Clear about data.
You remain in control.
This Privacy and Cookie Statement explains what personal data Officer as a Service processes, why it is processed and what rights you have. OAAS.nl uses necessary cookies to operate the website and remember your cookie preferences. Google Consent Mode communicates your consent choice to Google. Analytics cookies are placed and cookie-based visitor data is processed through Google Analytics for statistical purposes only after you have given consent.
Last updated: December 19th, 2025
Who we are
The data controller responsible for the processing activities described in this statement is:
Bas Kling, operating as Officer as a Service
Sole proprietorship / self-employed professional
Patrick Blackettstraat 74
1341 EB Almere
The Netherlands
Dutch CoC reg. number 70648239
Email bas@oaas.nl
LinkedIn: linkedin.com/in/baskling
What this statement applies to
This statement applies to visits to oaas.nl and to business communications arising from the website through the contact form, email or LinkedIn. It also applies to personal data required to prepare, perform and administer engagements undertaken by Officer as a Service.
Limited cookieless measurement before consent: our legitimate interest in obtaining aggregated insight into the use of the website while processing as little data as possible. No Analytics cookies or persistent Analytics identifiers are placed or read. Google may use the cookieless signals for basic measurement and statistical modelling. We have balanced this interest against your privacy interests. You may object to this processing.
This statement does not apply to third-party websites or services referenced by OAAS.nl, including LinkedIn. Those parties are independently responsible for their own processing of personal data.
Personal data we process
When visiting OAAS.nl
The hosting environment may record technical data, such as your IP address, the date and time of your visit, requested pages and files, browser and device information, the referring page, and technical error or security messages.
When Google Consent Mode is used
OAAS.nl uses Google Consent Mode to adapt the Google tag to your consent choice. Before you have made a choice, and when you reject statistics cookies, consent for Analytics storage is set to ‘denied’. The Google tag may then send limited cookieless signals to Google. These signals may contain information about the consent status, timestamp, user agent, referring page, and a random number generated for each page load. As a technical part of establishing the internet connection, the IP address is also transmitted to Google. No Analytics cookies are placed or read in this situation. Google may use the cookieless signals for basic measurement and statistical modelling.
When Google Analytics is used
If you accept statistics cookies, Google Analytics processes data about your visit, such as pages viewed, events, session duration, referring source, an approximate derived location, and information about your browser, device, and operating system. Google Analytics uses, among other things, a client ID stored in first-party cookies for this purpose. Google states that it neither logs nor stores individual IP addresses of users in the EU. The IP address is used only momentarily to derive an approximate location and is then discarded.
When you contact us directly
When you contact us by email or through LinkedIn, we may process your name, job title, organisation, email address, LinkedIn profile and the content of the correspondence.
When you use the contact form
We process the name and email address you provide, any organisation you specify, and the content of your message. The form is configured to send the submission exclusively by email to bas@oaas.nl . The ‘Collect Submissions’ action is not enabled, which means that the content is not intentionally retained as a separate form submission in the WordPress database. To prevent spam and automated abuse, the form uses Google reCAPTCHA v3. For this purpose, Google may process technical and usage data, such as your IP address, browser and device information, the date and time, and information about your interaction with the website. Based on this information, reCAPTCHA assesses the likelihood that the submission is being made by a human.
In connection with a prospective or existing engagement
We may process business contact details, proposal and contract information, meeting notes, invoicing details and information required to perform the engagement. We do not request special-category personal data unless this is necessary and lawful in exceptional circumstances.
For testimonials
With the writer’s consent, we may publish a testimonial together with their full name, job title, organisation and, where available and permitted, a link to their public LinkedIn profile.
Why we process personal data
We process personal data solely for the following purposes and on an appropriate legal basis under the GDPR:
- Keeping the website available and secure: our legitimate interest in maintaining a reliable and properly secured website and in preventing and investigating misuse.
- Preventing spam and automated abuse through the contact form: our legitimate interest in maintaining the security of the website, ensuring reliable business communications and preventing misuse. Google reCAPTCHA v3 is used for this purpose.
