Privacy policy
Last updated: 7 June 2026
This privacy policy explains how Lowkey processes personal data when you use fiscale-eenheidsverzoek.nl (the “service”).
1. Controller
Lowkey, a sole proprietorship (eenmanszaak) established in Amsterdam and registered with the Dutch Chamber of Commerce (KvK number: 42057580). Contact: info@fiscale-eenheidsverzoek.nl.
2. What data we process
- Signatory contact details: name, phone number and signing date you enter for the parent and subsidiary companies.
- Company data: KvK number, RSIN, statutory name, legal form, registered address and incorporation date. You enter these yourself or we read them from the KvK extract you upload. This is largely public register data of legal entities.
- Uploaded KvK extracts: if you upload an extract to auto-fill the data, we process that PDF. For a scanned (image) file without a text layer we run text recognition (OCR); see section 4.
The service processes no BSNand is intended only for legal entities (BV, NV, cooperative). A legal entity’s RSIN is not a BSN.
3. Purposes and legal basis
We process this data solely to complete and deliver the Belastingdienst forms you request. The legal basis is performance of the contract (Article 6(1)(b) GDPR). We do not use your data for marketing and do not sell it.
4. How we process the data
The data you enter stays in your own browser until you generate the forms. On generation it is briefly sent to our server function to fill the PDFs, then not retained. There is no database.
Filling the forms uses no AI or language model. Only when you upload a scanned KvK extract (an image PDF without a text layer) do we run text recognition (OCR) at a processor within the EU to read the text. The model does not decide any values; the data is then extracted from the text with fixed, auditable rules. The uploaded file is processed solely for this step and kept no longer than needed for it.
5. Sub-processors
We use external processors, all within the EU:
| Category | Purpose | Region |
|---|---|---|
| Cloud infrastructure | Website and server-function hosting, and text recognition (OCR) of uploaded extracts | EU |
| Payment provider | Payment processing | EU |
A current list of the processors we use is available on request via info@fiscale-eenheidsverzoek.nl.
6. Cookies and local storage
We set no tracking or analytics cookies. The service only uses functional browser storage (localStorage) to keep your wizard progress. No consent is required and there is no cookie banner. You can clear this storage at any time via your browser settings.
7. Retention
Wizard data lives only in your own browser and you can clear it yourself. On our side we do not retain the content of your request after the forms are generated. Our payment provider retains payment data under its own statutory periods.
8. Transfers outside the EU
Processing takes place within the EU. Where a processor has a parent company outside the EU, transfers are covered through EU entities, the EU-US Data Privacy Framework and/or standard contractual clauses (SCCs). Your data is not used to train AI models.
9. Your rights
You have the right of access, rectification, erasure and objection. Because we do not retain the content of your request, we can mainly help with questions about contact and payment data. Email your request to info@fiscale-eenheidsverzoek.nl.
10. Complaints
If you have a complaint about how we handle your data, please contact us first. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).