Privacy statement
This is a translation for convenience. The Dutch version is legally binding; if the texts differ, the Dutch version prevails.
Slim Folderen B.V. · Last updated: 28 October 2026
1.Who are we?
Slim Folderen is a service of Slim Folderen B.V., Dynamostraat 44, 1014 BK Amsterdam, Dutch Chamber of Commerce (KvK) number 91042011. We print A4 brochures that businesses supply via our platform and send them by post to the recipients they specify.
Questions about privacy, or a request concerning your data? Email privacy@slimfolderen.nl or write to the address above.
2.Our role: controller or processor
We are the controller for the data of our customers and their users (account, company, payments), of people who contact us or book a demo, and for the security and fraud prevention of our platform.
We are the processorfor the data of recipients that a customer supplies in order to send a brochure. The customer decides who it sends to and is responsible for that; we use that data only on the customer's instructions. We record the arrangements about this in a data processing agreement.
Received a brochure from us? Then a business gave us your address so that we could send you that brochure. If you want to know why, or no longer want to receive post, please contact the sender. If that does not work, email us; we will help you further.
3.What data we process and why
| Purpose | What data | Legal basis |
|---|---|---|
| Creating and using an account | Name, email address, telephone number, password (stored only as a hash), role and permissions, language preference, time and version of your acceptance of the general terms and conditions. When logging in with Google: name, email address, profile photo and Google ID. | Performance of the contract |
| Company details and KvK check | Company name, address, telephone, email, KvK and establishment number, data from the Dutch Trade Register (Handelsregister), brand style and logo. | Performance of the contract; legitimate interest (checking that you are a business) |
| Verifying your telephone number by SMS | Telephone number and verification code. | Legitimate interest (security and preventing abuse) |
| Preventing abuse of the welcome offer | A hash code (HMAC), calculated with a secret key, of your KvK number, telephone number and email address, and of the delivery address of a trial shipment. The original data cannot be retrieved from that code. | Legitimate interest (fraud prevention) |
| Payments and invoices | Billing details, payment history and a customer and mandate reference from our payment service provider. We do not store full account or card numbers. | Performance of the contract; legal obligation (tax records) |
| Printing and sending brochures (as processor) | The brochure PDF and the recipient's name, company, address, postcode, town or city, country and, if you provide them, email address, KvK number and your own reference. | On the customer's instructions |
| Calendar integration (optional) | Access keys for Google Calendar (read-only) or Microsoft Outlook (read calendar), stored encrypted. We retrieve meetings live and do not store them. If you send a brochure from a meeting, we keep the meeting ID and the attendee's email address with that order. | Performance of the contract (at your request) |
| Having a brochure made with AI (optional) | The website URL and brief you provide, the public content of that website, and your logo and images. | Performance of the contract (at your request) |
| Contact form and demo requests | Name, company, email address, telephone number, your message and, for a demo, the time you chose. | Legitimate interest (answering your question); for a demo, also steps prior to entering into a contract |
| Help emails after registration | Name, email address, whether your account is already active and whether you clicked a link in those emails. We send a few emails to help you get started, even if you did not complete your registration. If you have a dedicated contact person with us, the emails come from that person. We do not use tracking pixels to see whether you open an email. | Legitimate interest; you can always unsubscribe (see Article 9) |
| Personal support from your contact person | Name, job title, business contact details, notes of conversations and whether you consented to email. In addition, how your account is progressing: sign-up, KvK check, trial shipment (ordered, sent, delivered), purchases, when you were last active and clicks on links in our emails. This allows your contact person to help you at the right moment. | Legitimate interest (helping you with your first shipments and providing you with business information). We only send an email with an offer with your consent or if you are already a customer |
| Inviting team members | Name and email address of the person you invite. | Performance of the contract |
| Security and troubleshooting | IP address, browser data, login sessions, error messages and a log of administrative actions. | Legitimate interest (a secure, working platform) |
The PDF checker checks your file in your own browser; no PDF is sent to our servers. The price calculator does not process any personal data.