- Applying your consent choice and enabling limited cookieless measurement: our legitimate interest in correctly processing and applying your consent choice and obtaining limited, aggregated insight into the use of the website. No Analytics cookies or persistent Analytics identifiers are placed or read for this purpose. We have balanced this interest against your privacy interests.
- Measuring and improving the use of the website through Google Analytics: uitsluitend met uw voorafgaande toestemming voor het plaatsen van statistische cookies en het verwerken van cookiegebaseerde bezoekgegevens. U kunt deze toestemming op ieder moment intrekken via de knop ‘Cookievoorkeuren’.
- Responding to enquiries and introductory meeting requests: taking steps at your request before potentially entering into an agreement and, where appropriate, our legitimate interest in conducting business communications.
- Preparing quotations and performing engagements: taking steps prior to entering into an agreement and preparing and performing an agreement.
- Administration and invoicing: performing an agreement and complying with legal obligations, including applicable tax and administrative retention requirements.
- Publishing testimonials: the prior consent of the person who wrote the testimonial.
We do not use personal data for automated decision-making or profiling, nor do we sell personal data to third parties. You may object to processing based on our legitimate interests.
Consent to publish testimonials
Testimonials on OAAS.nl have been added manually and are not loaded directly from LinkedIn. Before publication, we ask the writer for permission to use the testimonial and the accompanying name, job title, organisation and any LinkedIn link.
Consent may be withdrawn at any time by emailing bas@oaas.nl. The testimonial and the associated personal data will then be removed from OAAS.nl as soon as reasonably possible. Withdrawal does not affect the lawfulness of publication before consent was withdrawn.
With whom personal data may be shared
We share personal data only where this is necessary for the purposes described above or where required by law.
TransIP B.V. provides the hosting and email services for OAAS.nl. As a result, TransIP may process technical visitor data, form data while it is being transmitted and email data. According to TransIP’s product information, hosting data is stored in the Netherlands. Where TransIP processes personal data on behalf of Officer as a Service, appropriate data-processing and security arrangements are put in place.
Google provides Google reCAPTCHA v3 and Google Analytics. When you visit a page containing the contact form, Google may process technical and usage data to identify spam and automated abuse. This processing for reCAPTCHA is independent of your choice regarding analytics cookies. Only if you accept analytics cookies may Google also process information about your visit to provide website usage statistics for OAAS.nl. Further information is available in Google’s Privacy Policy. Google’s Privacy Policy.
Where necessary, data may also be shared with professional service providers such as an accountant, administrative service provider, legal adviser or IT administrator. These parties are given access only to the data required to perform their services. Personal data is not sold or rented.
Processing outside the European Economic Area
Officer as a Service aims to process personal data within the Netherlands and the European Economic Area. TransIP B.V. is used for website hosting and email services.
When Google reCAPTCHA v3 is used and, subject to your consent, when Google Analytics is used, data may be processed by Google. According to Google, it initially collects data from devices located in the European Union through domains and servers located in the EU. Google operates servers worldwide, which means data may also be processed outside the European Economic Area. Google states that it relies on valid transfer mechanisms, including adequacy decisions, the EU–US Data Privacy Framework and, where required, Standard Contractual Clauses.
When you choose to click a link to LinkedIn, you will leave OAAS.nl. LinkedIn may process personal data outside the European Economic Area in accordance with its own privacy policy and the safeguards it applies. Officer as a Service has no control over this independent processing.
How long we retain personal data
We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a legal obligation or legitimate legal interest requires a longer retention period.
- Technical log data: for as long as required within the hosting environment for operation, security and the investigation of misuse. Where Officer as a Service can determine this period, the data will be deleted or anonymised as soon as it is no longer required for these purposes.
- Cookie preferences: the essential cookies used by Complianz to remember your choice are retained for no more than one year, unless you delete them from your browser earlier.
- Google reCAPTCHA: For its risk analysis, Google may place the strictly necessary _GRECAPTCHA cookie. Google determines the applicable processing and retention periods. You may delete this cookie earlier through your browser settings.
