NiseBookings privacy statement
Draft, not yet legally reviewed. Version: draft 2026-11-05. This is a translation of the Dutch text. If the two differ, the Dutch text applies.
1. What this statement covers
I make NiseBookings. This statement tells you which personal data I process myself, why, and how long I keep it. It covers:
- data of people with a NiseBookings account, such as agencies, developers and their team members;
- data of visitors to nisebookings.com and guide.nisebookings.com.
Did you book an appointment or ticket with a business that uses NiseBookings? Then that business is responsible for your data, not me. I only process that data on the business’s behalf, under the processor agreement. To see or delete your data, or with a question about your booking, contact that business. If your request reaches me anyway, I forward it to the business.
2. Who is responsible?
Nise Regentesselaan 142, 2562 EE Den Haag, the Netherlands E-mail: info@nisebookings.com
3. What data, why, and for how long?
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address, password (hash only), language preference | Creating an account, signing in, service mails | Contract | Until 1 year after your account ends, or earlier if you explicitly ask |
| Business details: name, phone, address, website, reply-to address | Providing the service | Contract | Same period |
| Team members: e-mail address, role, whether an invitation was accepted | Managing access | Contract | Same period |
| Subscription: plan, period, status, note, payment references | Providing the service, following up payment | Contract | Same period; see also the paragraph below the table |
| Invoices and payment records | Statutory bookkeeping duty | Legal obligation | 7 years |
| E-mail you send me | Answering your question | Legitimate interest: being able to answer you | Not set yet |
| Sign-in data and sessions, including IP address and browser | Security | Legitimate interest: preventing account abuse | Not set yet |
| IP address and browser in server logs and traffic statistics | Security, finding faults | Legitimate interest: keeping the service safe and available | Traffic statistics 30 days per hour and 395 days per day, with full IP address and country. Container logs: no fixed period |
| IP address and e-mail address on too many attempts | Limiting abuse | Legitimate interest: limiting abuse | Only in the server’s working memory, until the counter is cleared or the server restarts |
| Hashed IP address when starting a sandbox | Limiting abuse | Legitimate interest: limiting abuse | 1 hour |
| Sandbox data | Test environment without an account | Legitimate interest: letting developers test | 24 hours |
| What you enter in the demo on the site | Showing how the form works | Legitimate interest: being able to show the service | Not set yet |
If you cancel a subscription, your account stays: you return to Free and your data stays. The year only starts once your account has ended. Until this can be done automatically, I delete accounts and data by hand.
4. Do you have to provide data?
Without an e-mail address and password you cannot create an account; they are needed for the contract. Business details, team members and a phone number are optional, but some features do not work without them. You can use the demo and the sandbox without entering anything about yourself.
I make no decisions about you that are taken by a computer alone, and I do not build profiles.
5. Who receives data?
I do not sell data. The parties working for me are in the list of subprocessors and suppliers. The main ones are Hetzner (hosting and backups in Germany), Scaleway (e-mail from France) and bunny.net (website and documentation).
The marketing site shows an example of the booking form. That form comes from app.nisebookings.com, so your IP address and browser also reach my server at Hetzner.
Otherwise I only share data when the law requires it.
6. Outside the European Union
Where I can, I choose EU suppliers. The application and database run in Nuremberg, Germany.
E-mail to info@nisebookings.com is for now with MXroute in the US.
bunny.net serves the site from servers worldwide, so an IP address may be processed outside the EU.
7. Cookies and measurement
The marketing site and the documentation set no cookies and use no analytics or tracking pixels. Fonts are served from my own servers.
The application at app.nisebookings.com only uses functional cookies: a sign-in cookie and a language cookie (nise_lang, 1 year). These need no consent.
If I start counting visitors later, I will update this statement first.
8. Security
The measures are in annex 3 of the processor agreement. Data disappears from backups later than from the live environment.
9. Your rights
You may see, correct or delete your data. You may also object, have processing restricted and have your data transferred. If you gave consent, you can withdraw it.
Send your request to info@nisebookings.com. You get an answer within one month. For now I delete accounts by hand.
If you are not satisfied, you can complain to the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.
10. Changes
When this statement changes, the new version appears on this page with a new date. Account holders get an e-mail about important changes.