Privacy Statement Klår Tax

Klår Tax Services B.V. (“Klår Tax”, “we”) helps individuals with their Dutch income tax return. Klår Tax is part of Klår Finance. We are the controller of your personal data as described in this privacy statement.

Klår Tax Services B.V. Keizersgracht 62 1015 CS Amsterdam The Netherlands Chamber of Commerce (KvK) number: 88814335 Email: tax@klarfinance.nl Phone: +31 (0)20 520 7490 Website: www.klarfinance.nl

For any questions about privacy, and for requests about your data, email tax@klarfinance.nl.

This privacy statement applies to all services of Klår Tax: preparing and filing your tax return, our contact with you by email and phone, and the file we keep on you. Section 5 is specifically about our online questionnaire at fiscaal.klarfinance.nl.

The website klarfinance.nl itself (and its cookies) and mortgage advice are covered by the privacy statement of Klår Finance.

To file a correct tax return, we need a lot of information. You provide it yourself, through the questionnaire, by email or by phone. This includes:

• Contact and account details: name, email address, phone number, your password (stored encrypted) and your language preference.
• Identity details: date of birth, address and your citizen service number (BSN).
• Household details: details of your tax partner (including their BSN) and of children living at home.
• Financial and tax details: income from employment, benefits, pension or a business, your own home and mortgage, savings, investments, debts, substantial interest (aanmerkelijk belang), assets abroad and deductible items.
• Documents you upload or email, such as annual income statements, WOZ property value notices and bank statements.
• Technical data: your IP address and the time you log in, for security purposes.

Health data. If you report healthcare costs or a diet, we process data about your health. We only do so with your explicit consent, which you give at the start of the questionnaire.

Data about others. If you enter details about your partner or children, please let them know and refer them to this statement.

We only use your data for the purposes below. We never sell it and do not use it for advertising.

We do not make decisions about you that are taken by a computer alone. A Klår Tax employee always reviews your tax return before it is filed.

At fiscaal.klarfinance.nl you complete the questionnaire for your tax return with your own account. This is how it handles your data:

• Account. You create an account with your email address and a password. We email you a code to confirm your address or to reset your password.
• Saving as you go. Your answers are saved as a draft at every step, so you can continue later. A draft you do not submit is deleted 3 months after your last change.
• Submitting. Once submitted, your answers are locked. If you want to change anything, email tax@klarfinance.nl.
• Pre-filling from last year. When you come back the following year, we pre-fill the answers you submitted the year before. You then only need to tell us what has changed.
• Documents. Files you upload are kept in secured storage. Only you and Klår Tax can access them.
• Address suggestions. When you type an address, we suggest addresses using Google. Only the address text you type is sent to Google, not your name or any other data.
• Cookies. The questionnaire only uses cookies that are technically necessary, for example to secure your session. We do not use analytics or tracking cookies here and do not collect usage statistics.

We do not keep your data longer than necessary. Dutch tax law requires records to be kept for 7 years. That is why these retention periods apply:

Example: we keep your answers for the 2025 tax return until the end of 2032.

Every month we check which data has passed its retention period, and we delete it.

We only share your data when this is necessary for your tax return or required by law. We never sell your data.

The Dutch Tax Administration (Belastingdienst) receives your tax return. This is a legal obligation.

Processors. We work with the companies below to provide our service. They only process your data on our instructions and under the terms of a data processing agreement. Klår Tax remains responsible.

Always in the EU. Your data and documents are always stored and hosted in the EU. The only exception is the address text you type for an address suggestion, which is sent to Google in the US. Google participates in the EU-U.S. Data Privacy Framework.

Supabase, Render, Resend and Google are US companies. We have agreements with them that limit access to your data from outside the EU, such as the European Commission’s standard contractual clauses.

We take appropriate measures against misuse, loss and unauthorised access. For example, all traffic with the questionnaire runs over an encrypted connection (https). Each account can only see its own data and documents. Only Klår Tax employees working on your tax return can access your data.

Do you think your data is not properly secured, or do you see signs of misuse? Email tax@klarfinance.nl straight away.

You have the right to:

• access your data;
• have incorrect data corrected;
• have your data deleted, unless we are required by law to keep it;
• have the processing restricted, or object to it;
• receive your data in a computer file, or have it sent to someone else;
• withdraw your consent to the processing of health data. This applies from that moment on; we can then no longer include the healthcare costs or diet in your tax return.

Send your request to tax@klarfinance.nl. We will respond as soon as possible, and in any case within four weeks. We may ask you to prove who you are, for example by emailing us from the email address of your account.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. Of course, we would like to hear from you first.

We may update this privacy statement, for example when our service changes. The latest version is always available on our website. We will let you know about important changes.

This statement is also available in Dutch. If the two versions differ, the Dutch text prevails.

The date at the top of this statement shows when it was last updated.