This website is operated by Captin.
Captin processes personal data in the course of its business. The protection of your personal data is of great importance to us. In doing so, Captin complies with laws and regulations, such as the European General Data Protection Regulation (GDPR).
In this document we provide you with more information on how we put this into practice.
Captin B.V. is the controller within the meaning of the GDPR for the processing of personal data described in this privacy statement, unless expressly stated otherwise. If you have any questions about this privacy statement or about the way in which Captin processes personal data, please contact us at info@captin.nl.
What is personal data?
In short, personal data is data that can identify a natural person, such as a name, an address or a telephone number. However, other data may also qualify as personal data, either on its own or in combination with other data.
Why does Captin process your personal data?
The main reason why Captin processes personal data is that it is necessary to provide our services to our clients or participants in participation schemes and to comply with legal requirements. Examples of specific purposes include:
- Assessing and accepting clients and prospective clients
- Informing our clients
- Receiving, transmitting and executing orders
- Maintaining registers in which the interests of clients are recorded
- Safekeeping of clients’ financial instruments and funds
- Sending a newsletter
In addition, Captin collects and processes personal data of job applicants and employees. We process the personal data we receive from these data subjects for the following purposes:
- Entering into and maintaining an employment relationship
- Keeping personnel, financial, time, absence and/or payroll records
- Providing access to and use of our office and IT infrastructure
When you use our website, technical data and data about your use of the website may also be processed. For more information about the use of cookies and similar technologies and the data processed in that context, please refer to our Cookie statement.
Which personal data does Captin process and why?
Captin only processes personal data where there is a legal basis for doing so under the GDPR. Depending on the purpose of the processing, Captin may process personal data:
- where this is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract;
- where this is necessary for compliance with a legal obligation to which Captin is subject;
- where Captin or a third party has a legitimate interest in the processing and your interests, rights and freedoms do not override that interest; or
- where you have given your consent to the processing.
Where Captin processes personal data on the basis of consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out before the consent was withdrawn.
Personal data of clients and participants
We process, among other things, the following personal data of our clients and participants:
- Name, address, telephone number and email address
- (Copy of) passport and data included in a passport or similar identity document
- Bank account number
- User name and user details of the Captin system
Depending on our services and the legal obligations to which Captin is subject, we may also process other personal data that is necessary for, for example, client due diligence, the performance of our services and compliance with legal obligations.
Data obtained from third parties
- Data on companies, shareholders and their representatives, for example via the Chamber of Commerce.
- Data from public sources such as newspapers, the internet and social media.
- Where applicable, data that Captin receives from clients, issuing institutions or other parties with which Captin cooperates in the context of its services.
Where we do not obtain personal data directly from you, we only process that data where there is a valid legal basis for doing so. Which data we obtain from other sources and for which purpose we use it depends on our services and the legal obligations to which Captin is subject.
With whom do we share personal data?
Captin only provides personal data to other parties where this is necessary for our services, to comply with a legal obligation or where there is another valid legal basis for doing so.
Depending on the services concerned, this may include:
- parties that support Captin with IT, hosting and other technical services;
- service providers that support Captin with identification, client due diligence and other compliance activities;
- banks and other financial service providers;
- clients and issuing institutions, insofar as this is necessary for the services concerned;
- professional advisers; and
- supervisory authorities, investigative authorities and other competent public authorities where Captin is obliged or authorised to provide personal data to them.
Where another party processes personal data on behalf of Captin, Captin makes the arrangements with that party that are required under the GDPR.
Transfers outside the European Economic Area
In principle, Captin processes personal data within the European Economic Area (EEA). If, in an exceptional case, personal data is processed or transferred outside the EEA, Captin ensures that this only takes place in accordance with Chapter V of the GDPR and that the required safeguards are in place.
How long do we retain personal data?
Captin does not retain personal data for longer than is necessary for the purposes for which it was collected, unless Captin is required by law or regulation to retain personal data for a longer period.
The retention period depends on the nature of the personal data and the purpose for which it is processed. In this respect, Captin takes into account, among other things, the statutory retention obligations to which Captin is subject as a financial undertaking, the duration of the client or contractual relationship and the period during which personal data may be necessary for the establishment, exercise or defence of legal claims.
Are you required to provide personal data?
For certain parts of our services, Captin is required by law and regulation to obtain personal data, for example in the context of client due diligence. Personal data may also be necessary to enter into or perform a contract with you. If you do not provide the necessary personal data, this may mean that Captin cannot accept you as a client or cannot offer or continue the services concerned.
What are your rights?
Under the GDPR, depending on the circumstances, you have the right to:
- access the personal data that Captin processes about you;
- have inaccurate or incomplete personal data corrected or completed;
- have personal data erased;
- have the processing of personal data restricted;
- object to certain processing;
- receive the personal data you have provided to Captin or have it transferred, insofar as the right to data portability applies; and
- withdraw any consent you have given at any time.
You can submit a request to exercise these rights via info@captin.nl. Captin may ask you to provide additional information where this is necessary to verify your identity.
If you believe that Captin is not handling your personal data with due care, you may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Automated decision-making
Captin does not use decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
How do we protect personal data?
Captin takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration or other unlawful processing. The security measures are tailored to the nature of the personal data and the risks of the processing.
Changes to this privacy statement
Captin may amend this privacy statement, for example when our services or applicable laws and regulations change. The current version of the privacy statement is always available on our website.
Last updated: November 2026