GDPR rights
Your data protection rights as a max-moves user — and exactly how to use them.
Your rights at a glance
| Right | What it means |
|---|---|
| Access | Get a copy of all the personal data we hold about you. |
| Rectification | Correct anything that's wrong or out of date. |
| Erasure | Have your data deleted ("right to be forgotten"). |
| Restriction | Pause processing while a dispute is resolved. |
| Portability | Receive your data in a machine-readable format you can move elsewhere. |
| Objection | Object to processing based on our legitimate interests. |
| Withdraw consent | Take back any consent you gave (e.g. marketing emails). |
| Complain | Lodge a complaint with the Dutch DPA, Autoriteit Persoonsgegevens. |
How to exercise a right
Email info@max-moves.nl from the address you used on max-moves. Tell us which right you want to exercise. We may ask one identifying question to confirm it's really you.
We respond within 30 days — usually much faster.
Data processors we use
| Service | What it processes | Location |
|---|---|---|
| Hosting (Hetzner) | All quiz data, account data | Germany (EU) |
| Email (Postmark) | Transactional emails | EU region |
| Plausible Analytics | Anonymized usage stats | Germany (EU) |
| Stripe | Provider payouts (no user payments) | EU |
We have signed Data Processing Agreements (DPAs) with each processor and review them annually.
International transfers
Personal data is stored within the European Union. We do not transfer your data outside the EU/EEA without an appropriate safeguard (Standard Contractual Clauses or an adequacy decision).
DPO
We do not have a formal Data Protection Officer (we are below the threshold), but our privacy contact is staffed by a senior team member. Reach them at info@max-moves.nl.
Filing a complaint
You can complain directly to the Dutch supervisory authority, Autoriteit Persoonsgegevens. We'd rather you tell us first so we can fix it — but it's your right either way.