Personal data we process
FourteenRockets and TwelveTrains processes your personal data because you use our services and/or because you provide it to us yourself.
Below is an overview of the personal data we process:
First and last name
Address details
Telephone number
E-mail address
IP address
Location details
Bank account number
Special and/or sensitive personal data we process
Our website and/or service does not intend to collect data on website visitors who are under 16 years of age. Unless they have permission from parents or guardian. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in their children’s online activities to avoid collecting data on children without parental consent. If you are convinced that we have collected personal data about a minor without such consent, please contact us at info@twelvetrains.nl and we will delete this information.
For what purpose and on what basis do we process personal data
FourteenRockets processes your personal data for the following purposes:
- Handling your payment and for sending invoices.
- Calling or e-mailing you if necessary to carry out our services.
- Informing you about changes to our services and products.
- So that you can log in to your account at accounts.twelvetrains.nl.
- To be able to register domain names for you.
- To identify the services and services you purchase from us.
- To send you our newsletter.
- FourteenRockets also processes personal data if we are legally obliged to do so, such as data we need for our tax return.
FourteenRockets processes your personal data in the following computer programmes and systems
WHMCS
WHMCS is a web hosting automation system developed by the company WHMCS Limited (whmcs.com).
FourteenRockets uses WHMCS to store customer data required to send invoices. As a FourteenRockets client, you can log in to your personal and secure account at accounts.twelvetrains.nl (this will soon change to accounts.fourteenrockets.com) and view and change your own personal data. In addition, in your account you can see an overview of the services, services and domains you purchase or manage from FourteenRockets. When you log in to accounts.twelvetrains.nl, your IP address is registered.
The WHMCS system is an independent computer programme and runs on a Dutch web server on TwelveTrains own domain: accounts.twelvetrains.nl. No personal data is exchanged with the company WHMCS Limited. WHMCS Limited also has no access to personal data stored in WHMCS at accounts.twelvetrains.nl.
FourteenRockets retains personal data in WHMCS for 7 years according to Dutch tax retention obligation.
Mollie
Mollie is a Dutch payment system for online transactions.
If you pay a FourteenRockets invoice via iDeal or direct debit, the name of the bank account and the IBAN bank account number with which you pay is registered in Mollie. Mollie does not store personal data longer than the mandatory statutory period.
Because you make the payment yourself, a processing agreement between TwelveTrains and Mollie is not necessary.
See Mollie’s privacy statement:
https://www.mollie.com/gb/privacy
Our Palladium web server
Our own dedicated web server, which we have named Palladium, is housed in a state-of-the-art data centre in Naaldwijk, The Netherlands
If you have a TwelveTrains WordPress subscription or you have purchased regular hosting from TwelveTrains, all your website’s files, databases and logs are on our Palladium web server. So also personal data about you and any clients of yours that are stored in your WordPress website (for example, if you have a webshop).
Within 2 months after your contract with TwelveTrains/FourteenRockets ends, all data, databases, PHP files and other files are removed from our web servers. We do not have a legal obligation to retain traffic and location data for judicial investigation and detection purposes under the Telecoms Data Retention Act.
Read about our Palladium web server
Neostrada
For a few services TwelveTrains purchases server space and server management from Neostrada. Neostrada is a Dutch hosting company and all of Neostrada’s web servers are located in the Netherlands. All of TwelveTrains’ web servers, including the server on which WHMCS runs, are hosted by Neostrada.
Neostrada as a company does not store your personal data. Neostrada does have indirect access to personal data stored in your website and is therefore a data processor according to GDPR. TwelveTrains has a Data Processing Agreement (DPA) with Neostrada.
Openprovider, Qboxmail and OpenSRS
These three companies handle the technicalities of selling domain names and hosted e-mail to resellers, among other things. TwelveTrains is an Openprovider (domain names), Qboxmail (mailboxes) and OpenSRS (domain names) reseller. TwelveTrains is therefore a reseller of domain names and hosted e-mail products offered by these companies.
Openprovider is located in The Netherlands. Qboxmail is located in Italy. OpenSRS is located in Canada.
When you register a domain name or purchase a mailbox from TwelveTrains, we send your name, address, phone number and e-mail address to Openprovider, Qboxmail and/or OpenSRS.
