1. Data controller
EuropeVignettes.eu (part of Kenteken Administratie)
Ericssonstraat 2, 5121 ML Rijen, the Netherlands
Email: info@europevignettes.eu
KvK: 42008508 · VAT: NL 8692 62 385 B01
For questions about the processing of your personal data or exercising your rights, you can contact us via the email address above.
2. What personal data do we process?
When purchasing a vignette, we process the following data:
| Category | Examples |
|---|---|
| Identification data | Name, email address, country of origin |
| Vehicle data | License plate, vehicle type (car, motorcycle or camper van) |
| Document data | Photo or scan of your vehicle registration document — for an environmental sticker application with a foreign license plate, and optionally for automatic license plate recognition (text recognition/OCR) to support the order process |
| Order data | Country selected, validity period, purchase date, order number |
| Payment data | Transaction reference and payment status via our payment service provider. We do not store complete card or account details ourselves. |
| Technical data | IP address, browser type, pages visited (solely for the security and functioning of the website) |
| Communication data | Email correspondence and support requests |
We do not process any special categories of personal data (such as health or biometric data).
3. What do we use your data for?
We process your data on the basis of the following legal grounds (art. 6 GDPR):
a) Performance of the agreement
To register your vignette with the official authority of the chosen country, to inform you about your order, and to provide customer service. This is the main purpose for which we process your license plate and personal data: without sharing your license plate and some personal data with the official system of the relevant country, your vignette cannot be registered.
b) Legal obligation
Retaining invoices and financial records in accordance with the Dutch statutory tax retention obligation (at least 7 years).
c) Legitimate interest
Fraud prevention, securing our systems, and the functioning and improvement of the website.
4. Cookies and tracking
We use cookies and similar technologies to make the website function and, only with your consent, to analyse how the website is used. Below you will find an up-to-date, automatically maintained overview of all cookies placed on this website.
5. Who do we share your data with?
We never sell your data to third parties. We only share data to the extent necessary for the performance of the agreement or where we are legally obliged to do so:
- The official authority of the chosen country: your license plate, vehicle type and the validity period of the vignette are passed on to the official toll authority of the relevant country (including ASFINAG in Austria, DARS in Slovenia, NÚSZ in Hungary, BGTOLL in Bulgaria, and the equivalent authorities in Switzerland, Czechia and Slovakia) in order to actually register your vignette. This is a necessary part of the service. Without this transfer, no vignette can be linked to your license plate. These authorities are themselves data controllers for the data they receive and process it according to their own national rules.
- The issuing partner of the German environmental sticker: for an environmental sticker order, your license plate and vehicle data are passed on to the German party that issues the environmental sticker on behalf of the competent authority. For a foreign license plate, the photo or scan of your vehicle registration document that you uploaded is also passed on to this party, because your application is then assessed manually. This party is itself a data controller for the data it receives.
- Payment service providers (including for iDEAL, credit card and PayPal payments): for secure processing of your payment. They are themselves responsible for the processing of your payment data.
- IT and hosting providers: parties that technically manage our website and systems, within the EEA or with appropriate safeguards outside it.
- Government authorities: only where we are legally obliged to do so.
With processors who process personal data on our behalf, we conclude a data processing agreement in accordance with art. 28 GDPR, where applicable. For the transfer of data to the official authority of a country (including Switzerland, which is not an EU member state), this takes place on the basis of necessity for the performance of the agreement; where required, we ensure appropriate safeguards for transfers outside the EEA.
6. How long do we keep your data?
| Category | Retention period | Basis |
|---|---|---|
| Order and customer data | 7 years after purchase | Statutory tax retention obligation |
| Invoices and payments | 7 years | Art. 52 Dutch General Tax Act (AWR) |
| Email correspondence | 2 years | Legitimate interest |
| Server log files (IP, etc.) | 90 days | Security |
| Uploaded vehicle registration photos | 90 days | Data minimization — automatically deleted from our file storage, independent of the regular retention period for other order data |
After the retention period has expired, data is securely deleted or anonymized. Please note: the official authority of the relevant country and the issuing partner of the environmental sticker apply their own, independent retention period for their own registration, and we have no control over this.
7. Security
We take appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), access restriction based on the need-to-know principle, and regular security checks. In the event of a data breach posing a high risk to those concerned, we will report this to the Dutch Data Protection Authority within 72 hours and, if required, to the individuals concerned.
8. Your rights
Under the GDPR, you have the following rights:
To exercise your rights, you can submit a request via info@europevignettes.eu. We will respond within 1 month. We may ask you to verify your identity to prevent misuse.
9. Automated decision-making
EuropeVignettes.eu does not make decisions based on fully automated processing that have legal effects on you (art. 22 GDPR). While registration of your vignette with the official authority is largely automated, this concerns the fulfillment of your own order, not an automated decision about you as a person.
10. Changes
We may amend this privacy policy from time to time. The date at the top of this document indicates the last change. In the event of significant changes, we will actively inform you, for example by email.
11. Contact and complaints
📮 EuropeVignettes.eu, Ericssonstraat 2, 5121 ML Rijen
If you are not satisfied with how your privacy request was handled, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.