EN

Legal · Privacy · GDPR

Privacy Policy

Version: 11 July 2026

Who we are

Yuvo, registered at Loosduinseweg 65H, 2571 AA, The Hague, Netherlands, is responsible for the processing of personal data as described in this privacy policy.

Contact details

  • Address: Loosduinseweg 65H, 2571 AA, The Hague, Netherlands
  • Website: yuvo.eu
  • Phone: +31 6 48667790
  • Data Protection Officer: dpo@alias.yuvo.eu

Our role: Controller vs. Processor

We act as controller for:

  • Our own client relationships (billing, contact, marketing)
  • Visitors to our own website (yuvo.eu)

We act as processor for:

  • Visitor data on the WordPress websites we manage on behalf of clients. Our Data Pro Statement and the Standard Processing Clauses from Chapter 2 of the NLdigital Terms 2020 apply in this context. The client (website owner) is the controller.

What personal data do we process?

Yuvo processes your personal data because you use our services and/or because you have provided it to us yourself:

  • First and last name
  • Internet browser and device type
  • Bank account number (IBAN)
  • Address details
  • Telephone number
  • Email address
  • IP address
  • Location data
  • Data about your activity on our website
Our website is not intended to collect data from visitors under the age of 16, unless they have consent from a parent or guardian. If you believe we have collected data from a minor without consent, please contact us at dpo@alias.yuvo.eu , we will delete this information immediately.

Why do we process your personal data?

Yuvo processes your data for the following purposes:

  • Processing payments (basis: performance of contract / legal obligation)
  • Sending our newsletter and promotional material (basis: consent)
  • Contacting you by phone or email for service delivery (basis: performance of contract)
  • Informing you about changes to our services and products (basis: performance of contract / legitimate interest)
  • Delivering goods and services (basis: performance of contract)
  • Analysing behaviour on our website to improve the user experience (basis: consent / legitimate interest)
  • Compliance with legal obligations (basis: legal obligation)

Subprocessors and international data transfers

We use the following subprocessors:

Service provider Service Location
WP Umbrella Management, monitoring & backups of WordPress websites 🇫🇷 France (EU)
Brevo Newsletter and email marketing platform 🇫🇷 France (EU)
ProtonMail Email services 🇨🇭 Switzerland
Jortt Financial administration 🇳🇱 Netherlands
Knab Banking services 🇳🇱 Netherlands
Mollie Payment processing 🇳🇱 Netherlands
Crisp Live chat support 🇫🇷 France (EU)
Cloudflare Turnstile Form spam prevention (CAPTCHA) 🇺🇸 United States
mijn.host Server infrastructure, firewall, malware protection & local backups 🇳🇱 Netherlands

For transfers to Switzerland (ProtonMail), an adequacy decision by the European Commission applies. WP Umbrella backups are stored on WP Umbrella’s own servers in France, fully within the EU, no adequacy decision required.

For transfers to the United States (Cloudflare Turnstile), the EU-U.S. Data Privacy Framework (DPF) certification applies, with Standard Contractual Clauses (SCCs, Art. 46 GDPR) as a fallback.

mijn.host is our recommended hosting subprocessor for clients who use our hosting service. If you choose to host your website with a different provider, that provider becomes the applicable subprocessor for your site’s data instead of mijn.host.

How long do we retain your data?

Yuvo does not retain personal data longer than necessary:

Data type Retention period
Invoice data and administration 7 years (statutory obligation, Dutch Tax Authority)
Backups of client websites 90 days to 6 months (depending on plan)
Contact details and correspondence 6 months after termination of the agreement
Newsletter subscribers Until unsubscription
Website logs and cookies Session to 1 year (depending on cookie type)

After termination of our services, personal data is not retained for more than 6 months, unless a longer period is legally required.

Sharing personal data with third parties

Yuvo shares personal data only where necessary for service delivery (as listed under subprocessors above) or where we are legally required to do so.

Cookies and similar technologies

Yuvo places only functional cookies on this website, needed to make the site work properly and to remember your language preference. Under the ePrivacy Directive and the GDPR, this type of cookie doesn’t require prior consent, so we don’t show a cookie pop-up on your first visit. We do not place any tracking, marketing, or analytics cookies.

For a full overview with retention periods, see our Cookie Policy. For general information about cookies, you can also visit VeiligInternetten.nl.

Service provider Cookie Category Retention
Polylang pll_language Functional 1 year

Your rights

You have the following rights with regard to your personal data:

Right of access, rectification, or erasure of your personal data
Right to withdraw consent for data processing
Right to object to the processing of your data
Right to data portability
Right to lodge a complaint with the Dutch Data Protection Authority

To exercise these rights:

Action Details
Submit a request Send an email to dpo@alias.yuvo.eu. Please include a copy of your ID (with photo, MRZ, passport number, and BSN blacked out).
Response time Within 1 month.
Lodge a complaint Via autoriteitpersoonsgegevens.nl.

How do we protect your data?

Yuvo takes the protection of your data seriously and has implemented the following measures:

EncryptionTLS/SSL for data in transit, end-to-end encryption via ProtonMail
Backup encryptionWP Umbrella encrypted backups on their own servers in France (EU)
DNS securityDNSSEC against redirection to fraudulent websites
Email securityDKIM, SPF, DMARC to protect against phishing and spoofing
Access control2FA where possible, strong password policy
Security softwareAntivirus and firewall on work devices

Data breaches

In the event of a data breach, we follow this protocol:

  • We notify the affected client within 24 hours of discovery
  • We document the incident and take immediate steps to prevent recurrence
  • For serious breaches with high privacy risk, the client (as controller) determines whether notification to the Dutch Data Protection Authority is required

Data Processing Agreement (for our clients)

When you take out a WordPress maintenance subscription, a webdesign project, or a one-time service with us that involves processing personal data, we enter into a Data Processing Agreement with you in accordance with the NLdigital Terms 2020. This consists of:

  • Our Data Pro Statement (practical implementation)
  • The Standard Processing Clauses from Chapter 2 of the NLdigital Terms (legal clauses)

Changes to this privacy policy

We reserve the right to update this privacy policy. Changes will be published on our website. For significant changes, we will notify you proactively by email.

Questions? Feel free to contact us at dpo@alias.yuvo.eu.