Amster Vastgoed processes personal data of visitors to this website and of people who get in touch with us, for example for a sale, purchase, rental or valuation, or because of a job application. We do so carefully, in line with the GDPR and with extra attention to the Wwft, the Dutch anti-money-laundering law that applies to real estate agents. Below you can read exactly which data we process, what for, and which rights you have.

What we process

Depending on why you get in touch with us, we may process the following types of data:

  • Contact details: name, address, email address, phone number.
  • Identification data: a copy of a valid proof of identity and your citizen service number (BSN), only where the Wwft requires it, such as in a purchase or sale.
  • Property data: address, floor area, features and Land Registry (Kadaster) details of the home you are selling, buying or having valued.
  • Financial data: bank details for arrangements around our fee, and mortgage information where relevant to a purchase.
  • Communication: emails, notes of phone calls and notes we make during our work for you.
  • Job application data: your résumé, cover letter and contact details when you apply for a job with us.
  • Website use: visit data recorded in a privacy-friendly way without cookies, with the IP address masked immediately (see the section on cookies below).

What we use it for

We use your data solely for the following purposes:

  • Carrying out the work you have engaged us for (for example a sale, purchase, rental, valuation or advice).
  • Meeting legal obligations, in particular the Dutch Money Laundering and Terrorist Financing (Prevention) Act (Wwft).
  • Communication about your file, including newsletters if you have explicitly consented to them.
  • Assessing and handling job applications and, only with your consent, keeping your details on file for future vacancies.
  • Improving our services based on anonymized insights.

Our legal grounds for processing data

Depending on the contact or the work involved, we process data on one of these GDPR legal grounds:

  • Performance of a contract: when we guide you through a sale, purchase, valuation, rental or advice.
  • Legal obligation: when we have to process data for tax records or Wwft checks.
  • Consent: when you sign up for a newsletter, when we share data within the Qualis network for an off-market sale, or when we keep your job application data longer for future vacancies.
  • Legitimate interest: when we follow up on contact requests, handle a job application you submitted, improve our services or prevent misuse of the forms on the website.

Where we ask for your consent, you can withdraw it later. That does not affect processing that already took place lawfully.

We explicitly do not use your data for profiling, automated decision-making or building marketing profiles that are shared with third parties.

How long we keep it

Different types of data have different retention periods, based on legal obligations and operational need:

  • Administrative records (invoices, engagement confirmations): 7 years, in line with the Dutch tax retention obligation.
  • Wwft identification data: 5 years after the file is closed, in line with the Wwft retention obligation for client due diligence.
  • Correspondence about your file: 5 years after completion, in case questions or disputes arise.
  • Contact requests that do not lead to an engagement: 12 months, after which we delete them unless you explicitly want us to stay in touch.
  • Job application data: no later than four weeks after the application process ends, or up to one year if you give us permission to keep your details for future vacancies.
  • Contact and request forms during a technical failure: if your message cannot be sent by email right away, we keep your submission briefly and shielded (not publicly accessible) on our own server in the Netherlands so we can still process it. We delete this temporary copy automatically within 30 days.
  • Website statistics: raw visit data, recorded in a privacy-friendly way (your IP address is masked immediately on arrival and no cookies are used), is deleted automatically after 180 days. The aggregated reports based on it (for example visitor numbers per month) contain no personal data and are kept indefinitely.

Who we share it with

We only share your data when that is strictly necessary to carry out your file, or when a legal obligation requires it:

  • Civil-law notary in a purchase or sale, for drawing up the deed of transfer.
  • Bank or mortgage lender in connection with financing, but only where you have expressly consented to us sharing the relevant data.
  • NWWI when we have a valuation report validated.
  • Qualis network for an off-market sale or off-market listings, only after your explicit approval and only the information needed to reach the right buyer (never your name without prior consent).
  • Competent authorities when the Wwft, tax law or a court order requires it.

We do not work with external marketing platforms and do not share data with data brokers or advertising networks.

How we protect it

We take appropriate technical and organizational measures to protect your data. In practice that means:

  • Access to files is limited to the team members directly involved in your file.
  • Identification documents are stored encrypted and only consulted for Wwft checks.
  • Our website runs over an encrypted connection (HTTPS) and is hosted on a server in the Netherlands, under Dutch jurisdiction.
  • We do not make backups to clouds outside the European Economic Area.
  • To limit misuse of the contact and request forms, we temporarily use a derived technical key. We do not store your IP address in readable form and do not use it to track you; the key is deleted automatically after a short time.

