TrompTechThis is a translation. Only the Dutch text is legally binding; in case of any difference, it prevails.
Last updated: 27 September 2026
1. In brief
- We use your data to answer your request, carry out your assignment and invoice you. We do not sell it and do not use it for personalised advertising.
- A request ends up in our own workspace in the TrompTech Layer, on a server in Germany.
- Google Analytics and Google Ads only run if you choose this in the cookie settings.
- You can always ask what data we hold about you, and have it corrected or deleted.
2. Who we are
TrompTech is a sole proprietorship of Jeremy Tromp and is the controller of the data in this statement.
- Address: Baliëndijk 324, 4816 GV Breda
- Chamber of Commerce (KvK) number: 96345381
- VAT number: NL005203127B38
- Email: info@tromptech.nl
- Phone: +31 6 17720360
TrompTech does not have a data protection officer; for a business of this size this is not required. Your questions go to Jeremy.
3. Which data, for what purpose and for how long
| When | Which data | Purpose and legal basis | How long |
|---|---|---|---|
| You send a request, via the form or the chat | Name, company (and the Chamber of Commerce number if you choose a company from the Trade Register), email address, phone number, subject and your message. In the step-by-step form also your answers: team size, systems, when, budget and how you would like to be contacted. With consent for marketing also the source: through which advert or link you arrived. | Answering your request and preparing a proposal. Basis: steps you request yourself before entering into a contract (Article 6(1)(b) GDPR). The source: your consent (point (a)). After sending, you receive one short confirmation by email from info@tromptech.nl, with a summary of your request. That email belongs to your request, is not part of a mailing list and contains no tracking code. If you type a company name, we look it up (from three letters) in the Trade Register of the Chamber of Commerce (KvK) so you can choose a name and registration number; only that search term is sent there, nothing about you. While you fill in the form, your browser remembers your answers in this tab (sessionStorage), until you close it or send the request; we only receive them when you send. | If no assignment results from it, we close the request and your data is deleted automatically 2 years after the last contact. |
| You become a client | Name, company, address, Chamber of Commerce and VAT number, contact details, quotations, assignments, invoices and payment status. | Carrying out and invoicing the assignment (point (b)), and keeping the records required by law (point (c)). | 7 years, the statutory tax retention period. |
| You email or call us | What you write or tell us, and your contact details. | Answering your question and keeping track of the contact (point (b), or our legitimate interest under point (f)). | As long as the contact is ongoing, and after that as long as it belongs to an assignment or the records. |
| You visit the site | Technical data that every website receives, such as your IP address and browser. | Showing the pages and securing the site (point (f)). The site runs on Vercel. | Briefly, only for the operation and security of the site. |
| You choose "Also marketing" | Your visit to the site and whether you sent a request or booked a meeting, via Google Analytics and Google Ads. See the cookie policy. | Seeing which pages and adverts work (point (a), your consent). | Cookies 90 days to 2 years; in Google Analytics at most 14 months. |
| You use the TrompTech Layer | Your name, business email address and role, your login and sessions, and the AI usage per call (never the text itself). | Giving you access and performing the subscription (point (b)), securing the workspace (point (f)). | Account until the end of the subscription; sessions 7 days; usage per call 2 years, after that only monthly totals without a name. |
What a client puts in their own Layer workspace, such as their contacts, mail and projects, belongs to that client. For that data TrompTech is a processor, and the data processing agreement applies to it, not this statement.
4. AI and your request
In our own workspace, AI can summarise your request or suggest a next step, as an aid for Jeremy. This is done with Claude (Anthropic), ChatGPT and Codex (OpenAI) or Gemini (Google). Your email address and phone number are not included, even if they appear in your message. You do not receive a reply sent by the AI itself: Jeremy reads your request and replies himself. More explanation is on AI and your data.
5. With whom we share data
Only with parties we need to do our work:
| Party | Purpose | Where |
|---|---|---|
| Strato | The server on which the Layer and our own workspace run, with your request and the client records | Germany |
| Vercel | Running this website | Frankfurt; American company |
| Our mail and calendar; Google Analytics and Google Ads if you choose this; storage of encrypted backups | EU and United States | |
| Resend | Sending and receiving mail on tromptech.nl | United States |
| Anthropic, OpenAI and Google (Gemini) | The AI functions (section 4) | United States |
| Supabase | Logging in to the Layer | Frankfurt; American company |
| Mollie | Payments of invoices and subscriptions | Netherlands |
Otherwise, we only pass on data if the law requires it. The full list for the Layer, with what each party receives, is on sub-processors.
6. Outside the European Union
Some of these parties are American, or may process data in the United States. For Google, Vercel and Resend, the EU-US Data Privacy Framework applies, under which they are certified. For Supabase, Anthropic and OpenAI, the standard contractual clauses of the European Commission from their data processing terms apply. You can request a copy via info@tromptech.nl.
7. Security
- All connections to the site and the Layer are encrypted (https).
- In the Layer, each client has its own folder and its own process on the server.
- Conversations with the AI and the access keys of integrations are stored encrypted.
- The number of login attempts and requests is limited, to prevent abuse.
- Every night we make an encrypted backup, which is also stored outside the server.
If something does go wrong with your data, we report it within 72 hours to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) where required, and we let you know if it may have consequences for you.
8. Your rights
You can ask us which data we hold about you, have it corrected or deleted, have the processing restricted, or receive your data to take with you. You can object if we use your data on the basis of our legitimate interest, and you can always withdraw consent you gave; for cookies you do this with Change cookie preferences at the bottom of the page. What we are required by law to keep, such as invoices, we cannot delete earlier.
Email your question to info@tromptech.nl. We reply within one month. If your question is complex, it may take two months longer; in that case we let you know within that first month.
If your question concerns data that one of our clients has put in their own workspace, that client is responsible. We then forward your question and help that client with the answer.
9. Complaint
If we cannot resolve it together, you can file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
10. Children
Our services are for businesses and are not intended for children under the age of 16. If you think we hold data of a child, let us know and we will delete it.
11. Changes
If anything changes in what we do with your data, we update this statement and put the new date at the top. If a change affects clients, we email it to them in advance.
See also the cookie policy, the terms and conditions and the company details.