What data we collect
We collect the following categories of personal data: (1) account data such as email address and hashed password, (2) project data such as domains and keywords you enter, (3) billing data via our payment provider (we do not store full payment card details), (4) usage logs for debugging and abuse detection, and (5) email addresses from contact form submissions.
Legal basis (GDPR art. 6)
We process personal data on the basis of: performance of a contract (account data, project data, billing), legitimate interest (security, debugging, fraud prevention), and legal obligation (bookkeeping requirements for invoices). We do not process special categories of personal data.
How we use data
We use your data solely to provide Ranking.nl: login and session management, running keyword measurements, sending transactional emails (activation, billing, password reset), and customer support. We do not sell personal data to third parties and do not use it for advertising purposes.
Retention periods
Account data is retained for as long as your account is active and for 12 months afterwards. Invoice data is retained for 7 years as required by Dutch tax law. Measurement results (keyword data) are retained for as long as the project exists. After account deletion, personal data is removed within 30 days unless a legal retention obligation requires otherwise.
Your rights (GDPR)
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, and data portability. You may also object to processing based on legitimate interest. Submit requests to ranking@arimpex.nl. We respond within 30 days. If you have a complaint about data processing, you can file it with your national data protection authority (in the Netherlands: autoriteitpersoonsgegevens.nl).