1. Who is responsible
Taxionspot, trading under the name VignetteHub, with its registered office at Pastoor Petersstraat 170-46, 5612 LW Eindhoven, Dutch Chamber of Commerce (KvK) number 65752376, is the controller for the processing described in this statement. For privacy questions you can reach us at info@vignettehub.com.
2. What data we process and why
2.1 Your order and its performance
When you order a vignette, we process your email address, the number plate and the country of registration of the vehicle, the chosen product with its start date, the payment status and the order number. For a Dutch number plate we retrieve public vehicle data (such as make, model name and other public vehicle characteristics) via the open data of the RDW, the Dutch vehicle authority, and store that data with your order, so that both you and we can check that it concerns the right vehicle and we can determine the correct product and tariff with the operator. Legal basis: performance of the contract.
To perform the contract, we pass on the number plate, the country of registration and the chosen period to the official operator of the country of destination (ASFINAG, BAZG, edalnice.gov.cz, eznamka.sk, CNAIR or BG Toll). Without that transfer the vignette cannot be registered. The Swiss BAZG is located in Switzerland; an adequacy decision of the European Commission applies to Switzerland.
2.2 Payment
Payments are handled by our payment service provider PayPal. Your card or account details are processed directly by PayPal and never reach our systems. From PayPal we only receive the status of the payment, the payment method chosen and a transaction reference. PayPal is itself the controller for the payment processing; see PayPal's privacy statement.
2.3 Unfinished orders (reminder emails)
If you enter your email address in the ordering flow but do not complete the order, we keep your email address and the progress of your order. We may then send you a reminder to complete the order. Each reminder is sent once per stage and you will receive no more than three in total. Legal basis: our legitimate interest in helping you complete an order you started yourself. If you do not want these emails, a message to info@vignettehub.com is sufficient; we will then stop emailing you. We delete this data no later than 90 days after your last activity.
2.4 Cookies and local storage
- vh_click (first-party cookie, 90 days): is only set if you reach our site via an advertisement (for example Google Ads) and contains the click ID of that advertisement. If you complete an order, we link that click ID to the order and pass it on to Google for conversion measurement. No name and no email address are sent in the process.
- vh_locale (first-party cookie, 1 year): remembers your language choice (Dutch, German, French or English).
- Local storage in your browser: your progress in the ordering flow is temporarily stored in your own browser, so that you can continue where you left off. This data never leaves your device.
If we start using additional analytics or marketing cookies, we will first ask for your consent via a cookie banner.
2.5 Status page and email
Your status page is accessible via a secret, personal link that only appears in your own emails. Please do not share that link with others. We send emails about your order (order confirmation, delivery, refund) because they are part of the contract.
3. Retention periods
- Orders and payment data: 7 years, due to the statutory tax retention obligation.
- Unfinished orders: no more than 90 days.
- Email correspondence: as long as needed to handle your question or complaint.
- Cookies: vh_click no more than 90 days, vh_locale no more than 1 year.
4. Who we share data with
We never sell your data. We only share it with:
- the official operator of the country of destination, for the registration of your vignette (see 2.1);
- Vercel (hosting of the website);
- MongoDB (hosting of our database);
- Resend (delivery of our emails);
- PayPal (payment processing, independent controller);
- Google (only the advertising click ID and order value for conversion measurement, see 2.4).
With parties that act as processors for us, we conclude data processing agreements. Where data is processed outside the EEA, this is done with appropriate safeguards such as an adequacy decision or the EU standard contractual clauses.
5. Security
We protect the website and our systems with appropriate technical and organisational measures, including encrypted connections (https), access controls on our systems and secret, unguessable status links per order.
6. Your rights
You have the right to:
- see which data we process about you;
- have incorrect data corrected;
- have your data deleted, insofar as no retention obligation applies;
- have the processing restricted;
- object to processing based on legitimate interest, such as the reminder emails;
- receive your data in a common format (data portability).
Email your request to info@vignettehub.com, preferably from the email address you used to order, so that we know the request comes from you. We will respond within one month at the latest. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Changes
We may amend this statement, for example when we add new services. The current version is always available on this page. See also our terms and conditions.
This statement is a translation of the Dutch original. In the event of any difference in interpretation between the Dutch text and this translation, the Dutch text prevails.