NLEN
Register

Privacy

Privacy statement

How we handle your personal data, in accordance with the GDPR.

Last updated on 13 July 2026.

Who are we?

This is the privacy statement of Stichting Veilige Bakfiets ("SVB"). SVB is a foundation established under Dutch law with its registered office in Utrecht. SVB is registered in the Commercial Register of the Dutch Chamber of Commerce under number 95871454.

SVB is committed to collectively representing the interests of owners and users of cargo bikes who may have been affected by safety defects or other shortcomings. In doing so, SVB processes personal data.

SVB is the controller within the meaning of the General Data Protection Regulation (GDPR) as described in this privacy policy. Personal data is collected, processed and secured in accordance with the GDPR.

Do you have questions about this privacy statement or about the processing of your personal data? Please contact us using the contact details on our website.

Contact

For questions or comments about the processing of personal data by SVB, please contact: info@veiligebakfiets.nl.

We aim to respond to all questions within one month. It may take us longer than one month if your request is complex or if you have submitted multiple requests. We will notify you of any such delay and the reason for it within one month of receiving your request.

Whose personal data do we process?

We process personal data of:

  • - people who register for a collective action or express their support for it;
  • - (former) owners, users or possessors of cargo bikes covered by an action;
  • - parents or legal representatives of minors, where applicable;
  • - people who sign up for our newsletter or updates;
  • - people who contact us; and
  • - visitors to our website.

Which personal data do we process?

Depending on your relationship with SVB, we may process the following personal data, among others.

Registration for a collective action

When you register, we may process, among other things:

  • - e-mail address;
  • - first and last name;
  • - telephone number;
  • - address and place of residence;
  • - date of birth (if necessary);
  • - date and time of registration;
  • - IP address (possibly hashed);
  • - browser and device data;
  • - browser language settings;
  • - data about the campaign that brought you to our website.

Data supporting your participation

To assess your participation, we may process, among other things:

  • - brand, model and version of the cargo bike;
  • - frame number;
  • - purchase date;
  • - details of the seller or supplier;
  • - proof of purchase;
  • - maintenance or repair records;
  • - correspondence with the manufacturer, dealer or insurer;
  • - photos, videos or other documents relevant to your situation;
  • - other information necessary to assess your participation.

Correspondence

When you contact us, we process, among other things:

  • - your name;
  • - contact details;
  • - the content of e-mails, forms or other messages;
  • - any attachments.

Newsletters

When you sign up for our newsletter, we process:

  • - your e-mail address;
  • - date and time of sign-up;
  • - your communication preferences, where applicable.

Website use

During your visit to our website, we may process:

  • - IP address;
  • - cookie data;
  • - device data;
  • - browser information;
  • - information about the use of the website;
  • - analytical data about the functioning of our website.

Why do we process your personal data?

We process personal data exclusively for the following purposes:

  • registering your support for or participation in a collective action;
  • assessing whether you belong to the group of interested parties;
  • preparing, conducting and concluding collective legal proceedings;
  • informing you about developments within the action;
  • informing you about other actions, where applicable;
  • answering questions and requests;
  • managing our administration;
  • complying with legal obligations;
  • improving our website and services;
  • sending newsletters when you have given consent to receive them.

We process personal data only where there is a valid legal basis for doing so, such as:

  • the performance of an agreement;
  • compliance with a legal obligation;
  • our legitimate interest in the careful performance of our activities;
  • your consent, insofar as this is required. You can withdraw your consent at any time.

How do we obtain personal data?

We receive most personal data directly from you. In addition, where necessary for the conduct of a collective action, we may receive data from, among others, your authorised representative, your lawyer, experts, opposing parties, government bodies, dealers, suppliers or manufacturers, public registers, or parties performing work on behalf of SVB.

With whom do we share personal data?

SVB shares personal data only where this is necessary for the performance of its activities. Personal data may be shared with, among others, lawyers and legal advisers, courts and other competent authorities, external experts, IT and hosting service providers, providers of our claims and communication platforms, administrative service providers, and parties involved in any settlement or the handling of damages.

Where required, we conclude a data processing agreement with parties that process personal data on behalf of SVB.

Transfers outside the European Economic Area

In principle, we process personal data within the European Economic Area (EEA).

Where personal data is nevertheless processed outside the EEA, this only takes place if appropriate safeguards are in place in accordance with the GDPR, such as the European Commission's standard contractual clauses.

How long do we keep personal data?

We do not keep personal data longer than necessary for (the preparation of) legal claims and actions and/or related proceedings or actions, such as (out-of-court) settlements. Where possible, personal data is pseudonymised.

In principle, we apply the following retention periods:

  • Active files: For the duration of the proceedings
  • Archived files: Up to 20 years after archiving
  • Financial records: 7 years
  • Newsletter data: Until unsubscribed;
  • Website and cookie data: Up to 6 months, unless otherwise required.


Where legislation or legal proceedings require a longer retention period, we keep data for as long as necessary. SVB does not use automated decision-making.

Cookies

Our website uses functional cookies that are necessary for the website to work properly.

In addition, we may use privacy-friendly analytical cookies to gain insight into the use of our website and to improve it. Where legally required, we ask for your consent in advance.

Your rights

Under the GDPR you have the right, among other things, to:

  • access your personal data;
  • have personal data corrected;
  • have personal data erased;
  • restrict processing;
  • object to processing;
  • transfer your data;
  • withdraw previously given consent.

To do so, please contact us using the contact details on our website.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-indienen-bij-de-ap).

Security

SVB takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse and unlawful processing.

Changes

SVB may amend this privacy statement.

The most recent version is always published on our website. In the event of significant changes, we will inform those concerned where reasonably possible.