DRAFT: to be reviewed by a lawyer before the site goes live. Fields in [ ] still need to be completed. The Dutch version is legally binding.

Privacy statement

Version of 19 October 2026

Who are we?

Voorouderboek (voorouderboek.nl) is a service of TOITAMTO Joanna Osienkiewicz, [address], Poland, VAT number PL8733033519. We are the data controller responsible for processing your personal data. Questions? Email [email address].

What data do we process?

• Your email address, if you leave it yourself to be notified when Voorouderboek launches.
• Your consent choices: whether we may email you once at launch, and whether you also want to receive tips and offers. We also keep the date and the version of the consent text.
• Surnames and a place, if you enter them in the form for the free trailer. We don't ask for first names or dates of birth of living people.
• The country you signed up from (derived by our hosting provider, without storing your IP address).

The surname you type in the search box is passed on via our server to Open Archives (openarchieven.nl). We only keep the surname with the number of records found (for 7 days, so we don't have to ask Open Archives again each time), not who searched for it. Your browser also keeps the result in local storage for up to 7 days.

What do we use it for?

• To email you when Voorouderboek launches, with your discount code and, if you filled in the form, your free trailer. Legal basis: your consent (Article 6(1)(a) GDPR).
• Only if you tick the separate box: occasional tips and offers. Legal basis: your consent.

We don't sell your data or share it with others for their own purposes.

How long do we keep it?

Until you unsubscribe, and no later than [31 March 2027] if you don't order anything from us after launch. After that, we delete your data.

Statistics without cookies

We use Cloudflare Web Analytics. It works without cookies and without following you on other sites. We also count, per day, how often someone views a page, plays the trailer or fills in a form, for example. These counters contain no personal data.

Protection against spam

Our forms use Cloudflare Turnstile. It checks whether a person or a bot is behind the screen, without puzzles and without advertising cookies. To limit abuse, we keep track of how often a form is sent from each IP address. For this we only store an unrecognisable (hashed) version, which is deleted after a short time.

Who helps us?

The site, the spam check and the sign-up database (Cloudflare D1) run on Cloudflare, Inc. (processor). Cloudflare may process data outside the EU. This is covered by the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.

Information about your ancestors

We use public civil records. Information about deceased people is not personal data within the meaning of the GDPR. We don't publish information about living people.

Your rights

You may view, correct or delete your data and withdraw your consent at any time. To do so, email [email address]. Every email from us also contains an unsubscribe link. Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).