Privacy policy
www.hoejijwerkt.nl, a service of Human Design voor Bedrijven
This privacy policy applies to www.hoejijwerkt.nl and the reporting tool that runs on it: the online tool that creates a personal report from your birth details. It explains which data we process, why, how long we keep it and what rights you have.
We have written a separate cookie policy about the cookies we place. You can find it at www.hoejijwerkt.nl/cookieverklaring.
Who is responsible for your data
Human Design voor Bedrijven is the data controller for the data processed through the reporting tool.
Human Design voor Bedrijven
Vughterstraat 266, 5211 GR ’s-Hertogenbosch, the Netherlands
Chamber of Commerce (KvK) number: 42196269
Email: info@hdvb.nl
Which data we process and why
We process no more data than needed to create and deliver your report.
| Data | Purpose | How long we keep it |
|---|---|---|
| Date, time and place of birth | Calculating your report | Not stored separately. They do not go into our database or into log files. They exist only in your report itself, which is kept encrypted for 30 days |
| Your name | Your name appears on your report | Only in your report itself, so 30 days |
| Email address | Delivering your report and contacting you if something goes wrong with your order | 30 days after delivery of your report |
| Your report (PDF) | So you can download it again within 30 days using the link in your email | 30 days, encrypted. The key exists only in your link; we cannot open the file ourselves |
| Payment details | Processing your payment | We only see whether a payment succeeded. Account numbers and card details never reach us |
| Invoice and transaction data | Keeping our accounts | 7 years, because of the legal retention period for tax purposes |
| IP address and technical log files | Keeping the tool running, fixing faults and preventing abuse | At most 7 days, then deleted automatically |
| Email address for the newsletter, with the moment you signed up, which report you ordered, if any, and the link you came through; the IP address of your sign-up goes to Laposta | Sending you the newsletter, and being able to show that you gave your consent yourself | Until you unsubscribe |
| Email address of a client invited by a coach | Sending the invitation | Until the invitation is used or expires, at most 30 days |
| Request by an employer: company name, contact person, email address, phone number and the number of reports | Answering the request and issuing a quote | As long as needed for the quote and our accounts |
| Coach account: company name, invoicing details, logo and an overview of requested reports | Invoicing and accounts | As long as your account exists, plus the legal retention period for accounts |
We never ask for data about your health, religion, origin or other special categories of personal data, and the report makes no statements about them. The report is not medical or psychological advice.
Your birth details
We use your date, time and place of birth solely to calculate your report. We do not store your birth details separately: they do not go into a database or into log files. Your report is kept encrypted for 30 days and is then gone. If you want a new report after that, you enter your details again.
Your report
Your report is created, sent to you and then kept encrypted for 30 days, so you can download it again with the link in your email. The key to open the file exists only in that link; we do not keep that key and so cannot view your report ourselves. After 30 days the file is deleted automatically. So keep your report safe yourself: after that we cannot look it up or resend it, and a new order is the only way.
Technical log files
On every visit our server records technical data: the time, which page was requested (without identifiers or codes) and whether that succeeded. This is needed to keep the service running, fix faults and prevent abuse. We store IP addresses in shortened form, so they cannot be traced to an individual. We keep full server logs for at most seven days; after that they are deleted automatically. These log files contain no birth details and no report content.
The newsletter
You can sign up for our newsletter through the sign-up box on the site, or by ticking a box when ordering. If you do, we keep your email address, the moment you signed up, which report you ordered, if any, and the link you came through. Laposta receives the same data plus the IP address you signed up with, to be able to show that the sign-up came from you. We send the newsletter with Laposta, a Dutch service. Without that tick we use your email address only to deliver your report. At the bottom of every newsletter is an unsubscribe link; if you unsubscribe, we delete your data from that list.
Coaches with an account
If you work as a coach with an account, we also keep your company name, your invoicing details, your logo and an overview of the reports you have requested. That overview is needed for invoicing and for our own accounts. We keep this data as long as your account exists, plus the period that tax law requires us to keep our accounts.
The birth details you enter as a coach for a client are treated exactly as described above: they are not stored separately and the report is deleted after 30 days. As a coach you are responsible for making sure your client knows you enter those details and agrees to it.
Our legal basis for this
The General Data Protection Regulation (GDPR) requires a legal basis for each processing operation. We rely on:
- Performance of the contract: without your birth details and email address we cannot create or deliver your report.
- Consent: for the newsletter, which you only receive if you sign up for it yourself. You can withdraw that consent at any time.
- Legal obligation: we are required to keep our invoices and accounts for seven years.
- Legitimate interest: we retain limited technical data to keep the tool secure and working.
Where your data is processed
The tool runs on Scaleway servers in Amsterdam and your report is calculated there too. The email that delivers your report also goes through Scaleway within the European Union. So your birth details and your report are processed only within the European Union.
There is one exception. If you reach us through a forwarding address, such as hoejijwerkt.nl without www, that redirect goes through redirect.pizza by Enflow. That service runs at a hosting provider in the United States. Only the web address you request is passed on, together with your IP address and browser type; your birth details, your report and your email address never pass through there. For that transfer we rely on the standard contractual clauses of the European Commission.
Who we share your data with
We do not sell your data and do not use it for advertising. We do use a number of service providers that process data on our behalf. We record our agreements with them in a data processing agreement.
- Scaleway, for the servers, the database and sending your report by email
- Mollie, for processing your payment
- Laposta, for sending the newsletter, only if you have given your consent
- Enflow (redirect.pizza), for forwarding visitors from our forwarding address to the tool
Mollie also processes data itself during a payment, including your IP address. Mollie's privacy policy applies to that.
The domain name hoejijwerkt.nl is registered through mijndomein.nl. No data of visitors to the tool is processed there.
We may also share data when we are legally required to, for example when a competent authority demands it.
Calculated automatically, not assessed automatically
Your report is compiled automatically from your birth details. The calculation uses no AI; the texts were rewritten with the help of a language model and then edited and approved by us. The language model never sees your data: the texts were ready before you requested your report. No decision about you is made on the basis of the report, and it has no legal effect. So there is no automated decision-making within the meaning of Article 22 GDPR.
Cookies
We only use cookies that are needed to make the tool work. We place no cookies to track you, show advertisements or analyse your behaviour. So there is no third-party advertising or analytics service on this website. You can read exactly which cookies these are and how long they stay in our cookie policy.
On the introductory call page we do keep a simple counter of how often the page is opened. That counter only counts up, without a cookie and without storing your IP address or other data, so it cannot be traced to you or to an individual visit.
How we protect your data
All traffic between your device and the tool is encrypted over a secure connection. Your report is also stored encrypted while it is available. Access to our systems is limited to the people who need it. Because we do not store your birth details separately and delete reports after 30 days, there is no growing collection of data that could leak.
Should something nevertheless go wrong with personal data, we report it where required to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and inform the people concerned.
Your rights
Under the GDPR you have the following rights:
- Access to the data we hold about you
- Correction of data that is incorrect
- Deletion of your data
- Restriction of processing
- Objection to processing
- Transfer of your data to yourself or to another party
To use any of these rights, send a message to info@hdvb.nl. We respond within a month. Because we do not store your birth details separately, we no longer have them outside your report. If your report is older than 30 days, it has already been deleted automatically. If you want it gone sooner, we delete it at your request.
If you disagree with how we handle your data, we would like to hear it from you first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We may change this privacy policy, for example when the tool changes. The current version is always at www.hoejijwerkt.nl/privacyverklaring.
Version 1.0, last updated on 10 November 2026