Privacy and cookie statement

What personal data we process, and why

This statement covers the processing of personal data by the Woonstaete group. It explains whose data we process, for what purposes and on what legal basis, who we share it with, how long we keep it and what rights you have. This version is dated 5 November 2026.

1. Who we are

In this statement, ‘Woonstaete’, ‘we’ and ‘us’ mean Woonstaete Groep B.V. and the companies in which it holds a majority interest: Woonstaete Ontwikkeling B.V., Woonstaete Beleggingen B.V., Woonstaete Asset Management B.V. and the companies that take out the loan for each project, such as WSE I B.V. Each company is responsible for the personal data it processes in the course of its own work. Whatever your question, Woonstaete is always your point of contact.

Woonstaete Groep B.V.
Koolhovenstraat 1
3772 MT Barneveld, the Netherlands
Chamber of Commerce (KvK) no. 68792468
info@woonstaete.nl · +31 85 001 48 44

2. Whose data we process

We process personal data about lenders and people considering making a loan, tenants and people looking for a home, job applicants, people at the organisations we work with, visitors to this website, and people who complete a form on another website in response to one of our advertisements. Below, we set out for each group what we process and why.

2.1 Lenders and prospective investors

Before you make a loan, and for as long as it runs, we process your name, address and contact details, your date of birth, a copy of your identity document, your bank account number, details of your company if you invest through one, the source of the funds you invest, and the details of your loan, such as the amount, the interest and the payments made to you. We use this data to:

  1. establish and verify your identity;
  2. screen you against sanctions legislation and assess the source of the funds you invest;
  3. prepare and perform the loan agreement, and pay your interest;
  4. send you the borrower's annual report and the invitations from Stichting Crowdfundersbelangen, and keep you informed about developments affecting your loan and the homes;
  5. tell you about new loan rounds and contact you about them;
  6. comply with the law and with the obligations that apply to the civil-law notary and the payment service provider;
  7. evaluate and improve our projects, our loans and the way we work.

For purposes a, c and d, the legal basis is the performance of our agreement with you and the steps taken before it is entered into. For purposes b and f, the legal basis is compliance with a legal obligation and, in addition, our legitimate interest in preventing fraud and money laundering and in cooperating with the checks that the notary and the payment service provider are required to carry out. For purpose e, the legal basis is our legitimate interest in keeping lenders informed; you may object to this at any time, in which case we will stop. For purpose g, the legal basis is our legitimate interest in improving our work; for this purpose we remove names from the data wherever possible.

For the investor portal we use Bloqhouse, which stores this data on our behalf as a processor. Your payment is made through Online Payment Platform (OPP), a payment service provider licensed by De Nederlandsche Bank, the Dutch central bank. OPP carries out its own identity verification and shares the result with us if you consent to this in the portal. The notary receives the data needed to create the mortgage, and Stichting Crowdfundersbelangen receives the data it needs to act on behalf of the lenders.

2.2 Tenants and prospective tenants

We process your name, address and contact details, your date of birth, your income details and a copy of your identity document in order to assess whether a home suits your circumstances, to prepare and perform the tenancy agreement, to collect the rent and to arrange maintenance. The legal basis is the tenancy agreement and the steps taken before it is entered into and, for identification, a legal obligation.

2.3 Job applicants

If you apply for a job with us, we process your name, contact details and career history in order to assess your suitability for the role and to keep in touch with you about it. The legal basis is the prospective employment contract and our legitimate interest in making a good choice.

2.4 Partners and suppliers

If you work at a municipality, landowner, contractor, adviser, notary's office or another party we work with, we keep your name, job title and business contact details and, where necessary, payment details, so that we can work together, invoice and make payments. The legal basis is the agreement with the organisation you work for and our legitimate interest in maintaining those business contacts. Our accounting records are also subject to statutory requirements.

2.5 Visitors to this website

If you complete a form or book a meeting, we process your name, email address and phone number in order to answer your question or hold the meeting and, if you have asked us to, to send you information about our loans afterwards. The legal basis is your request and, for the information sent afterwards, your consent. Your details are recorded in Notion, the system we use to keep track of requests and of our contact with prospective investors. Notion Labs, Inc. stores this data as a processor on our instructions; because the company is based in the United States, the safeguards described in section 5 apply. We also measure how quickly our pages load; this measurement sets no cookies and does not recognise visitors. Section 11 covers cookies in more detail.

