Thank you for your interest in our website. Data protection is of the highest priority at VignetDirect. Our employees are subject to a duty of confidentiality, and your data is protected using state-of-the-art techniques. Compliance with legal regulations is, of course, a mandatory obligation for us. In this context, we provide you with information below on how we process your personal data.
The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
The subject of this data protection information is the protection of natural persons in connection with the processing of personal data and the free movement of such data (see Art. 1(1) GDPR).
We only process the personal data listed below for the purposes mentioned below. If we intend to process this personal data for purposes other than those for which it was originally collected, and which are incompatible with the original purpose, you will be informed in a timely manner.
If you use our online platform VignetDirect solely for informational purposes, you do not need to provide personal data. Even if you arrive at the website via newsletter links, we only store certain anonymous data, such as:
This data is stored in our system's log files. It cannot be ruled out that this data may contain personal data. In that case, the legal basis for collecting and storing the data is the legitimate interest of the controller, as referred to in Art. 6(1)(f) GDPR. The data is technically necessary to display our website and to guarantee its stability and security. Storage in log files takes place to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of our information systems. These purposes constitute our legitimate interest in data processing.
This data is deleted when it is no longer necessary for the purposes for which it was collected. Session data is no longer collected once the respective session has ended. While certain data may be stored for longer periods, IP addresses or other personal data are always anonymized, deleted, or destroyed so that the data subject can no longer be identified.
When you use our services, for example, to apply for a vignette or environmental sticker, you must provide the following personal data:
We collect this data to enable you to use our services. The legal basis for collecting and storing this data is that it is necessary for the performance of a contract with you, as referred to in Art. 6(1)(b) GDPR. Customer data such as address, email address, and license plate number, as found on the order confirmation, are retained for a longer period in connection with statutory fiscal retention obligations.
Sharing data with Third Parties and Partners
We work with specific partners to fulfill your order. It is necessary to provide the aforementioned (personal)
data to third parties. For the processing of orders, we work with:
Without this data transfer, we cannot fulfill the agreement between you and VignetDirect.
We also share customer data with partners to perform services on our behalf for marketing purposes, such as Google Ads. Customers provide consent for this in the General Terms and Conditions under the privacy section, where legally required or required under applicable Google policies for personalized ads. VignetDirect only uses the approved Google API or interface to upload customer data.
When you sign up for email advertising or the newsletter, you usually need to provide the following personal data:
We need this data to send you email advertisements and newsletters. The legal basis is necessity for the performance of a contract (or consent), as referred to in Art. 6(1)(b) or (a) GDPR. You can unsubscribe from email advertising and newsletters at any time. Aside from the transmission costs at the basic rate (your own mobile/internet provider costs), you will incur no further costs for this.
After placing an order, VignetDirect may send you service-related emails. These include, but are not limited to: requests to leave a review, informative messages about your vignette or trip, and similar service-related communications. This is done on the basis of the legitimate interest of the company (Art. 6(1)(f) GDPR), in combination with the soft opt-in principle which allows businesses to contact existing customers regarding similar own services.
You may unsubscribe from such emails at any time, free of charge, by emailing info@vignetdirect.com or via the unsubscribe link at the bottom of each message. After unsubscribing, you will no longer receive service-related emails.
When you use our services and customer service for personal support, the provisions of section 3.1.1 apply accordingly.
The Website uses analytical, functional, and tracking cookies. Cookies are small text files that a website like VignetDirect places on the computer of a website visitor.
Session Cookies
The Website uses a so-called session cookie, which is intended to recognize the current user session. For this
purpose, a so-called Session ID is provided. The session cookie collects (certain) data mentioned in section 3.1
above. This allows the system to recognize that a logged-in user is on the Website. The session cookie is
automatically deleted after the session ends. Insofar as personal data forms part of the data collected by the
session cookie, the legal basis is the protection of a legitimate interest of the controller (Art. 6(1)(f)
GDPR).
