Privacy Policy

Last updated: 04/08/2026.

1. Who is responsible for your data

Passim IT, Damien Claassen, Burgemeester Hermsenstraat 39, 6566 AB, Millingen aan de Rijn, Netherlands, KVK 97583685, is the controller for the personal data described here. Contact: [email protected].

We are not required to appoint a Data Protection Officer and have not appointed one. Damien Claassen handles privacy questions personally.

What we collect, why, and on what basis
Data Why Legal basis Kept for
Name, email, address, country To create your account, deliver the service and invoice you Performance of a contract (Art. 6(1)(b)) Duration of the account, then 7 years for invoicing data as Dutch tax law requires
Payment details To take payment. We never see or store your card or bank details; these are handled by Mollie and PayPal Contract, and legal obligation for invoice records Transaction records: 7 years
IP addresses and connection logs Security, abuse investigation, troubleshooting Legitimate interest (Art. 6(1)(f)) in keeping the platform secure 30 days, unless retained for an active abuse investigation
Support tickets and their contents To help you and to keep a record of what we agreed Contract 24 months after the ticket closes
Server and application logs Diagnosing faults, capacity planning Legitimate interest 30 days
Backups containing the above Disaster recovery Legitimate interest Per our retention cycle, currently up to 6 months
Website analytics Understanding how many people visit which pages Legitimate interest. We use Cloudflare Web Analytics, which sets no cookies and does not track individuals Aggregated, 6 months

We do not sell your data. We do not use it for advertising. We do not profile you and we make no automated decisions with legal effect about you.

2. Cookies

We use only cookies that are strictly necessary for the website to work: a session cookie and a CSRF security token. These are exempt from consent requirements because the site cannot function without them.

We do not use advertising or tracking cookies. Our analytics provider does not set cookies.

3. Who we share it with

We use the following processors and suppliers. Each processes data only on our instructions, under a data processing agreement, and only as much as their function requires.

Party Function Location
Mollie B.V. Payment processing (iDEAL, card, bank transfer) Netherlands
PayPal (Europe) S.à r.l. Payment processing Luxembourg
Microsoft Ireland Operations Ltd Email (Exchange Online) EU
Hetzner Online GmbH Server infrastructure and off-site backup storage Germany
ExtraIP B.V. IP address routing Netherlands
Cloudflare, Inc. DNS, CDN, DDoS protection, cookieless analytics Global, under EU SCCs.

Where a processor is outside the EEA, transfers are covered by Standard Contractual Clauses or an adequacy decision.

We will disclose data to authorities where we are legally required to. We will tell you if that happens, unless we are prohibited from doing so.

4. Your rights

You may ask us to: give you a copy of your data, correct it, delete it, restrict how we use it, port it to another provider, or object to our processing on legitimate interest grounds. Where we rely on consent, you may withdraw it at any time.

Email [email protected]. We respond within one month. There is no charge unless a request is excessive.

If you are unhappy with how we handle it, you may complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the supervisory authority in your own EU country.

5. Data you put on our servers

If you run a game server, a website or a database with us, you may collect personal data about your own users. For that data, you are the controller and we are the processor. You are responsible for having a lawful basis, for informing your users, and for answering their requests. Our data processing agreement covers our obligations to you. Ask for it at [email protected].

6. Security

We keep your data on encrypted, access-controlled infrastructure in the Netherlands, with encrypted off-site backups. Access is limited to Damien Claassen. We apply security updates to our panel and platform software weekly.

No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and tell you without undue delay.

7. Children

Our services are not directed at children under 16. We do not knowingly create accounts for them. If you believe we hold a child's data, contact us and we will delete it.

8. Changes

We will post changes here and update the date. For material changes we will email you.