Your rights

Under the GDPR you have a number of rights regarding your personal data. At any time you can ask for:

  • Access: an overview of the data we hold about you.
  • Rectification: correction of inaccurate or incomplete data.
  • Erasure: deletion of your data, insofar as legal retention periods allow.
  • Restriction: temporary restriction of processing while a correction or objection of yours is being handled.
  • Objection: objecting to specific processing, for example newsletters or marketing emails.
  • Data portability: a structured export of your data so you can use it elsewhere.

Email info@amstervastgoed.nl to exercise any of these rights. We respond within four weeks, often sooner. Not satisfied with how we handle your request? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

The Wwft context

Real estate agents are subject to the Dutch Money Laundering and Terrorist Financing (Prevention) Act (Wwft). That law requires us to carry out client due diligence for every purchase or sale engagement. In practice that means:

  • We ask for a valid proof of identity and, depending on the file, also for information about the origin of the funds used to finance the purchase.
  • For (U)HNWI files, additional verification may be needed, for example with international buyers or more complex ownership structures.
  • We are required to report unusual transactions to the Financial Intelligence Unit-the Netherlands (FIU-the Netherlands). We do so because the law requires it, not out of excessive caution.
  • This data is kept for 5 years after the file is closed and then destroyed.

We explain up front, honestly, what we need, why, and how long we keep it. No surprises halfway through.

Cookies and analytics

This website is cookie-less by default. We do not use Google Analytics, Google Tag Manager, Google Fonts, Google Maps iframes, the Facebook Pixel, YouTube embeds with cookies or heatmap tools such as Hotjar or Microsoft Clarity. No advertising networks, no data brokers, no tracking pixels.

What we do use:

  • Functional cookies that are strictly necessary for the website to work correctly and securely, for example for form security and a temporary session. Under the Dutch Telecommunications Act (Telecommunicatiewet), these cookies do not require consent.
  • Realworks CDN for showing property photos and videos. Realworks is a Dutch company with which we have a data processing agreement.
  • Privacy-friendly, cookie-free web statistics that we host ourselves on a server in the Netherlands. This tool uses no cookies and shares no data with third parties. Your IP address is only ever stored in masked form.
  • Valuation wizard (taXapi) on the valuation page. This is an external valuation tool that we offer as an option. The wizard only loads after you click on it: until then no connection to taXapi is made and no data is shared. Whatever you enter in the wizard after that is processed by taXapi as an independent party under its own privacy statement.
  • Planner for viewings and meetings (HousApp). On our property pages you can schedule a viewing directly. On the pages where we offer the planner (such as selling, buying, off-market sale, contact and introduction) you can book a consultation about selling or buying, request an indication of your home's value, or get an estimate of what you may be able to borrow. The planner loads automatically and retrieves its settings from HousApp; HousApp then receives the address of the page and some technical details of your visit, such as your IP address. If you use the planner, HousApp receives what you enter: your contact details (whether you are a private individual or a business, form of address, name, email address, phone number), your address, the date and time of an appointment, your search preferences (buying or renting, price and floor area), why you want an indicative property value, your gross annual income and your partner's gross annual income if you want to know what you may be able to borrow, an optional comment, and your answers to the questions the planner asks, for example about your current home and whether we may contact you. HousApp generates an indicative property value based on your address. If you indicate that we may put you in touch with a mortgage advisor, we share your name and contact details with that advisor for that purpose. This data goes directly from your browser to HousApp, which processes it on our behalf to schedule and follow up on your request; we have data processing arrangements in place for this. When you book, Cloudflare (Turnstile) runs a brief security check against misuse.

Because we use no third-party tracking cookies, you do not have to click away a cookie banner before you can visit our site. That fits how we see privacy: not as a formality, but as a principle.

Contact

For questions about this privacy statement or about how we handle your data, you can reach us at:

  • Email: info@amstervastgoed.nl
  • Phone: +31 20 261 0992
  • Address: Amster Vastgoed, Jan Evertsenstraat 713, 1061 XZ Amsterdam

For formal GDPR requests (access, erasure, etc.) you can submit your request in writing by email. We may ask for additional information if that is needed to verify your identity carefully. Do not send a copy of your ID on your own initiative. If we do ask for one, cover the details we do not need, such as your BSN and photo, or use the KopieID app from the Dutch government (in Dutch). We confirm receipt within a few business days and handle the request within four weeks.

This privacy statement applies from the date shown at the top of this page. Changes are noted at the top, with a new date and version number.