Privacy Statement

Effective as of 3 August 2026 — Version history

This is a translation of the Dutch Privacyverklaring, provided for convenience. In the event of any discrepancy, the Dutch version prevails.

1. Who are we and what is this?

We are Belang.org B.V., registered with the Dutch Chamber of Commerce (KVK) under number 42127552, hereinafter referred to as: Belang.org. We develop software for entrepreneurs who take their stakeholders seriously. With it we automate and professionalise large securities administrations of loyal holders of shares, certificates, options, bonds and other securities, and we take their management off entrepreneurs’ hands. We also offer solutions that support the transfer and placement of securities. In the course of our activities, we process personal data.

In this privacy statement we explain, among other things, whose personal data we process, which personal data we process, why we do so, and what your rights are. This privacy statement applies to all our processing activities.

2. How do we obtain your data?

Usually we obtain personal data because you provide it to us yourself. For example when you contact us, create an account or complete account settings, or use one of our services. It may also be that the company you work for enters data about you with us. And sometimes we obtain your data because the company in which you hold securities (our client) has us carry out the administration thereof.

In addition, where necessary for our services, we obtain information from (semi-)public sources. Think of the trade register of the Chamber of Commerce and the UBO register.

3. Which data do we process, and why?

1. Newsletter: When you sign up for our newsletter via the website, we process your email address so that we can send you this newsletter. We process this data on the basis of your consent.
2. Correspondence: If you contact us, for example by sending an email or making a call appointment, we process your name, email address and telephone number in order to contact you. We process this data so that we can respond appropriately, such as by providing information about our services. In this case we process data in order to perform or enter into our agreements with you, and with a view to our legitimate business interests.
3. Website traffic: Our website only stores your language preference on your device, and otherwise makes no use of cookies. We do process non-personal information about visits to our website, in order to improve its functioning, ease of use and security. Because this does not concern personal data, no processing basis is required for it. The platform does make use of cookies, we give you more information about this when you create an account.
4. Customer and contract management: For the purposes of customer and contract management of both contact persons and users designated by the client, we process the name, email address and telephone number, in order to enable the performance of contracts. In addition, we process information about customer relationships (such as company information, customer number, the role of the contact person, and relevant communication and contact history) and contract and usage data associated with the products and services purchased from us (such as product information, payment information and contract duration). We may also use this type of data on our own initiative for the purposes of acquisition, even if your company is not yet a client of ours. We process this data in order to perform or prepare our agreements with you, and on the basis of our legitimate interests.
5. Identification and verification (KYC): Of legal representatives and ultimate beneficial owners (UBOs) we may process the full name, the date of birth, the place of birth and the details of the identity document. We process this data in order to comply with our legal obligations, such as customer due diligence and anti-money-laundering regulations, and to give effect to agreements, such as the transfer and issue of securities.
6. Invoicing: For invoicing to clients we process the email address and possibly the name of a contact person, so that we can keep our financial records and comply with legal obligations. For invoicing to investors we process the name and email address, likewise for financial records and to comply with legal obligations.
7. Other processing: In addition to the purposes mentioned, we may process personal data to comply with administrative obligations and for the establishment of or defence against claims. We also process personal data that you have provided to us on your own initiative. These processing activities take place on the grounds of legitimate business interests or legal obligations.

If necessary data is not provided, we may not be able to provide services, or only to a limited extent.

4. Sharing data with third parties

We will provide personal data to third parties as little as possible, except where this is necessary for our services. We always strive to work with parties that handle data correctly.

For the purposes of our operations we make use of the services of processors. In some cases we will provide personal data to those parties. We will never provide more data to those third parties than they need in order to carry out our assignments. Examples of such third parties are suppliers and IT service providers.

We may also be legally obliged to provide data to, for example, government bodies or judicial authorities.

5. Retention periods

We will not retain personal data for longer than necessary for the purposes mentioned above. Please note that we must retain certain financial data for at least seven years in connection with the tax retention obligation. After termination of the agreement or when the processing purpose no longer applies, we will delete your data, unless statutory retention obligations exist.

6. How do we secure personal data?

Belang.org takes appropriate technical and organisational measures to secure personal data. We do this in accordance with the applicable legal requirements and guidelines.

Within Belang.org, only employees who are authorised to do so have access to your personal data, and only insofar as this is necessary for the performance of their work. These employees are bound by confidentiality.

Do you have further questions about the security of your personal data? Then please contact us at contact@belang.org.

7. Your rights

During the period in which we process personal data, you have the right to request from us an overview of the personal data we process about you. If this shows that data is incorrect, incomplete or no longer relevant, you can ask us to correct or delete the data. You also have the right to object to our processing of personal data, and you can withdraw consent you previously gave. For a complete overview of your rights, we refer you to the website of the Dutch Data Protection Authority. You can also go there with complaints about our processing of personal data.

8. Finally

This privacy statement may be amended at any time. The last amendment is dated 3 August 2026.

For questions or complaints you can contact us at contact@belang.org.