The controller for the processing of personal data within the meaning of Article 4(7) GDPR is:

Informer Invoicing B.V., Keizersgracht 62, 1015 CS Amsterdam, the Netherlands.

Chamber of Commerce (Netherlands) no. 98726668. VAT ID NL868617039B01.

Email: [email protected]. Phone: +31 85 401 6740.

For questions about data protection and to exercise your rights, you can reach us at that address or through our contact form .

This statement covers this website and the processing directly connected to it: requesting the pages, reach measurement, contact requests and creating an account.

For the data you process inside the Informer application, in particular your accounting and invoicing data and the data of your own customers, you are the controller yourself. Informer processes that data on your behalf and on your instructions within the meaning of Article 28 GDPR.

This statement does not cover third-party websites we link to.

We process personal data only where there is a legal basis for it under Article 6 GDPR. Which basis applies to which processing is stated explicitly in the sections below.

We do not sell your data and do not pass it to third parties for advertising. It goes only to the parties named in the section "Recipients and processors", and only insofar as that is necessary for the purpose concerned or the law obliges us to.

Data that lawful users enter in Informer remains their data. Our support staff can access the accounting records of an account only where those records have been expressly "opened" for that purpose. That opening is the standard setting for new accounting records and can be closed again at any time.

When you request this website, your browser sends technically necessary data to the server that delivers the page. What is processed includes your IP address, the date and time of the visit, the address requested, the volume of data transferred, the status code of the request, the page visited previously, and data about your browser and operating system.

Purpose: delivering the website, safeguarding its technical operation, and detecting and preventing attacks and abuse.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is a stable, secure and working website.

This data is recorded whatever you decide about cookies, because the website cannot be delivered or kept secure without it. The statistical analysis of visit and click behaviour is a different matter and takes place only once you have consented. See "Cookies and access to your device" and "Reach measurement through ywt.informer.eu".

Cookies are small files that a website stores in your browser. Comparable techniques such as local storage and counting pixels work in the same way, and the same rule applies to all of them: information may be stored on your device, or read from it, only where that is strictly necessary for the service you have asked for, or where you have consented.

We distinguish two categories:

• Strictly necessary cookies, without which the website and signing in do not work.
• Cookies and comparable techniques for statistics and reach measurement, which we use only after you have consented.

The first category includes a session cookie that recognises you for the remainder of a session once you have signed in. As soon as you have made a choice about cookies, storing that choice belongs in this category too, so that we do not have to ask you again on every page. Storing and reading these cookies needs no consent under Article 5(3) of the ePrivacy Directive (2002/58/EC) as implemented in your country, because they are strictly necessary. The processing that follows is based on our legitimate interest in a working and secure website (Article 6(1)(f) GDPR) and, where the use of an account is involved, on the performance of our contract with you (Article 6(1)(b) GDPR). This category cannot be switched off.

The second category covers Google Tag Manager and the reach measurement we run through ywt.informer.eu. Google Tag Manager is not an analytics tool itself but a management tool: it loads and fires further scripts, known as tags. ywt.informer.eu is a subdomain of our own domain informer.eu, so the measurement runs over an address we operate rather than a third party's. Both are loaded, and store or read information on your device, only once you have consented. The legal basis is your consent under Article 6(1)(a) GDPR, together with Article 5(3) of the ePrivacy Directive as implemented in your country. Without your consent, neither of them runs.

We do not use cookies for advertising, for profiling, or to recognise you across other people's websites. Should that change, those cookies will be subject to your prior consent in the same way, and we will update this statement before we introduce them.

Your consent is voluntary. If you do not give it, you can still use this website in full, and you are put at no disadvantage.

You can withdraw consent at any time, with effect for the future. Withdrawing does not affect the lawfulness of the processing carried out before you withdrew. Where a cookie preferences dialogue is offered on this website, you can reopen it and change your choice there at any time. Independently of that, a message to [email protected] withdrawing your consent is always sufficient.

You can also delete cookies at any time through your browser settings, and restrict or block their storage entirely. That affects the strictly necessary cookies as well, and it may impair how the website works.

We use Google Tag Manager on this website. The Tag Manager is not an analytics tool itself but a management tool: it loads and fires further scripts, known as tags, in the page. When the Tag Manager loads, your IP address is sent to the provider's server, because that is technically necessary for any connection. Further processing can be triggered through the tags it embeds.

The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: managing and delivering the scripts used on this website.

Legal basis: your consent under Article 6(1)(a) GDPR, together with Article 5(3) of the ePrivacy Directive as implemented in your country. Without your consent the Tag Manager is not loaded.

For the reach measurement of this website we use the endpoint ywt.informer.eu. That is a subdomain of our own domain informer.eu. The measurement therefore runs over an address we operate ourselves rather than a third party's domain.

What is processed is the data your browser sends when a page is requested, in particular the page requested, the date and time of the visit, the page visited previously, data about your browser and operating system, and your IP address.

Purpose: statistical analysis of how this website is used, in order to improve its content and structure.

