Privacy Policy

1. Introduction and Responsibilities

Slim Finance B.V. respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR). We take appropriate measures to protect your data and only use it for specified purposes.

2. What Data Do We Collect?

We collect the following categories of personal data:

• Contact details: name, address, telephone number, email address

• Additional personal data: date of birth, citizen service number (BSN), copy of identification

• Financial data: bank account number, payment history

• Automatically collected data: IP address, browser information

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

• Performance of agreements and compliance with legal obligations

• Customer service and management of client relationships

• Marketing purposes, such as newsletters

• Analysis and optimisation of our services

4. Legal Grounds for Processing

We process personal data on the basis of:

• Performance of a contract

• Legitimate interest (for example, service improvement)

• Consent (for example, for newsletters)

• Legal obligations (for example, under the Wwft – Anti-Money Laundering legislation)

5. Security Measures

Slim Finance B.V. has implemented appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, unlawful processing, or other undesirable actions. These measures are regularly evaluated and improved where necessary to ensure a high level of protection.

Technical measures include:

• Use of encryption technologies (such as SSL) to secure data transmission

• Secure servers and firewalls to prevent unauthorised system access

• Access controls, including password protection and multi-factor authentication, for systems processing personal data

Organisational measures include:

• Access to personal data is restricted to authorised employees only, based on role and necessity

• Privacy and data protection training and awareness programmes for employees

• Regular audits and checks to ensure compliance with privacy legislation

Data retention periods

We do not retain personal data longer than necessary for the purposes for which it was collected. Once legal retention periods expire or the data is no longer required, it is anonymised or deleted.

Examples:

• Financial data is retained for 7 years, in accordance with tax retention obligations

• Marketing data is retained until you unsubscribe or withdraw your consent

Continuity and monitoring

We use monitoring tools to detect suspicious activity within our systems. In the event of a data breach, this will be reported immediately to the relevant supervisory authority and, where required, to the affected individuals.

Your role in data security

While we take extensive measures to protect your data, you also play a role in safeguarding your personal information. We recommend that you:

• Use strong and unique passwords for access to our services

• Avoid sharing sensitive information via unsecured channels

If you have questions about our security measures or suspect a security incident, please contact us immediately at support@slimfinance.nl.

6. Your Rights

You have the right to access, correct, delete, or restrict the processing of your personal data.
To exercise these rights, please contact us at support@slimfinance.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Sharing Data with Third Parties

We only share personal data with third parties where necessary for our services.

Categories of third parties include:

• Service providers: external parties supporting our operations, such as IT providers, hosting companies, payment processors, and communication providers. Data processing agreements are in place with these parties.

• Government authorities: where legally required, for example under the Wwft or WIB.

• Financial partners: banks, lenders, or collection agencies, where required for contract execution.

• Marketing and analytics tools: such as Google Analytics. Data is anonymised unless you have given consent.

Data sharing rules

• We do not sell or rent personal data to third parties for commercial purposes

• Data is only shared within the European Economic Area (EEA), unless additional safeguards are implemented for compliant international transfers

8. Cookies

We use cookies to improve our website and services. You can manage cookies through your browser settings.

Types of cookies used:

• Essential cookies

• Functional cookies

• Analytical cookies

• Marketing and tracking cookies

Third-party cookies

For example, Google Analytics, subject to their own privacy policies.

Consent

On your first visit, you will be asked to provide consent for non-essential cookies.

Management options

• Via your browser settings

• Via opt-out tools such as the Google Analytics Opt-out

Retention

• Session cookies are deleted after closing your browser

• Persistent cookies remain until they expire or are manually deleted

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where required, we will inform you of any significant changes.