Privacy Notice
Effective: 1 January 2026
This notice explains how Finance Center B.V. handles personal data through our website and our service. We act as a controller for personal data we collect directly through this website, and as a processor under our customers' instructions for personal data they upload to the platform.
Data we collect
- From visitors — name, email, employer, role, message content, IP address, browser metadata.
- From customer admins and employees — username, business email, hashed credentials, role, audit metadata.
- From customers' uploads and connections — accounting records, bank transactions retrieved via Open Banking, expense data, invoices, processed strictly under the customer's instructions.
Open Banking
We retrieve bank-account information through licensed AISPs under PSD2. Connections are explicit, time-limited, and revocable.
Lawful bases (GDPR)
Consent (marketing where required), contract performance, legitimate interest, legal obligation (tax, AML).
Sub-processors
We don't sell personal data. We share with sub-processors under contract, professional advisors, and authorities where legally required. International transfers governed by SCCs.
Retention
Marketing-form data: 24 months. Customer platform data: per the customer agreement and applicable financial-records retention law (typically 7–10 years). Audit logs: 7 years.
Your rights
Contact privacy@finance-center.it.com. Lead authority: Dutch Autoriteit Persoonsgegevens.
Security
SOC 2 Type II and ISO 27001 controls. Suspected compromise: security@finance-center.it.com.
Contact
Finance Center B.V. · Herengracht 282, 1016 BX Amsterdam