Legal basis: your consent under Article 6(1)(a) GDPR, together with Article 5(3) of the ePrivacy Directive as implemented in your country. Without your consent this measurement does not take place.

When you reach us through the contact form, by email, by phone or over chat, we process the data you provide. Through the contact form that is your name, email address, phone number, company name and the content of your message.

Purpose: handling and answering your enquiry, including any follow-up questions.

Legal basis: Article 6(1)(b) GDPR where your enquiry concerns a contract with us or is aimed at entering into one, and otherwise Article 6(1)(f) GDPR, our legitimate interest being to answer enquiries.

Complaints have their own form, under Make a complaint . The data provided there is used solely to handle the complaint.

When you create an account through this website, we send the email address you provide to our application in order to set up the registration. We then process the data needed for the contractual relationship, in particular your contact and company details and your billing details.

Purpose: making the account available and performing our contract with you.

Legal basis: Article 6(1)(b) GDPR. Where we are subject to a retention obligation, also Article 6(1)(c) GDPR.

If you are an Informer customer, we may inform you by email about developments, products and services connected to the offering you use. Every one of those emails contains an unsubscribe link, and you can set in your account which messages you want to receive. We do not pass recipient lists to third parties and do not make them available to them.

Legal basis: your consent under Article 6(1)(a) GDPR where you have given it, and otherwise Article 6(1)(f) GDPR, our legitimate interest being to inform existing customers about related products and services.

You can object to the use of your data for direct marketing at any time, at no cost beyond the transmission costs at base rates.

The Informer application and the data stored in it sit on Amazon Web Services servers in the Frankfurt am Main region, Germany. There is more on this under Data safety .

This website itself runs at a hosting provider that processes the resulting server logs on our behalf and on our instructions.

Personal data goes only to parties that need it for the purposes named in this statement. Those are:

• the hosting provider of this website and the operator of the data centres the application runs in,
• Google Ireland Limited as the provider of Google Tag Manager, insofar as you have consented,
• service providers that support us with support, payment processing, accounting and email delivery, each insofar as that is necessary for the purpose,
• public authorities and courts, insofar as the law obliges us to disclose.

With service providers that process personal data on our behalf we conclude data processing agreements under Article 28 GDPR.

The application and the data stored in it are processed in Germany.

When Google Tag Manager is used, transfers of data to servers in the United States cannot be ruled out. Insofar as that happens, the transfer rests on the European Commission's adequacy decision for the EU-US Data Privacy Framework, where the recipient is certified under it, and otherwise on the standard contractual clauses under Article 46(2)(c) GDPR.

If you switch on AI features in the application, the content processed for them may be temporarily processed or stored on servers outside the European Economic Area. Those features are optional and are used only after you have expressly switched them on yourself.

We do not keep personal data longer than is necessary for the purpose concerned.

• Enquiries through the contact form, by email or over chat: until your enquiry has been fully handled and no follow-up questions are to be expected.
• Contract and account data: for the duration of the contractual relationship.
• Data subject to commercial or tax retention obligations: until the applicable statutory period expires. Until then, processing is restricted to storage.
• Server logs and reach measurement data: until the purpose lapses or you withdraw your consent.

You are under no statutory or contractual obligation to provide us with personal data. Some functions do require certain data: without an email address we cannot create an account, and without contact details we cannot answer an enquiry.

The reach measurement, by contrast, is voluntary. If you do not consent to it, you can use this website unchanged.

You have the following rights against us:

• access to the data held about you (Article 15 GDPR),
• rectification of inaccurate data and completion of incomplete data (Article 16 GDPR),
• erasure of data (Article 17 GDPR), insofar as no statutory retention obligation and no other ground for exclusion stands in the way,
• restriction of processing (Article 18 GDPR),
• portability of the data you provided to us on the basis of consent or a contract (Article 20 GDPR),
• objection to certain processing (Article 21 GDPR, see the next section).

Exercising these rights is free of charge for you. Contact us at [email protected] or use our contact form . We answer within the statutory time limits.

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you that is based on Article 6(1)(f) GDPR. We will then stop processing the data concerned, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where we process your data for direct marketing, you can object at any time and without giving reasons. We will then no longer use your data for that purpose.

A message to [email protected] is enough to object.

Where processing rests on your consent, you can withdraw it at any time, with effect for the future. The lawfulness of the processing carried out up to the withdrawal is unaffected.

Withdrawal is possible with a message to [email protected]. For advertising emails the unsubscribe link in the message concerned is enough. For your consent to cookies and to the reach measurement, what is described in the section "Cookies and access to your device" applies in addition.

Independently of any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). You can turn to the authority of your habitual residence, of your place of work, or of the place of the alleged infringement.

Because the controller's main establishment is in the Netherlands, the Dutch Autoriteit Persoonsgegevens, Hoge Nieuwstraat 8, 2514 EL The Hague, is the lead supervisory authority for our processing.

This statement does not apply to websites of third parties that are connected to this website by means of links. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statement of these websites before making use of them.

We amend this statement when the processing described or the legal requirements change. The version published on this page is the one that applies.

Version of this statement: August 2026.