Your data, your control. Here's how we handle it. Last updated: October 2026.
InnoDIGI (Sluiskeshoeven 8, 5244 GM Rosmalen, Dutch Chamber of Commerce (KVK) number 53581792) is the data controller for the data of visitors to this website and of account holders. For the data you collect through your forms, you are the data controller and we are the data processor.
To deliver the service (performance of the agreement), to answer your questions, to prevent misuse (legitimate interest), and to comply with legal obligations such as the statutory retention period for invoices. We also use data to secure and improve the service (legitimate interest): detecting and investigating break-ins, fixing errors and seeing where users get stuck. Where possible we use aggregated or anonymised data. Our staff can read conversations with the AI assistant for this purpose; this is also stated in the consent you give before using the AI.
This website uses no tracking or advertising cookies and no third-party analytics. The application (app.formuliermet.nl) only uses functional storage needed to keep you logged in and remember your preferences. When you log in or register, and on forms where the owner turns it on, we use Google reCAPTCHA to stop bots. Google processes data about your browser and device for this.
We never sell data, and only share it where the service needs it. Our servers are hosted by LeaseWeb in the Netherlands and managed by us; we send email through our own mail server. Payments from your respondents go through your own payment provider: we pass on the name, email address and amount, and receive the payment status back. If you use the AI, your question and the data needed for the answer go to the provider of the model. That can be the structure of a form and, if you ask about submissions, the answers in them. A description in the free builder without an account goes there too. We only do this at the moment you ask the AI something. If you connect your own AI app to your account (for example via MCP), that app receives the data it requests for your question; that provider's own terms apply.
If you connect your Google Calendar (Account → Planning), we create a separate "Reserveringen" calendar in your Google account and add your bookings to it: date and time, the service or resource, and the name, email address and note of the person who booked. Apart from that we see the email address of your Google account and, if you turn it on, when you are busy in your primary calendar: only start and end times, no titles or other content. We use those times only to stop bookings at those moments, and we do not store them in our database. We cannot read what is in your calendars. We store the access token encrypted, and disconnecting revokes it at Google. Formuliermet.nl's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
These parties process data on our behalf:
Parties in the United States process data under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We notify account holders of a new party at least 14 days in advance. For our own invoices to account holders we use Moneybird; we check VAT numbers via the European Commission's VIES system.
We keep account data for as long as your account exists. You manage your own form data — for each form, you can optionally set an automatic retention period. We keep contact messages for a maximum of two years. We keep log files for twelve months, with the full IP address, so we can still investigate a break-in that only comes to light months later. After that they are deleted automatically. We keep your account's audit log for eighteen months; the IP address in it is shortened after twelve months. Changes to your subscription and billing are kept for five years, because they are part of your records. We keep invoice data for seven years (statutory obligation). We keep conversations with the AI assistant and support messages for as long as your account exists; an AI conversation you delete is also gone from our systems after 90 days.
With encrypted connections (TLS), encrypted storage of secrets, daily backups, two-factor authentication for accounts, access logging, security monitoring that flags suspicious activity (such as a series of failed login attempts) right away, and servers in the Netherlands under our own management.
You have the right to access, correct, erase, restrict, port and object to the processing of your data. Email your request to info@formuliermet.nl; we respond within one month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Filling in a form built with Formuliermet.nl? Then the owner of that form is responsible for your data. For questions or deletion requests, please contact that organization first. If you can't work it out together, we're happy to help via info@formuliermet.nl.