Privacy notice
Last updated: 26 October 2026.
In short
- We collect little: what you type into our forms, the web address you ask us to scan, and anonymous counts of page visits.
- We use it only to answer you, run the scan you asked for, keep the site secure and see which pages are useful. We do not sell data and do not use it for advertising.
- We set no tracking cookies. One small cookie remembers your choice in the cookie banner.
- We keep data for fixed periods (see the table) and then delete it.
- You can ask to see, correct or delete your data, and you can object to marketing at any time: info@maasiso.nl.
Who is responsible
Niels Maas, trading as Tabmile (and as MaasISO), is responsible for the personal data described here. Registered with the Dutch Chamber of Commerce (KvK) under number 78109302. Address: Jol 11 41, 8243 EE Lelystad, Nederland.
Contact for privacy questions and requests: info@maasiso.nl. We reply within one month.
VAT identification number: NL003287662B92.
What we use your data for
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Pilot request | Name, work e-mail address, company, country, number of sites, platforms, your message, how you heard about us, pilot code, and the choice you made on the form | Your consent (the tick on the form), Art. 6(1)(a). You can withdraw it at any time. | 12 months after you send the form, then deleted automatically. If you sign a pilot agreement, the agreement and the legal duty to keep invoices (7 years) apply to that part. |
| Waiting list | Work e-mail address, name if you give it, company, plan of interest, choices on the form | Your consent, Art. 6(1)(a). You can withdraw it at any time. | 12 months or until you unsubscribe, whichever comes first. |
| Free scan (once it opens) | The web address you enter and the result: counts and rule names, no copy of the page. No e-mail address is needed. | Providing the scan you ask for, Art. 6(1)(b) | 30 days, then deleted automatically. |
| Counting page visits | Page, language, the path or code that brought you here, time, whether the visitor is a bot, and the country derived from your IP address. The IP address itself is discarded straight away; nothing identifies you. | Our legitimate interest in knowing which pages are useful, Art. 6(1)(f) | Counts: 13 months. Reports made from them: at most 25 months. |
| Remembering your cookie choice | One cookie with your choice (accept or reject) | Our legitimate interest in respecting your choice, Art. 6(1)(f) | 6 months. |
| Security and technical logs | Time, page requested, result code and response time. The server also logs connections (including IP addresses) for security. | Our legitimate interest in keeping the site secure and fixing errors, Art. 6(1)(f) | At most 35 days. |
| E-mails you send us | Your message and e-mail address | Our legitimate interest in answering you, Art. 6(1)(f) | 12 months after the last message. |
| Contacting professionals (see below) | Name, job title, employer, business contact route | Our legitimate interest, Art. 6(1)(f) | 6 months after our last contact without a reply. |
Cookies and statistics
We set no tracking or advertising cookies and use no advertising or social-media trackers. The only cookie we set on public pages remembers your choice in the banner.
At this time no analytics tool that stores or reads information on your device is active. If we add one, it will only run after you accept it, and we will update this notice first.
Professionals we contact
- Who: people who work for web agencies, accessibility auditors or consultants and who may be interested in Tabmile.
- What we hold: name, job title, employer, the business contact route they publish, the web address of their public profile and one line of context from their public content.
- Where it comes from: the organisation's own website, the Dutch Chamber of Commerce register, public conference or speaker pages and public LinkedIn profiles. We do not buy lists.
- Why and legal basis: to offer our service to professionals, which is our legitimate interest (Art. 6(1)(f)). A written assessment of this interest is available on request.
- How we contact you: a LinkedIn invitation sent by hand, a letter, or an address or form that the organisation itself labels for partnership or supplier proposals. We do not send bulk e-mail. You receive this information at the first contact and in any case within one month of us collecting your details.
- How long: at most 6 months after our last contact if you have not replied. After that we delete your details. If you object, we keep only your name and company on a list so that we do not contact you again.
Your right to object to marketing
You can object at any time to us using your details for marketing or contacting you for it. Send an e-mail to info@maasiso.nl or reply "stop" to our message. We stop at once and will not contact you again.
Who receives your data
- Hetzner Online GmbH (Germany) hosts our servers, which are located in Finland. Hetzner acts on our instructions as a processor.
- Our mailbox runs on Microsoft 365 (Exchange Online), provided by Microsoft as a processor. Microsoft keeps e-mail data of EU customers in the EU as a rule; limited transfers outside the EU can still happen and are covered by the EU Standard Contractual Clauses in Microsoft's data protection terms. A postal service delivers our letters. LinkedIn runs the platform on which invitations are sent and is responsible for its own use of data.
- Our domain registrar (Namecheap, United States) holds the registration of tabmile.com and the DNS records. Personal data of visitors to this site is not sent to it.
- We do not sell personal data. Authorities receive data only where the law requires it.
- Our own systems keep your data within the European Economic Area. The only exception is the limited processing by Microsoft described above, with the safeguard named there. If anything else ever changes, we will say here which country and which safeguard we use, and you can ask for a copy of it.
People named on scanned web pages
Our scanner reads public web pages, which can show names or e-mail addresses of other people. We store only a short list of findings (rule names and counts), not a copy of the page, and delete it after 30 days. If you appear on a page and want to know more or want something removed, contact us at info@maasiso.nl. Monitoring for customers who have signed up is covered by the agreement with that customer.
Your rights
- You can ask us for access to your data, to correct it, to delete it, to limit its use, and to receive the data you gave us in a usable format (where the basis is consent).
- Where we rely on your consent, you can withdraw it at any time, as easily as you gave it: e-mail info@maasiso.nl or use the unsubscribe link. Withdrawing does not affect what happened before.
- Where we rely on our legitimate interest, you can object (see above). Send requests to info@maasiso.nl. We reply within one month and do not charge for it.
- You can complain to a data protection authority without first contacting us. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You can also complain to the authority in your own country, for example the CNIL in France (cnil.fr) or the Data Protection Authority in Belgium.
Do you have to give us your data?
No. Fields marked as required on a form are needed to handle your request; without them we cannot reply. The free scan needs only a web address.
Automated decisions
We take no decisions about you by automated means that have legal or similarly significant effects, and we do not build profiles of visitors.
Changes
If we change this notice in a way that matters to you, for example a new purpose or a new recipient, we tell people whose e-mail address we hold by e-mail before the change starts, and we update the date above.