2.6 People who respond to an advertisement

If you complete a form linked to one of our advertisements on another website or on a social network, we receive your name and contact details so that we can contact you and send you information. We do so on the basis of the consent you give when you submit that form. These requests are also recorded in Notion (see 2.5).

3. Withdrawing your consent

Where you have given us your consent, you may withdraw it at any time by emailing info@woonstaete.nl. To withdraw your consent for cookies, use Cookie settings at the bottom of any page. Withdrawing consent does not affect the lawfulness of what we did before you withdrew it.

4. Who we share data with

We do not sell data. We share it only with your consent, where this is necessary for our work, where the law requires it, or where we suspect that our rights or those of others are being infringed. The parties we work with are the suppliers of our systems (such as Bloqhouse for the portal, Notion for incoming requests and the scheduling service for meetings), the payment service provider OPP, the notary, Stichting Crowdfundersbelangen, our accountant and our advisers. We have a data processing agreement with each party that processes data on our instructions.

Data may be shared between the Woonstaete companies within the group, for example because the accounts are kept centrally. If a Woonstaete company is sold, merged or reorganised, the data relating to its work may be transferred to the new owner, who will then be bound by this statement.

5. Transfers outside the European Economic Area

We keep data within the European Economic Area (EEA) wherever possible. If data is transferred to a country outside the EEA, for example through a software supplier, we do so only with the safeguards required by law, such as the European Commission's standard contractual clauses. You may request a copy of these from us.

6. Security

We protect your data with measures appropriate to the data we process and to the state of the art, so that only the people who need it for their work can access it. The portal and the payment environment are run by parties that have their own security measures and supervision in place.

7. How long we keep your data

We keep data for no longer than is necessary for the purpose for which we hold it, unless the law requires us to keep it longer. In practice:

  • We keep a lender's data for the term of the loan and for up to seven years after the last loan ends.
  • If no loan is made, or your interest goes no further, we keep your data for no more than 36 months. Deciding on a loan of € 100,000 or more often takes years, and during that time we would like to be able to keep you informed, if you wish.
  • We keep a tenant's data for the duration of the tenancy and afterwards for as long as the law requires.
  • We delete a job applicant's data four weeks after the recruitment process ends, unless you take up employment with us or consent to our keeping it for longer.
  • We keep our financial records for seven years to meet the statutory retention period for tax purposes.

8. Your rights

You have the right to access the data we hold about you, to have it rectified or erased, to have its processing restricted, to object to processing based on our legitimate interest, and to receive the data you have provided to us in a commonly used file format. You may object at any time to our using your data to tell you about new loans, and we will then stop.

Please send your request to info@woonstaete.nl. To make sure that nobody else can request your data, we may ask you to verify your identity. We will respond within one month. If we cannot comply with a request, in whole or in part, for example because a statutory retention period applies, we will explain why.

9. Questions and complaints

If you have a question or complaint about this statement or about how we handle your data, please contact us at info@woonstaete.nl or on +31 85 001 48 44; we will be glad to help. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes to this statement

If there is any change in the data we process or the parties involved, we will amend this statement and update the date at the top. The version on this page is the version that applies.

11. Cookies

A cookie is a small text file that a website stores on your computer or phone through your browser. We only place cookies if you consent to them in our cookie banner. Once you have made your choice, we set a single cookie of our own that remembers it for a year, so that we do not ask you again on every page. We measure how quickly our pages load without using cookies and without recognising visitors.

We advertise on Google, LinkedIn and Meta (Facebook and Instagram). If you accept advertising cookies, we load the Google tag, the LinkedIn Insight Tag and the Meta pixel. These tell us which advertisement brought you to the site and whether you then booked a meeting or requested a brochure, and they allow Google, LinkedIn and Meta to show you our advertisements later. If you accept statistics cookies, Google Analytics measures how visitors use the site. What Google, LinkedIn and Meta do with that data, and how long they keep their cookies, is set out in their own privacy and cookie policies. If this involves transferring data to a country outside the EEA, the safeguards described in section 5 apply.

If you decline, we load none of these services and the site works in exactly the same way. You can change or withdraw your choice at any time through Cookie settings at the bottom of any page.

If you book a meeting through the site, we load the Calendly scheduling service at that point. Calendly places its own cookies to make the booking, and these are covered by Calendly's privacy policy. The investor portal at investeren.woonstaete.nl is a separate environment run by Bloqhouse, with its own cookie policy.

Our website contains links to other websites and to our LinkedIn profiles. How those parties handle your data is set out in their own policies. You can always refuse or delete cookies through your browser settings.