Last updated: 18 May 2026. This page supplements our Privacy Policy. It sets out the formal controller and processor structure, the legal bases we rely on, and the procedure for exercising your rights under EU Regulation 2016/679 (GDPR) and the Dutch Uitvoeringswet AVG (UAVG).
Data controller
The data controller for all personal data processed through betvouch.com is:
- Name: VerifiedPress
- KVK number: 42028625
- Registered address: Valkeniersdonk 307, 7326 KR Apeldoorn, Netherlands
- Responsible person: Marijan Karajanov
- Contact for data protection matters: privacy@betvouch.com
BetVouch is the brand name and publication operated by VerifiedPress. VerifiedPress is the legal entity that determines the purposes and means of data processing.
VerifiedPress does not meet the thresholds for mandatory appointment of a Data Protection Officer under GDPR Article 37 at current scale. We monitor this as the platform grows and will appoint a DPO if those thresholds are reached.
Legal bases we rely on (Art. 6 GDPR)
Every processing activity has a documented lawful basis. The bases we use are:
- Performance of contract (Art. 6(1)(b)) — processing account registration data, user reviews, and business owner profile data to deliver the BetVouch service you signed up for.
- Legitimate interests (Art. 6(1)(f)) — security monitoring, fraud prevention, abuse detection, and server logging. Our legitimate interest in protecting the platform and its users is not overridden by your interests where processing is limited in scope and duration.
- Consent (Art. 6(1)(a)) — newsletter subscriptions and any optional analytics cookies. Consent is collected at the point of opt-in and can be withdrawn at any time without affecting any other processing.
- Legal obligation (Art. 6(1)(c)) — retaining billing records for 7 years to comply with Dutch tax law, and responding to lawful requests from law enforcement or regulatory authorities.
Your rights (Art. 15–22 GDPR)
You have the following rights over your personal data. Each right has a corresponding GDPR article for reference.
- Right of access (Art. 15) — receive a copy of the personal data we hold about you and information about how it is used.
- Right to rectification (Art. 16) — have inaccurate or incomplete data corrected.
- Right to erasure (Art. 17) — have your data deleted where there is no overriding legal obligation to retain it.
- Right to restriction of processing (Art. 18) — have processing paused while accuracy or lawfulness is disputed.
- Right to data portability (Art. 20) — receive data you provided to us in a structured, commonly used, machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, email privacy@betvouch.com with the subject line "Data Subject Request". We will verify your identity before acting. Our response time is 30 days from receipt of a complete, verifiable request. For complex or multiple requests, we may extend this by up to two months and will notify you in advance.
There is no fee for submitting a data subject request unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act, with written reasons.
Supervisory authority
The supervisory authority for VerifiedPress is the Autoriteit Persoonsgegevens (AP), the Dutch data protection regulator.
You have the right to lodge a complaint with the AP at any time, including before or without first contacting us. We would prefer the opportunity to address your concern directly, but that is your choice.
Data transfers outside the EU/EEA
We process data within the EU/EEA wherever possible.
- Hetzner Online GmbH — servers in Germany (EU). No transfer outside EEA.
- Stripe, Inc. — payment processing under a EU-compliant data processing agreement using Standard Contractual Clauses (SCCs) approved by the European Commission.
- Email delivery provider — data shared is your email address only. We use providers operating under SCCs or with EU-adequate data protection standards.
We do not transfer personal data to any country without an EU adequacy decision or SCCs in place.
