Privacy Statement
At Match-day we respect your privacy. This privacy statement explains how we handle your personal data.
Last updated: 11 August 2026
1. General
Match-day B.V., established at De Kronkels 16B, 3752 LM Bunschoten-Spakenburg, the Netherlands, is responsible for the processing of personal data for its own purposes as set out in this privacy statement. For services that Match-day performs for a client, the role division in article 2 applies.
This privacy statement applies to all Match-day services and describes which personal data we collect, why we collect it and how we use it.
2. Data Controller
Match-day B.V. is the data controller for the processing it carries out for its own purposes, including its website, its own marketing and recruitment, its administration, invoicing, security and access logging, and its statutory obligations.
For sales and lead generation services that Match-day performs for a client, Match-day acts as processor and the client is the data controller. Those processing activities are governed by the data processing agreement concluded with that client. Contact details are listed at the end of this document.
MATCH-DAY
De Kronkels 16B
3752 LM Bunschoten-Spakenburg
Netherlands
KvK: 81541872
BTW: NL003588136B64
3. What data we collect
Contact details
- Full name
- Email address
- Phone number
- Company name and job title
Telephony and call data
- Phone number, date, time, duration and direction of calls
- The phone line used
- Call recordings, transcripts and AI summaries of calls (where applicable)
Technical data
- IP address
- Browser type
- Device information
- Cookie data
4. Purposes of Processing
Performance of the agreement
To deliver our sales services
Legal basis: Agreement (GDPR art. 6(1)(b))
Marketing and communication
For newsletters and marketing
Legal basis: Consent (GDPR art. 6(1)(a))
Business outreach and lead generation
To approach companies and business contacts for B2B lead generation on behalf of our clients. We obtain contact details from public business sources, company websites, LinkedIn and specialised B2B data providers such as Cognism and Apollo. We respect every objection and every opt-out.
Role: for this processing Match-day acts as processor for the client. The client determines the legal basis and issues instructions. Match-day carries out the processing within the frameworks approved in writing by the client.
Telephone outreach is directed exclusively at organisations verified in advance as Dutch B.V. companies, via general or demonstrably business phone numbers. Article 11.7(3) of the Dutch Telecommunications Act applies: for legal entities no prior consent is required when using contact details intended for business communication and made public. Article 11.7(2) of the Dutch Telecommunications Act and the Dutch do-not-call register do not apply to this selection. An objection or opt-out is processed immediately and definitively.
Legal basis: Legitimate interest (GDPR art. 6(1)(f)) where Match-day determines the purpose and essential means itself in its own prospecting, after a balancing test. For the performance of an assignment, the legal basis determined by the client applies.
Telephone acquisition and quality control
To conduct telephone acquisition, client contact and to monitor call quality we may record calls. Recordings are not started without prior notice. Call recordings and analysis are used exclusively for quality control, coaching and the performance of the agreement.
Legal basis: Legitimate interest (GDPR art. 6(1)(f)), with due observance of article 11.7(3) of the Dutch Telecommunications Act
Use of AI tooling
To process, enrich and qualify business contact details efficiently we use AI tooling. We provide no more data than necessary and do not carry out fully automated decision-making about data subjects. AI output is always reviewed by a human before it is used for communication or follow-up.
Legal basis: Legitimate interest (GDPR art. 6(1)(f))
5. Retention periods
We do not retain personal data longer than necessary for the purpose for which it was provided or than legally required.
Retention periods:
- Client data: 7 years after the end of the relationship (tax legislation)
- Call recordings and transcripts: 30 days after the call, unless a longer period has been agreed with the client or is legally required
- Marketing consents: until withdrawal
- Website cookies: see cookie policy
- Objections and opt-out records: processed immediately and retained for as long as necessary to prevent repeated approaches
6. Sharing with Third Parties
We only share your data with third parties where this is necessary for the performance of our services or legally required.
HubSpot
CRM and marketing automation
Google Analytics
Website analytics for our own website. Not used for performing assignments for clients.
Leadinfo
B2B visitor identification and lead tracking
Cognism (B2B data provider)
Supply of business contact details for B2B outreach. Cognism maintains its own privacy and opt-out processes for this. Match-day remains responsible for assessing the intended use, including the legal form of the organisation and the business nature of the phone number used.
Apollo (Apollo.io / ZenLeads Inc.)
Additional supply and enrichment of business contact details. As with Cognism, Match-day remains responsible for assessing the intended use, including the legal form of the organisation and the business nature of the phone number used.
Microsoft 365
Email and document storage
JustCall (SaaS Labs US, Inc.)
Telephony, call recordings, transcripts and AI analysis of calls. JustCall processes this data as processor on behalf of Match-day. JustCall is established in the United States and stores call recordings and related personal data in data centres in the US. For this transfer outside the EEA, JustCall uses appropriate safeguards, including the Standard Contractual Clauses (SCCs). The current list of JustCall sub-processors is available on request via info@match-day.nl.
AI tooling (including OpenAI)
Processing and enrichment of business data using AI. We do not use data to train or improve models and do not provide more data than necessary. For use within an assignment, the agreements with the relevant client apply.
6a. Origin of data and duty to inform
Some of the business contact details we process are not obtained directly from the data subject. Those details come from public business sources, company websites, public registers, publicly accessible LinkedIn profile information and from specialised B2B data providers such as Cognism and Apollo. Website visits are identified via Leadinfo on the basis of reverse IP.
Because this data was not obtained from you directly, we inform you at first contact about:
- the identity of Match-day and, where applicable, of the client on whose behalf we make contact;
- the purpose of the processing;
- the source of the data;
- the possibility to object to further approaches.
We process a request to object or opt out immediately and definitively, after which the number or address is placed on our suppression list.
7. Security
We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing.
Security measures:
- SSL/TLS encryption for data transport
- Access control and authentication
- Call recordings and transcripts are accessible only to authorised employees and are stored separately per client
- Regular security audits
- Data backup procedures
8. Your Rights
You have the following rights regarding your personal data:
Right of access
You can ask us for an overview of the personal data we process about you.
Right to rectification
You can ask us to correct inaccurate or incomplete data.
Right to erasure
You can ask us to delete your data.
Right to restriction
You can ask us to restrict the processing of your data.
Right to object
You can object to the processing of your data.
Right to data portability
You can ask us to transfer your data to you or to another party.
10. Amendments
We reserve the right to amend this privacy statement. Amendments are published on this page.
Questions?
Match-day B.V., De Kronkels 16B, 3752 LM Bunschoten-Spakenburg, the Netherlands
Contact us with questions about this privacy statement or your rights.
You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).