Last updated
23 July 2026
Who we are
Amsterdam Buyer Kit is the controller for Amsterdam Buyer Kit, a Dutch mortgage planning calculator with an Amsterdam-apartment focus. Legal entity: Amsterdam Buyer Kit. Business address: Kuiperbergweg 32, 1101 AG Amsterdam. For privacy questions or data-rights requests, email privacy@amsterdambuyerkit.com or use the contact page.
What the product does
Amsterdam Buyer Kit provides a statutory planning estimate for Dutch mortgage capacity, recurring housing costs, and purchase cash. It is not mortgage advice, a lender offer, or approval.
Data we collect
- Exact mortgage inputs and results are processed only to answer the request. They are not saved to a database, browser storage, or Google Analytics.
- A calculation-completed event contains only the ruleset version, applicant count, and whether the case was supported or unsupported.
- When analytics is permitted, broad statistical bands—such as income, obligation, property-value, savings, mortgage-capacity, and cash-shortfall ranges—may be retained with non-financial usage events. Exact values are discarded.
- Google Analytics may process page, navigation, calculator-step, guide, device, approximate-country, campaign, and engagement information after analytics becomes effective for the visitor.
- An anonymous session identifier and CSRF token protect the calculator request.
- Contact details and message content are stored only when someone deliberately uses the contact form.
- Technical, security, and hosting logs may be processed to operate the service.
Why we use data
- Return the requested mortgage-capacity estimate.
- Measure aggregate calculator completion and support coverage.
- Understand consented acquisition, calculator funnels, abandonment, and guides.
- Compare broad, consented profile bands without retaining exact financial values.
- Handle support, feedback, and data-rights requests.
- Prevent abuse and maintain service security and reliability.
Legal bases
The legal bases depend on the activity: performance of the requested service for the calculator response; legitimate interests for security, reliability, abuse prevention, and the non-identifying aggregate completion count; consent for Google Analytics and banded profiling where required; regional default analytics outside the EEA, United Kingdom, and Switzerland subject to an available opt-out; and legal obligation where applicable.
Retention
Exact mortgage inputs and results are not retained. GA4 user and event data uses the maximum 14-month Standard-property retention with reset on new activity. Consented Google Cloud and local banded analytics are retained for 730 days, after which local events are converted into identifier-free daily totals and deleted. Consent choices are stored for up to 12 months in the browser and consent records follow the 730-day analytics period. Contact requests and operational logs follow their separate support and security needs.
Sharing and processors
Data may be processed by service providers that run the app, such as Render for hosting and database infrastructure. In calculator mode, Google Analytics processes consented or regionally enabled website usage and Google Cloud stores the restricted analytics export. Google Signals, advertising personalization, remarketing, Google Ads linking, replay, and heatmaps are disabled. GitHub is used for code repository and CI and is not intended to process calculator request data. Transactional email delivery is disabled unless a reviewed provider is configured. No payment provider is integrated. If email delivery, payments, or additional processors are enabled later, this policy and the processor register will be updated before those services process user data.
International transfers
Some infrastructure and analytics providers, including Google, may use entities or subprocessors outside the European Economic Area. Where that happens, the service relies on the provider terms and available transfer safeguards for the relevant service. Exact calculator inputs and results are not retained or shared with Google, and analytics data is not used for advertising personalization.
Your rights
EU/AVG/GDPR rights may include access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is used. Requests are handled manually, and additional information may be needed to verify the request. Use privacy@amsterdambuyerkit.com or the contact form.
Complaint right
You can lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens, if you believe personal data is not handled properly. The AP may ask you to show that you contacted the organization first.
Security and data minimization
The service uses first-party sessions, CSRF protection for writes, rate limiting, signed admin sessions, protected admin access, signed analytics preferences, fixed analytics event allowlists, and server-side conversion of permitted financial data into broad bands. The product is designed to work without user accounts or document uploads. Enter only the information needed to run the estimate, and avoid third-party or unnecessary sensitive personal data.
Automated decisions
The service calculates a planning estimate from the information provided. It does not approve or reject a mortgage and does not make a decision with legal or similarly significant effects.