Affiliate Tracking Cookies
If you access our website via a link from an external advertising partner (affiliate), a cookie is stored on
your device. The purpose of this cookie is to attribute your visit to the specific partner that referred you. If
your visit results in a transaction (e.g., the purchase of an emissions sticker), the partner receives a
commission for this referral. Important: No personal data (such as your name or address) is shared with the
affiliate partner. Only the anonymous information that a referred visit resulted in a completed sale is
transmitted for billing purposes. These affiliate cookies have a strictly limited lifespan and expire
automatically after 30 days.
Managing Cookies
You can prevent the installation of cookies via specific settings in your browser software. Additionally, you
can delete previously set cookies via your browser settings.
VignetDirect uses Google Analytics to track general visitor data. We also aim to analyze how effective our Google Ads are on Google search result pages. The collected data is used for statistical analyses of visitor and click behavior on our website to optimize its operation. We have configured Google Analytics to be privacy-friendly; IP addresses are anonymized, and data is transmitted securely.
A data processing agreement has been concluded with Google for the use of Google Analytics. This states that the collected data is transferred to and stored by Google on servers in Europe and the United States. Please read Google's privacy policy and the specific Google Analytics privacy policy for more information.
Google uses the data for analytical purposes and to provide insight into effectiveness and website usage. Google may only provide this information to third parties if legally obliged to do so, or insofar as these third parties process the information on behalf of Google. VignetDirect has no influence on this.
VignetDirect maintains an online presence on various social networks and platforms to communicate with customers and interested parties active there. When visiting these networks and platforms, the terms and conditions and data processing guidelines of the respective operator apply, not ours.
If you register as a partner (affiliate) to promote our services in return for commission, we process the personal data you provide and generate in connection with your participation. This section concerns you as a partner; the affiliate tracking cookie described in section 3.3 relates to visitors you refer, not to your own partner account.
Data we process about partners:
Purposes and legal basis. We process this data to enter into and perform the affiliate agreement with you and to calculate and pay your commission (Art. 6(1)(b) GDPR), to comply with statutory — in particular fiscal and accounting — obligations (Art. 6(1)(c) GDPR), and to protect the integrity of the programme, for example to detect and prevent fraud, self-referral and manipulation of the tracking system (Art. 6(1)(f) GDPR).
Two-tier referral programme. Partners can recruit other partners using a personal referral
link (of the form /partner?ref=CODE). If you register through such a link, your partner account is
linked to the partner who referred you (we record the referring partner and the date of referral) so that the
referrer may earn an override commission on the commissions you subsequently earn. The referring partner can
only see pseudonymised and aggregated information about the partners they recruited (for
example a reference number, the sign-up date and the override earned). We do not share your
name, email address or other contact details with the referrer, and the referrer obtains no access to or
control over your account or your customers' data.
Retention. Financial and transaction data (commissions, invoices, payouts) is retained for the statutory retention period of 7 years. Other partner account data is deleted after the affiliate agreement ends, unless a longer retention period is required by law or is necessary to handle outstanding claims, disputes or fraud investigations.
Recipients. Partner data may be shared with our payment provider for payouts, with the shared technical infrastructure operated together with VignetNodig.nl (governed by a data processing agreement), and with competent authorities where legally required. Your data-subject rights (section 5) apply in full to this processing.
Your data is continuously transmitted in encrypted form via the internet (SSL/TLS). We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification, and dissemination of your data by unauthorized persons.
You have the following rights regarding your personal data:
The lead supervisory authority for VignetDirect is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
VignetDirect reserves the right to adjust this privacy statement. Changes will be published on this website.
Great care has been taken in the development and maintenance of this website. However, the possibility exists that certain information is no longer up to date. VignetDirect accepts no liability for the consequences of any activities undertaken on the basis of the (outdated) information as provided on this website. No obligation of VignetDirect can be derived from the content of this website, with the exception of those specific cases where a written agreement has been concluded.