Qboxmail’s servers are located in Italy. This means that all data and e-mails from your mailbox(es) are on highly secure servers in Italy.
In connection with domain name registrations, your name and contact details are also forwarded to and stored in the respective databases of domain name registration authorities, such as the Stichting Internet Domeinregistratie Nederland (SIDN) for .nl domain names and ICANN for .com and other domain names.
Within 2 months after you cancel your mailbox, all files, data and e-mails are removed from the servers. When you cancel a domain name, your personal data are removed from the Openprovider or OpenSRS database and the domain name registrar’s database. Your personal data will remain linked to your domain name(s) if you move your domain name(s) to another host, in which case your personal data will only be removed from the Openprovider or OpenSRS database.
Laposta
Laposta (https://laposta.nl/) is a Dutch provider of a newsletter system. You can compare Laposta to MailChimp. Laposta’s servers are located in the Netherlands.
TwelveTrains uses Laposta to send newsletters.
Your name and e-mail address are removed from Laposta as soon as you unsubscribe from the newsletter.
See Laposta’s privacy statement (in Dutch):
https://laposta.nl/privacy-statement
Our website
When you visit our website, the web server stores in log files information about your visit such as IP address and what files your browser has requested.
TwelveTrains analyses the log files when the website gives error messages to find out and solve problems with the website.
The log files are deleted from the web server after 12 months.
Sharing personal data with third parties
TwelveTrains/FourteenRockets shares your personal data with various third parties (se above list) if this is necessary to execute the agreement and to comply with any statutory obligation. With companies that process your data on our behalf, we have a Data Processing Agreement to ensure the same level of security and confidentiality of your data.
TwelveTrains/FourteenRockets remains responsible for this processing.
Personal data on your own website
As a client of TwelveTrains/FourteenRockets, you yourself have full access to the personal data of you and your clients on your own website. In addition, according to the GDPR, you are the Controller of all personal data on your own website.
See further the processing agreement (www.twelvetrains.nl/verwerkersovereenkomst) that you as a client have with TwelveTrains. See also our general terms and conditions (www.twelvetrains.nl/algemene-voorwaarden).
Automated decision-making
TwelveTrains never makes decisions on the basis of automated processing about matters that could (significantly) affect individuals. This concerns decisions made by computer programmes or systems, without a human being (e.g. an employee of TwelveTrains) being involved.
How long we keep personal data
TwelveTrains does not keep your personal data for longer than is strictly necessary to realise the purposes for which your data is collected. We keep some personal data according to statutory retention periods.
Temporary personal information (for example, information entered through a web form on our website) will never be kept for more than 6 months.
Cookies, or similar techniques, that we use
TwelveTrains only uses technical and functional cookies, and analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone the first time you visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and, for example, remember your preferences. They also allow us to optimise our website. You can opt out of cookies by configuring your internet browser to stop storing cookies. You can also delete any information previously stored via your browser settings.
Accessing, adjusting or deleting data
You have the right to view, correct or delete your personal data. You can do this yourself via the personal settings of your account at accounts.twelvetrains.nl. You also have the right to withdraw your permission for data processing or to object to TwelveTrains/FourteenRockets processing your personal data and you have the right to data portability. This means that you can request us to send the personal data we have on you in a computer file to you or another organisation named by you.
If you want to exercise your right to object and/or right to data portability or have other questions/comments about data processing, please send an itemised request to info@twelvetrains.nl.
TwelveTrains/FourteenRockets will respond to your request as soon as possible, but in any event within four weeks.
How we secure personal data
We take the protection of your data seriously and we take appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. If you feel that your data is nevertheless not properly secured or there are indications of misuse, please contact us at info@twelvetrains.nl.
Last updated august 2024.
Contact details
TwelveTrains
Prinsengracht 439 G
1016 HM Amsterdam
+31 (0)6 24194340
info@twelvetrains.nl
Trade names
We make use of the following trade names:
FourteenRockets
TwelveTrains
We are currently in the process of moving all hosting related services from TwelveTrains to FourteenRockets. For this reason, you may still see both trade names in this privacy policy.