privacy.

rondje b.v. · utrecht is responsible for your data (the data controller). questions about your data? email privacy@rondje.nl; for anything else hallo@rondje.nl.

from the giver: your name, your email address and your mobile number (which you confirm with a code). we use these for your confirmation, to find your rondje again, to let you know what the other person picks, and to log in later.

from the recipient: the name the giver fills in and, if the recipient adds it themselves, an email address for the confirmation. we never send the recipient anything on our own initiative.

what you choose: the idea, the place, the moments and what you put on the card (text, gif, video). only someone with the link, or the card with the pin, can see it.

you only get messages about your rondje and tips and offers if you tick the box for them yourself. both are off by default and you can always switch them off again.

a video on your card is stored and converted by cloudflare stream, so it plays on any phone. if you remove the video or delete your rondje, we remove it there too.

what you type into the idea machine is sent to anthropic (claude) to help think along. we don't send a name, email address or number with it; please don't type any personal data there yourself either. anthropic does not use it to train models.

for places and events we search openstreetmap, google and ticketmaster. we only send the search term and the town, never who you are.

we only use your location if you tap for it yourself, to find places nearby. it stays on your device; only a rounded-off area to search around is sent to us.

you log in with your email address and a password, or with a code via whatsapp. we never store your password in readable form, only as a salted hash: a one-way check value. forgot your password? we email you a link that works once, for one hour; we also only store that as a check value.

we use your number for the one-time code and for messages about your own rondjes. we don't store the code (only an unreadable check value, valid for 10 minutes). we record when you gave permission and when you sent stop.

messages go through whatsapp by meta; meta sees that we send you a message.

we work with a few parties that process data for us, under a data processing agreement. per party, what they get:

netlify: the website, the servers rondje runs on (in frankfurt) and our database and storage (netlify's database runs at neon, also in the eu). like any web host, netlify sees your ip address when you open the site.

our customer service: all our emails (and whatsapp messages) go through rondje's own helpdesk, which sends and keeps them so we can answer your questions. if you ask customer service a question, an ai assistant (claude by anthropic) helps with the answer.

google analytics: how the site is used, without your name or ip address, and only if you say yes.

our own measurement: we count ourselves, without cookies and without ip addresses, how the site is used (see cookies).

anthropic (claude): the idea machine and the suggestions. we only send the text you type, no name, email address, number or other account details.

meta (whatsapp): the login codes and the messages about your rondjes, if you switch them on.

openstreetmap, google places and ticketmaster: looking up towns, places and events. only the search term and the town, never who you are.

giphy: the gifs on a card. when you make a card we look for a fitting gif, and you can search for one yourself. giphy only gets the search term and, like any site, sees your ip address.

cloudflare: videos on a card (stream) and the bot check (turnstile).

print.one: only if you have a card sent by post. print.one then gets the card, the name and the address to print and send it.

some of these parties are (also) based outside the eu, such as in the us. the standard contractual clauses of the european commission apply to that.

we keep a rondje together until one year after the chosen moment, or after the last day to choose. after that we delete it, including the video. a receipt photo (for an old rondje) is read and then deleted immediately.

you can always see what we have on you, and have it corrected or deleted. you delete your account yourself via my rondje; for everything else, email privacy@rondje.nl. if you disagree with us, you can file a complaint with the dutch data protection authority (autoriteit persoonsgegevens).