E-mail: [email protected]
Telephone: +31 6 57979174
Address: Franz Lehárlaan 100, 2102GV Heemstede, the Netherlands

Supervisory authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Privacy Policy