For website visitors, business contacts, prospects and clients
Effective date 5 September 2026
This notice explains how SlimCijfers Analytics collects, uses, shares and protects personal data when you visit our website, communicate with us, receive marketing, enquire about or buy our services, attend training, or when we deliver services for an accounting or audit firm. It also explains your privacy rights and how to exercise them.
Please read this notice before providing personal data. Where a client organisation gives you a separate privacy notice for work that we perform on its behalf, that organisation's notice may also apply.
1 Who we are
SlimCijfers Analytics is a sole proprietorship registered in the Netherlands. For personal data that we determine how and why to use, SlimCijfers Analytics is the data controller.
- Trading name SlimCijfers Analytics
- Proprietor Rakib Hossain
- Dutch Chamber of Commerce number 99197928
- Establishment number 000064299953
- Address Mathenesserweg 163 B, 3027 HR Rotterdam, Netherlands
- Email rakib@slimcijfers.nl
2 Scope and our role
We act as controller for our website, enquiries, business development, direct client relationships, training administration and general business operations.
When we provide white-label or outsourced finance support to an accounting or audit firm, that firm normally retains the end-client contract, end-client contact, supervision and final sign-off. In that arrangement, we generally process end-client personal data only on the firm's documented instructions as its processor or subprocessor. The firm's privacy notice and our data processing agreement govern that work.
3 Personal data we collect
Business and contact information
- Name, job title, employer, business address, telephone number, email address, professional profile and communication preferences.
- Company information, service interests, meeting availability, enquiry details and records of our relationship.
Marketing and engagement information
- The source of business contact details, campaign history, email delivery and response information, meeting bookings, event registrations and expressed interests.
- Website usage information such as pages viewed, referral information, device and browser information, IP address, timestamps and server logs, where collected.
Client and service information
- Contracts, instructions, correspondence, invoices, payment status and service-delivery records.
- Accounting, bookkeeping, payroll, tax, VAT, banking, supplier, customer and employee information provided for an engagement.
- User names, account identifiers, access logs and other information needed to use authorised client systems. We do not ask clients to send passwords by ordinary email.
Sensitive information
We do not intentionally collect special category data for marketing. Payroll, accounting or tax records may contain sensitive information. We process such information only when necessary for an authorised engagement, under the client's instructions and with appropriate safeguards.
4 How we obtain personal data
We obtain personal data directly from you, from the organisation you represent, from a client accounting or audit firm, from referrals, and from your use of our website and communications.
For business-to-business marketing, we may also obtain professional contact and company information from public or appropriately licensed sources, including company websites, professional profiles, business registers and directories. We record the source and collection date where appropriate.
5 How and why we use personal data
Services and contracts
We use personal data to respond to enquiries, assess requirements, prepare proposals, enter into and manage contracts, deliver consulting and training, provide support, issue invoices and manage payments. We rely on performance of a contract, steps requested before a contract, legitimate interests in operating our business, and legal obligations where applicable.
Client finance work
We use data supplied by a client or accounting firm to provide agreed bookkeeping, accounts preparation, payroll support, VAT preparation, reporting, analytics, automation and finance support. Where we act as processor, the client determines the lawful basis and we process only under documented instructions.
Business administration and compliance
We use personal data for identity and due diligence checks where required, record keeping, accounting, tax administration, security, fraud prevention, dispute management, insurance and professional advice. We rely on legal obligations and our legitimate interests in protecting and administering the business.
Service improvement
We analyse service and campaign performance, feedback and operational records to improve our services, training and communications. We use aggregated or de-identified information where reasonably possible and rely on our legitimate interests in improving the business.
6 Business marketing
We may contact relevant business representatives about services or training that we reasonably believe may be useful to their organisation. Depending on the communication method, location, recipient type and relationship, we rely on legitimate interests or consent and comply with applicable electronic marketing rules.
We keep marketing proportionate, use role-relevant business information, identify ourselves, explain why we are contacting you where appropriate, and provide a simple way to object. We do not buy or use lists without assessing their source and permitted use.
You can object to direct marketing at any time by replying to a message or emailing rakib@slimcijfers.nl. We will stop marketing and keep the minimum information needed on a suppression list so that we respect your choice.
7 Automation and artificial intelligence
We may use automation and artificial intelligence tools to research business organisations, prioritise prospective business contacts, personalise communications, classify replies, schedule follow-ups, assist with content, and analyse campaign performance.
