Privacy Policy

1. Introduction

Casemeister ("we", "us" or "our") attaches great importance to the protection of your personal data. In this privacy statement, we explain what data we collect, why we do so and how we handle it.

This privacy statement applies to all Casemeister services, including our website casemeister.nl, casemeister.com and the Casemeister application (app.casemeister.com).

2. Data Controller

The data controller for the processing of personal data is:

3. What data do we collect?

We collect and process the following categories of personal data:

3.1 Account data

• Name and contact details (email address, phone number)
• Company name and position
• Login credentials (email address and encrypted password)
• Billing details (address, VAT number)

3.2 Usage data

• IP address and browser information
• Login times and session duration
• Features used within the application

3.3 Case data

• Data you enter in cases
• Uploaded documents
• Email correspondence (if linked)
• Phone call data (metadata, no recordings unless explicitly enabled)

4. Purposes of processing

We process your personal data for the following purposes:

• Service delivery: Providing and improving our software
• Account management: Creating and managing your account
• Billing: Sending invoices and processing payments
• Support: Answering questions and providing assistance
• Communication: Sending service-related messages
• Security: Securing our services and detecting fraud
• Legal obligations: Complying with legal obligations

5. Legal bases

We process your personal data based on the following legal bases:

• Performance of contract: For providing our services
• Legitimate interest: For security and improvement of our services
• Legal obligation: For fiscal and administrative obligations
• Consent: For marketing communications (where applicable)

6. Retention periods

We do not retain your personal data longer than necessary:

• Account data: Up to 2 years after account termination
• Case data: Until you delete it or until account termination
• Billing data: 7 years (legal retention requirement)
• Log files: Maximum 12 months

7. Sharing with third parties

We only share your personal data with third parties when necessary:

• Hosting providers: For hosting our application (servers in Frankfurt, Germany)
• Payment processors: For processing payments
• Email providers: For sending transactional emails
• Telephony providers: For providing VoIP services

We have data processing agreements with all these parties. We never sell your data to third parties.

8. Security

We take appropriate technical and organizational measures to protect your data:

• 256-bit SSL/TLS encryption for all data traffic
• Encryption of stored data (at-rest encryption)
• Two-factor authentication (2FA) available
• Regular security audits and penetration tests
• Access control and logging of all actions
• ISO 27001 certified data centers

9. Your rights

Under the GDPR, you have the following rights:

• Right of access: You can request which data we process about you
• Right to rectification: You can have incorrect data corrected
• Right to erasure: You can request deletion of your data
• Right to restriction: You can have processing restricted
• Right to data portability: You can receive your data in a standard format
• Right to object: You can object to certain processing

To exercise these rights, please contact privacy@casemeister.nl. We will respond to your request within 30 days.

10. Cookies

Our website and application use cookies:

• Functional cookies: Necessary for the application to function
• Analytical cookies: For analyzing website usage (anonymized)

We do not use tracking cookies for advertising purposes.

11. Changes

We may update this privacy statement from time to time. For significant changes, we will inform you by email or through a notification in the application. The current version is always available on this page.

12. Contact and complaints

Do you have questions about this privacy statement or about the processing of your personal data? Please contact us:

If you are not satisfied with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - www.autoriteitpersoonsgegevens.nl).