Data processing agreement

This data processing agreement is part of the Goldmary terms. It applies automatically to every account, including free ones. There is nothing to sign.

You, the business using Goldmary, are the controller of the personal data you put in the app, such as your customers' details. Het Accu Huis B.V. (KvK 88977757), which offers Goldmary, is the processor under article 28 GDPR.

Goldmary processes that data only to provide the service: keeping your books, making and sending invoices and quotes, storing receipts, preparing reports and returns, and helping you. Not for its own purposes, not for advertising, and it never sells data.

Everyone at Goldmary with access is bound to confidentiality. Goldmary only looks at your data when you ask, to fix an outage or a security problem, to prevent abuse, or when the law requires it. Only Goldmary's own administrators can reach the Cloudflare account it runs in. The database and files are stored in the EU at Cloudflare, every connection is encrypted, and each administration is visible only to its owner and the people the owner invites.

You give general permission for the subprocessors below (article 28(2) GDPR). The ones that are off today are announced here, and may be switched on without a further notice; you can object now. A subprocessor that is not in the annex is announced at least 14 days ahead by e-mail or in the app and on this page; if we cannot resolve a well-founded objection, you can end the agreement.

A data breach affecting your data is reported to you without undue delay; we aim to do so within 48 hours. You get what you need to notify the Dutch Data Protection Authority within 72 hours.

We help with data subject requests. You can download your data at any time. You can erase your account yourself in the app; database recovery points then expire within 30 days. Audits: documentation first, then at most one independent audit a year at your cost. Liability follows the terms. Dutch law applies.

The Dutch text is the agreement; this is a summary. Read the Dutch version. Questions go to hello@goldmary.eu.

Annex: subprocessors

These parties receive data from Goldmary. The list follows what the code does today. What is switched off today is listed too, marked as off.

Subprocessors in use today

• Cloudflare, Inc. In use

  What for

  Runs the site and the app (Workers). Stores the database (D1) and the files, such as receipts and logos (R2). Writes the answers of the site assistant and the in-app help (Workers AI). The receipts mail address (Email Routing) is not switched on yet.

  Which data

  Everything in Goldmary. For the assistant and the help: your question and the conversation.

  Where

  The database and the files are stored in the EU (Cloudflare's EU jurisdiction). A visit arrives at the nearest Cloudflare server, which can be outside the EU. Workers AI is not guaranteed to run in the EU.

  Outside the EU

  Cloudflare, Inc. is a US company. Transfers outside the EU are covered by the European Commission's standard contractual clauses in Cloudflare's data processing addendum.

• Microsoft Ireland Operations Limited In use

  What for

  Receives mail addressed to hello@goldmary.eu (Microsoft 365) and sends the app's mail, such as invoices, quotes and reminders, from no.reply.invoice@goldmary.eu.

  Which data

  The recipient's name and e-mail address, the text of the mail and the attachment, such as the invoice as a pdf. For mail to hello@goldmary.eu: what you write to us.

  Where

  Microsoft Ireland Operations Limited, in Ireland, is our contracting party for Microsoft 365.

  Outside the EU

  If data leaves the EU, for example when Microsoft itself investigates an outage, the European Commission's standard contractual clauses in Microsoft's Products and Services Data Protection Addendum apply. That addendum is part of every Microsoft 365 subscription.

Subprocessors switched off today

The code exists, but the feature is off today. Article 7 announces these parties: Goldmary may switch them on without a further notice. You can object now.

• Storecove Off today

  What for

  Sends e-invoices over the Peppol network.

  Which data

  The invoice with your details and your customer's: name, address, KvK and VAT number, e-mail address, IBAN and the invoice lines.

  Where

  Recorded here before Peppol is switched on.

• Mollie B.V. Off today

  What for

  A payment link on your invoice, when you connect your own Mollie account.

  Which data

  What is needed to set up the payment, such as the amount. Whoever pays enters the rest at Mollie.

  Where

  Mollie is based in the Netherlands.

• Stripe Payments Europe, Limited Off today

  What for

  A payment link on your invoice, when you connect your own Stripe account.

  Which data

  What is needed to set up the payment, such as the amount. Whoever pays enters the rest at Stripe.

  Where

  Stripe Payments Europe is based in Ireland.

  Outside the EU

  Stripe transfers data to Stripe, Inc. in the US. The standard contractual clauses in Stripe's data processing agreement cover that.

• Kamer van Koophandel (KvK-API) Off today

  What for

  Looks up a company in the Dutch business register when you use the KvK search for a new customer.

  Which data

  What you type: a company name or a KvK number.

  Where

  The Netherlands.

Public registers the app looks things up in

These are not subprocessors. The app asks them something and gets public data back.

• PDOK (Kadaster) In use

  What for

  Fills in street and town when you type a postcode and house number in the app.

  Which data

  Only the postcode and the house number.

  Where

  The Netherlands. PDOK is a government service.

What Goldmary keeps about you yourself is on the privacy page.