Tenvado privacy statement

Last updated: 6 November 2026

This is a translation of the Dutch privacy statement, which is also available in German. If the versions differ, the Dutch text prevails.

Tenvado arranges a website, an email address, a phone number and a digital assistant that answers the phone, for self-employed tradespeople and small technical businesses. To do that, we process personal data. In this statement we explain in plain language which data that is, why we use it, who we share it with and what your rights are.

Who we are

Tenvado, registered with the Dutch Chamber of Commerce (KvK) under number 42176957, VAT ID NL005558830B02. Questions about privacy? Email info@tenvado.nl.

Two roles: for you, and on your behalf

• For our customers (the business that uses Tenvado) we are the controller. This covers your account, your business details and your payments.
• For the people who call or email your business we are a processor. As the business owner you are responsible for that data; we only process it on your behalf and according to your instructions. We sign a data processing agreement about this with every customer.

Do you call or email a business that uses Tenvado and have a question about your data? Please contact that business first. You may also email us; we will then help the business handle your request.

Which data we process

Visitors to tenvado.nl

The website tenvado.nl uses no trackers and loads nothing from other parties (the fonts are on our own server too). There is one functional cookie: if you choose a language with the flags yourself, the cookie `tenvado_lang` remembers that choice for one year. If you haven't chosen a language, we show the site in your browser's language, or otherwise in the language of the country of your IP address. We look that country up in a file on our own server (IP country data from DB-IP, CC BY 4.0); your IP address isn't sent anywhere for this. The customer portal chooses its language the same way. Our web server keeps technical log files (IP address, time, requested page, the page you came from and your browser) so we can investigate faults and abuse.

From those same log files we produce visitor statistics: how many people visit the site, which pages they view, how they find us (for example through a search engine or a link) and how many of them sign up. From the customer portal we only count the sign-up pages, not what you do once you're logged in. Before we analyse anything, we shorten IP addresses so they can no longer be traced to one person. The analysis runs on our own server; nothing goes to Google or other parties.

Customers (businesses that use Tenvado)

• Account: name, email address, password (stored encrypted).
• Business details: business name, trade(s), services and rates, opening hours, address, phone number, your website's domain.
• Business knowledge you provide yourself: documents, photos and what you tell us about your business in writing or verbally, and the summary of it that you approve.
• Payment details: billing address, VAT number if any, and your subscription status. Your card or bank details go straight to our payment provider; we don't see or store them.
• Technical data: login sessions (only necessary cookies in the customer portal, to keep you logged in and to protect forms) and log files.

Callers and emailers (on behalf of our customers)

• Phone calls: the number someone calls from, the time and duration, and a written text (transcript) of the conversation with the digital assistant. We don't record audio and keep no sound recordings.
• What callers tell us themselves, such as name, phone number, address and the reason for the call, and appointments the assistant books.
• Emails that arrive at the email address we manage for a customer.
• Special numbers: numbers a customer puts on a list themselves (for example to block them or put them through). We keep no transcript of these calls.

Why we use this data

We don't sell data, don't use it for advertising and don't build profiles. We don't use calls or documents to train AI models ourselves.

Who we share data with

For part of our work we use specialised suppliers. They only receive the data they need for their task, and we have made agreements with each of them about protecting data. These are the kinds of suppliers:

Customers find the names of these suppliers in the data processing agreement. As a caller or visitor, would you like to know who your data has been shared with? Ask us at info@tenvado.nl.

The application, the database and the backups are on servers in the Netherlands. Backups are encrypted before they are stored.

Map data. We calculate travel times between jobs on our own servers, using map data from OpenStreetMap: © OpenStreetMap contributors. OpenStreetMap doesn't receive any data from us for this.

Outside the EU. Some of our suppliers process data outside the European Union, including in the United States. So during a phone call, the call's data also goes outside the EU. For this we use the legal safeguards: the EU-US Data Privacy Framework where the supplier is covered by it, and otherwise the European Commission's standard contractual clauses. You can request a copy of these safeguards from us at info@tenvado.nl.

How long we keep data

• Account and business details: as long as you are a customer. After cancellation we keep them no longer than needed to close the account, except what we are legally required to keep.
• Invoices and payment details: 7 years (Dutch tax retention obligation).
• Transcripts, appointments and callers' customer cards: as long as you are a customer, unless you have them deleted earlier. After cancellation, no longer than needed to close the account.
• Incoming email: as long as it is needed to handle the email for your business.
• Uploaded documents and photos: until you delete them or your account is closed.
• Web server log files: 14 days.
• Visitor statistics: the (already shortened) data per visit for 13 months, after that only totals.
• Other log files: as long as they are needed to investigate faults and abuse.
• Backups: at most 90 days.

Security

All connections are encrypted (https). Passwords are stored encrypted, access to our management environment is restricted, and backups are encrypted. If we discover a data breach, we report it as the law requires to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, if necessary, to you.

Your rights

You may ask us to access, correct, delete or transfer your data, and you may object to its use or have its use restricted. Email info@tenvado.nl for this. We respond within one month.

Don't agree with how we handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the data protection authority in the country where you live.

Changes

We update this statement when our service or the law changes. The date at the top shows when that last happened. For major changes we let customers know by email.