These tools may use business contact information and relevant public company information. We do not intentionally use special category data for marketing. We configure tools to avoid unsupported claims and inappropriate contact, and we maintain records and suppression controls.
We do not use solely automated processing to make decisions about individuals that produce legal or similarly significant effects. If this changes, we will provide the information and safeguards required by applicable law before doing so.
8 Who we share personal data with
We share personal data only where necessary and subject to appropriate access controls and contractual arrangements. Recipients may include:
- Authorised SlimCijfers employees, including members of our delivery team based in Bangladesh.
- The accounting or audit firm responsible for the engagement and other authorised members of the client's team.
- Technology suppliers supporting email, calendars, document storage, customer relationship management, hosting, security, analytics and artificial intelligence, including Google Workspace and OpenAI where configured.
- Professional advisers, insurers, auditors and regulators.
- Courts, public authorities or law enforcement where disclosure is legally required or necessary to protect legal rights.
We do not sell personal data.
9 International access and transfers
SlimCijfers is established in the Netherlands and serves clients internationally. Authorised employees in Bangladesh may remotely access data needed to perform contracted services. Some technology suppliers may also process data outside the Netherlands, European Economic Area or United Kingdom.
We limit international access to what is necessary and apply confidentiality, role-based access, security requirements and client instructions. Where a restricted international transfer requires a legal safeguard, we use an applicable mechanism such as the European Commission's Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement or Addendum, another approved safeguard, or a lawful exception. We conduct additional transfer assessments and protections where required.
Clients may contact us for further information about the safeguards relevant to their engagement.
10 Data security
We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Measures include controlled user access, confidentiality obligations, secure cloud services, multifactor authentication where available, device and account security, staff instructions, backups and incident procedures.
No system is completely secure. If a personal data breach occurs, we will investigate, limit its impact, inform affected clients and notify regulators or individuals where legally required.
11 How long we keep personal data
We keep personal data only as long as reasonably necessary for the purpose for which it was collected, including legal, contractual, accounting and dispute requirements. Our usual periods are:
- Business enquiries and prospect records up to 24 months after the last meaningful interaction, unless a longer period is justified or you object sooner.
- Marketing suppression records for as long as needed to prevent further marketing to an objecting recipient.
- Contracts, invoices and core business and financial records generally seven years after the end of the relevant financial year or relationship, subject to applicable law.
- Client working data processed for an accounting or audit firm for the period specified in the contract or processing instructions, after which it is returned or securely deleted unless retention is legally required.
- Website and security logs for a period proportionate to operational and security needs.
We may retain information longer where necessary for a legal claim, investigation or regulatory obligation. We may retain anonymised information that no longer identifies an individual.
12 Website and cookies
Our website may use essential cookies and similar technology needed for security and basic operation. Hosting systems may create technical logs. If we use non-essential analytics or marketing cookies that require consent, we will request consent and provide additional cookie information before using them.
Our website may link to external services. Their privacy practices are governed by their own notices, and we encourage you to review them.
13 Your privacy rights
Depending on the law that applies, you may have the right to:
- Request access to your personal data and information about its use.
- Ask us to correct inaccurate or incomplete data.
- Ask us to erase data in applicable circumstances.
- Ask us to restrict processing in applicable circumstances.
- Object to processing based on legitimate interests and object at any time to direct marketing.
- Receive certain data in a portable format.
- Withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.
- Request safeguards relating to applicable automated decision-making.
To exercise a right, email rakib@slimcijfers.nl. We may need to verify your identity. We normally respond within the period required by applicable law. If we process your data solely for a client organisation, we may refer your request to that controller and assist it in responding.
14 Complaints
Please contact us first if you have a privacy concern so that we can investigate and try to resolve it.
You may also complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. If the United Kingdom General Data Protection Regulation applies to the relevant processing, you may also have the right to complain to the United Kingdom Information Commissioner's Office at ico.org.uk.
15 Children
Our services are intended for businesses and working professionals. We do not knowingly use children's personal data for business marketing. If you believe that we have collected a child's personal data in error, please contact us.
16 Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. The effective date at the beginning shows when the current version took effect. Material changes will be communicated where appropriate.
17 Contact us
Questions, requests and objections about personal data should be sent to:
SlimCijfers Analytics
For the attention of Rakib Hossain
Mathenesserweg 163 B
3027 HR Rotterdam
Netherlands
Email rakib@slimcijfers.nl
Website slimcijfers.nl