Whether you qualify for the free trial shipment is determined automatically by our system on the basis of the KvK check and previous registrations. If you disagree with the outcome, email us; a member of staff will review it.
Even if we do not need any recipient data, your brochure or brief may contain personal data. Include only what is necessary there, and no sensitive data such as medical information or citizen service numbers (burgerservicenummers).
4.Who we share data with
We do not sell personal data. We share it only with parties we need in order to deliver our service, and only what that party needs:
- Mollie: payments and direct debit.
- Cloudflare: storage of brochure PDFs and logos, and checking them for malicious content.
- Our SMS service (Twilio or Bird): sending verification codes.
- Dutch Chamber of Commerce (KvK): checking and looking up company details.
- PDOK (Dutch Land Registry, Kadaster): looking up addresses while you fill in an address.
- OpenAI and Google (Gemini): only if you have a brochure made with AI.
- Google and Microsoft: only if you log in with Google yourself or connect your calendar.
- Our hosting provider and email service: running the platform and sending emails.
- PostNL: delivering the brochure; for this, the recipient's name and address are on the envelope.
In addition, we pass on data where the law requires us to, for example to the Dutch Tax and Customs Administration (Belastingdienst).
Some of these parties (such as OpenAI, Google, Microsoft, Twilio and Cloudflare) may process data outside the European Economic Area, in particular in the United States. This only happens with the safeguards required by the General Data Protection Regulation (GDPR): the EU-US Data Privacy Framework or standard contractual clauses of the European Commission.
5.How long we keep data
- Account and company data: for as long as your account exists. If you ask us to delete it, we will, within one month, erase everything we are not required by law to keep. We anonymise a deleted account no later than 30 days after deletion.
- Invoices and financial records: 7 years (statutory tax retention obligation).
- Shipping data and recipients: 24 months after the order, we anonymise the recipient's name, address and email address. The order itself (quantities, credits, date) remains for your records. At the customer's request, we do this sooner.
- Brochure PDFs: until you delete the brochure; we then also delete the file.
- Fraud prevention codes: for as long as is necessary to prevent repeated abuse of the welcome offer.
- Contact requests: for as long as is necessary to handle and follow up your question.
- Demo requests: 12 months after the scheduled time of the demo.
- Incomplete registrations: 90 days after your last activity.
- SMS verification codes: 30 days.
- Record of help emails sent: 12 months.
- Error messages from integrations: no more than 30 days.
- Login sessions: a web browser session expires after 2 hours of inactivity; a login key after 30 days, after which we delete it.
- Backups: we keep the last ten backups; older ones are overwritten.
6.Security
We protect data with appropriate measures: encrypted connections (HTTPS), passwords that are stored only as a hash, encrypted access keys for integrations, checking of uploaded PDFs for malicious content, and access to data only for staff who need it.
8.Your rights
You have the right to:
- access your data and receive a copy;
- have incorrect data corrected;
- have your data erased;
- have the processing restricted;
- object to processing based on our legitimate interest;
- receive your data in a commonly used file format (portability).
Send your request to privacy@slimfolderen.nl. We will respond within one month and may ask you to identify yourself. If your request concerns data that a customer gave us about you as a recipient, we will forward it to that customer and help them deal with it.
If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Naturally, we would like to hear about it from you first.
9.Emails from us
Service emails about your account and orders, such as confirmations, invoices and notifications of insufficient balance, are part of the service. You can stop help emails about completing your registration or activating your account at any time via the unsubscribe link at the bottom of each email, or by emailing privacy@slimfolderen.nl.
10.Changes
We update this privacy statement when our service or the law changes. The date at the top shows when this last happened. In the event of significant changes, we inform customers by email.
Slim Folderen B.V. · Dynamostraat 44, 1014 BK Amsterdam · KvK 91042011 · Last updated: 28 October 2026
See also our general terms and conditions.