🔏 Privacy Verklaring

11/06/2026

Introduction

This Privacy Notice explains how DebtCo Holding B.V. and its subsidiaries (collectively referred to as “DebtCo”, “we”, “our”, or “us”) collect, use, disclose, store and protect personal data.

DebtCo may update this Privacy Notice from time to time. Any updates will be published on our website. We encourage you to review this Privacy Notice periodically to remain informed of any changes.

Why does DebtCo have access to and process your personal data?

In connection with the services provided by the original creditor, your personal data may be transferred to DebtCo or another third party for the purposes of debt collection where payments are not made as agreed.

DebtCo is a debt collection agency and forms part of the DebtCo International Group.

The original creditor has assigned your account to DebtCo, who will now assume day-to-day responsibility for the management of your account. DebtCo is the data controller, unless we are not the owners and act as the data processor on the instructions of the data controller (the client).

Following the assignment of your account, the original creditor transferred your personal data to DebtCo. The data originates from when you first applied for credit or entered into an agreement with the original creditor and may include contact details, payment history, account information, and default details. Additional information, such as statements, copies of agreements and identification documents, may be obtained from the original creditor upon request and subject to availability.

The process of debt collection is of public interest and DebtCo has a legitimate interest in processing your personal data where your account has been legally assigned or entrusted to us for collection activities. The processing of your personal data is necessary to collect outstanding debts and may be carried out without your consent where a valid legal basis exists.

In accordance with our legitimate interests, we may also undertake activities such as:

• Tracing;
• Analytics and scoring to ensure compliance with sound debt collection practices;
• Enrichment of data from different sources, including credit reference agencies and third-party tracing specialists;
• Obtaining data from suppliers where our legal grounds for processing permit us to do so;
• Reviewing historical or active cases we hold relating to you;
• Searching public registers.

We may verify that the data we hold is accurate and may share personal data with approved third parties such as debt collection agencies, process servers, legal representatives and professional advisers. Personal data will be handled in accordance with applicable data protection legislation.

What type of personal data are you processing about me and why?

We process a range of personal data necessary for the management and administration of your account.

To communicate with you and correctly identify you, we may process:

• Name;
• Date of birth;
• Address and address history;
• Telephone numbers;
• Email addresses;
• Bank account information.

To assess your ability to repay and to manage your account, we may process:

• Payment history;
• Default information;
• Credit history information;
• Information regarding debts and liabilities;
• Income and asset information;
• Credit agreements and loan information;
• Credit ratings and affordability information.

To understand your circumstances and make informed decisions regarding the management of your account, we may process information you provide concerning your reasons for non-payment, including personal circumstances, employment circumstances or health-related information.

We also process personal data where necessary to:

• Pursue legal action;
• Obtain enforcement measures;
• Defend legal claims;
• Manage complaints and disputes;
• Train employees;
• Record communications;
• Ensure compliance with legal and regulatory obligations.

DebtCo may record telephone calls for quality assurance, training, compliance and evidential purposes.

For the security of our personnel and to safeguard personal data, CCTV systems may operate within DebtCo facilities.

We may also be required to provide information to regulatory authorities, auditors, law enforcement agencies or other authorised bodies where required by law.

DebtCo may use anonymised and aggregated information for statistical analysis, reporting, portfolio valuation, operational improvement and business development purposes.

Are you processing any sensitive data (special categories of data) about me?

Unless otherwise agreed with you, required by law, or where DebtCo believes processing is in your vital interests, DebtCo does not generally process special categories of personal data.

Special categories of personal data may include information concerning:

• Health;
• Racial or ethnic origin;
• Religious or philosophical beliefs;
• Political opinions;
• Trade union membership;
• Sex life or sexual orientation.

You may choose to provide information regarding health conditions, disabilities or other personal circumstances that affect your ability to repay your account.

This information may enable DebtCo to:

• Adjust payment arrangements;
• Provide reasonable accommodations;
• Allow additional time to seek debt advice;
• Better understand your circumstances.

Where required, DebtCo will obtain your specific and informed consent before processing special category data and will explain how that information may be used and disclosed.

Withdrawal of consent

You have the right to withdraw your consent where DebtCo relies on consent as the legal basis for processing.

In the context of debt collection activities, this will generally only apply where you have voluntarily disclosed special category personal data and consent is the legal basis relied upon.

Where consent is withdrawn, DebtCo will assess whether continued processing is necessary under another applicable legal basis.

Do I have to provide you with my personal data?

Most of the personal data processed by DebtCo originates from sources other than yourself, including:

• Original creditors;
• Tracing providers;
• Approved data suppliers;
• Public registers.

You may choose to provide additional information that assists us in managing your account appropriately and fairly.

Will my personal data be transferred to another country?

Even though DebtCo is part of the DebtCo International Group, your personal data will not be transferred to countries outside the region where the Debt Collection Agency is active unless:

In certain cases involving international debt collection activities, personal data may be shared with authorised representatives or subcontractors operating in the relevant jurisdiction.

DebtCo may also use third-party service providers located outside the EEA, including service providers located in the United States.

Where personal data is transferred internationally, DebtCo will rely on appropriate safeguards, including:

• European Commission Standard Contractual Clauses (SCCs);
• Adequacy decisions;
• Other legally recognised transfer mechanisms.

DebtCo will not transfer personal data internationally without implementing appropriate measures designed to protect your personal data.

What rights do I have?

Under applicable data protection legislation, you may have the following rights:

Right to be informed

You have the right to receive information about how your personal data is collected and processed.

Right of access

You may request a copy of the personal data DebtCo holds about you.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of personal data where DebtCo has no lawful basis to continue processing it.

Right to restrict processing

You may request that processing be restricted in certain circumstances.

Right to object

You may object to processing where DebtCo relies on legitimate interests as the legal basis.

DebtCo may continue processing where overriding legal grounds exist or where processing is necessary for legal claims.

How can I complain or exercise my rights?

If you wish to exercise your rights or raise concerns regarding the processing of your personal data, you may contact:

Data Protection Officer
DebtCo
J.C. van Markenlaan 3
2285 VL Rijswijk
The Netherlands

Email: nl@debtco.io

DebtCo will investigate and respond to your request in accordance with applicable legal requirements.

If you are not satisfied with our response, you may lodge a complaint with the relevant supervisory authority.

Security

DebtCo is committed to protecting personal data against unauthorised access, disclosure, alteration and destruction.

Appropriate physical, technical and organisational security measures are implemented to safeguard personal data.

Cookies

Our website may use cookies and similar technologies to improve functionality, analyse website usage and enhance the user experience.

You may configure your browser settings to accept or reject cookies. Certain website functionality may be affected if cookies are disabled.

Further information regarding cookies may be made available through our website.

Links to other websites

Our website may contain links to third-party websites.

DebtCo is not responsible for the privacy practices or content of external websites. Users should review the privacy notices applicable to those websites before providing personal information.

Accessing your personal information

You may request access to the personal information held about you by DebtCo.

Where requests are manifestly unfounded, excessive or repetitive, DebtCo reserves the right to charge a reasonable administrative fee or refuse the request where permitted by law.

If you believe any information we hold about you is inaccurate or incomplete, please contact us and we will investigate and correct the information where appropriate.