1. Who we are
Vogel Visibility is a trade name of Neverrest B.V., Chamber of Commerce 24271225, Absrechtstraat 59, 2729 AW Zoetermeer. Neverrest B.V. is responsible for the processing of your data. Please send any questions to Stefan Vogel at stefan@vogelvisibility.com.
2. What data we use and why
We only use the data that is needed for what you request from us.
| When | What data | What for | Legal basis |
|---|---|---|---|
| You request the free scan | Your website address, your email address and optionally your name | Making and sending the scan and suggesting an introductory meeting | Your request, i.e. steps taken before any agreement is in place |
| You email, call or message us on WhatsApp | Your name, contact details and what you tell us | Answering your question | Your request, or our interest in being able to answer questions |
| You continue with the research | The answers you give in your portal, the competitors you name and, if you grant it, view access to Search Console or Bing Webmaster Tools | Carrying out the research | Your request |
| We work together | Company details, contact person, texts and images you supply, access to your website or hosting if agreed | Carrying out the assignment | The agreement |
| We email your business on our own initiative | Company name, website address, the business contact address shown on your website and public information about your business and your website | Sending you a scan of your website because we see concrete opportunities in it, with no more than two short follow-up emails | Our legitimate interest in pointing out a concrete opportunity for improvement to businesses. We only use business data that is public and you can always unsubscribe |
| Invoices and bookkeeping | Company and invoicing details | Our bookkeeping | A legal obligation |
We don’t send newsletters, don’t make unsolicited calls and don’t sell data. We do sometimes email a business on our own initiative with a scan of its website, because we see concrete opportunities there. For this we only use the business contact address shown on the website and information that is public, such as the website itself and the Google Business Profile. We only send such an email if the law allows it. Every email states who we are and how to reach us. A short reply is enough to unsubscribe. If you don’t respond, we send no more than two short follow-up emails. If you unsubscribe or object, we stop immediately. We then keep only your email address and the date on our unsubscribe list, so that we don’t email you again.
3. Suppliers who work for us
We use suppliers for our website, email and client work. They process data on our behalf. Besides Stefan, Gaby Palland, who handles editing and quality control, has access to your texts and reports. Apart from these suppliers and the AI services in section 4, no other parties receive your data unless the law requires it.
| Supplier | What they do | Status |
|---|---|---|
| Kinsta | Hosting of the website and the client portals | The data processing agreement is part of Kinsta’s terms, with standard contractual clauses for transfers. The website runs in the Amsterdam data centre |
| Cloudflare, MailChannels and other subprocessors of Kinsta | Network and security in front of the website; sending the form emails | Engaged by Kinsta and named in Kinsta’s list of subprocessors. MailChannels processes data in Canada and the United States |
| Microsoft 365 | Business subscription; Microsoft’s data protection terms form part of the product terms. Email is stored within the EU and EFTA. According to Microsoft’s product terms, certain data from the core services is located in the Netherlands | |
| TransIP | Domains and the hosting of client sites under construction | Data processing agreement concluded. Data centres in the Netherlands |
| Exact | Bookkeeping and invoices | A data processing agreement applies through Exact’s SaaS terms. According to Exact, personal data is processed within the European Economic Area |
The region at Kinsta, the storage location at Microsoft and the data processing agreement with TransIP were checked in our accounts on 28 September 2026.
In measurement tools such as Ahrefs and Semrush we enter your website address, keywords and the names of competitors. These may include a person’s name, for example when a business is named after its owner. We don’t enter contact details there.
4. AI in our work
We use AI for research, analysis and working out the details. What we deliver, we review ourselves.
We use Claude from Anthropic and ChatGPT from OpenAI, with personal subscriptions in which the use of our data for training is switched off. We only put information into them that contains no personal data, such as your website address, keywords and what is on your website. Even with public information, we make sure it contains no personal data. Names, contact details and other data about individuals do not go into them.
There is no data processing agreement for these subscriptions. That is why we limit ourselves to information that contains no personal data. Switching off training does not mean the provider deletes conversations right away; they follow the provider’s retention periods.
5. Cookies and measurement scripts
This website loads no advertising, tracking or analytics scripts. Cloudflare sets a cookie (__cf_bm) to recognise bot traffic and protect the site. That cookie is needed for security and expires after a short time.
The WhatsApp button is an ordinary link. Nothing from WhatsApp loads until you click it yourself.
Verified on 28 September 2026 by checking the responses of six pages and the files they loaded.
6. Your client portal
When you request a scan, we set up your own client portal. It contains your website name, the address of your website, the contact person, the competitors you specify, your answers to our questions and your documents.
The portal has a hard-to-guess address and is not indexed by search engines. It has no password, so anyone with the link can open it. That is why you should only share the link with people you want to see it.
Three months after the follow-up measurement meeting we take your portal offline. If that meeting does not take place, the portal goes offline six months after go-live. Before that, you receive all documents as PDFs, so you can keep them yourself.
7. How long we keep data
- We delete a request that does not lead to an assignment no later than twelve months after the last contact.
- If we emailed your business on our own initiative and no assignment follows, we delete that data no later than twelve months after the last email.
- For a request without an assignment, the portal and the documents are also removed, no later than twelve months after the last contact.
- Your client portal goes offline three months after the follow-up measurement meeting, or six months after go-live if that meeting does not take place.
- With an assignment, we keep email and other correspondence until two years after the follow-up measurement.
- We keep invoices and the related records for seven years because the law requires it. That period applies only to those records and not to all your data.
- If you have told us you no longer want email from us, we keep only your email address and the date. That way we won’t email you again.
- Our hosting provider keeps the website’s log files, which include IP addresses, for a few days. We don’t make copies of them ourselves, except in the event of an outage or attack. In that case we keep an extract until the issue is resolved and for no longer than thirty days.
When the portal goes offline, copies still exist in email, in our records and in backups. These follow their own retention periods and therefore don’t all disappear at the same time.
If we delete something, it remains in backups for a while. Backups of the website and the portals are kept for fourteen days. Backups of our own files, including the project folders, are kept for one year. After that it is gone.
8. Your rights
You may ask which data we hold about you, have it corrected or deleted and object to processing. You can also ask us to restrict the processing or to receive your data so you can take it elsewhere. To do so, email stefan@vogelvisibility.com. We respond within one month. Sometimes we are allowed or required to keep data for longer, for example for our bookkeeping. In that case we explain why.
If we cannot resolve the matter together, you can lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).
9. Changes
If our way of working changes, we update this statement. The date of the version is always shown at the top.