- Google Analytics-cookies: the
_gaand_ga_JBVD6S28ZMcookies have a default maximum lifetime of two years. They are placed only after consent has been given and are deleted when you withdraw that consent through ‘Cookie Preferences’. - Google Analytics data: in the standard GA4 property, user-level and event-level data is retained for up to fourteen months. Aggregated data in standard reports may remain available for a longer period.
- Contact-form messages, non-binding enquiries and prospects: for no more than two years following the last substantive contact. After transmission, the form content is retained in the email inbox rather than as a separate WordPress submission, provided the ‘Collect Submissions’ setting remains disabled.
- Engagement data and business correspondence: for as long as required to perform the engagement and subsequently for as long as reasonably necessary in connection with any potential legal claims.
- Tax and financial records: for seven years, insofar as the statutory tax retention obligation applies.
- Testimonials: until consent is withdrawn or the testimonial is no longer used on the website.
How we protect personal data
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and unlawful processing. These measures include an encrypted HTTPS connection, access controls, up-to-date software, backups and security measures within the hosting environment.
No method of digital transmission or storage is entirely without risk. If you suspect a security incident, please contact us at bas@oaas.nl.
Your data protection rights
To the extent permitted by the GDPR in your circumstances, you may request:
- access to your personal data;
- correction or completion of inaccurate or incomplete data;
- erasure of personal data;
- restriction of processing;
- transfer of eligible data;
- object to processing based on a legitimate interest;
- withdrawal of previously given consent.
Please send your request to bas@oaas.nl. We will generally respond within one month. To prevent misuse, we may request reasonable additional information to verify your identity.
If you have a complaint about the processing of your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority..
Which cookies OAAS.nl uses
OAAS.nl uses essential cookies to ensure that the website functions correctly and to remember your cookie preferences. These cookies, including cookies with names beginning with cmplz_ and wp_consent_, cannot be disabled.
Only with your consent does OAAS.nl use Google Analytics 4 to gain insight into how the website is used. The first-party cookies _ga and _ga_JBVD6S28ZM may then be placed. These cookies help distinguish users and sessions and enable statistics to be generated about page views, events, sessions, referral sources, and general device and location information.
- Statistics cookies are placed only after you have given your consent.
- We do not use advertising or marketing cookies, remarketing or personalised advertising.
- The contact form is protected by Google reCAPTCHA v3. To assess potential misuse, Google may place the strictly necessary
_GRECAPTCHAcookie and process technical and usage data. Officer as a Service does not use this security functionality for advertising personalisation or its own website analytics. - We do not load social media feeds, videos, maps or other external embedded content.
- The fonts and images used on the website are loaded locally from our own hosting environment.
You can accept or reject statistics cookies or configure your preferences through the cookie banner. You can change your choice at any time by selecting the visible Cookie Preferencesbutton. If you withdraw your consent to statistics cookies, Google Analytics will stop operating and the associated Analytics cookies will be deleted.
WordPress may place technically necessary login cookies when the administrator signs in to the restricted administration area. These cookies are not intended for ordinary website visitors and are not used to track them.
TransIP may provide aggregated visitor statistics based on server logs. No Analytics cookie is placed on OAAS.nl for this purpose.
LinkedIn and other websites
OAAS.nl contains a standard outbound link to Bas Kling’s LinkedIn profile. No LinkedIn plug-in, tracking pixel or live LinkedIn content is loaded on OAAS.nl. When you click this link, you visit LinkedIn on your own initiative and LinkedIn’s privacy and cookie policies apply.
We recommend reading the privacy policies of external websites before providing personal data to them.
Changes to this statement
We may amend this Privacy and Cookie Statement when the website, our services or applicable legislation changes. The most recent version will always be available on OAAS.nl and will state the date of the latest update at the top of the page.
Where a change affects processing based on consent, we will request renewed consent where necessary.
A question about privacy?
Please contact Bas Kling directly.
CoC 70648239 · Almere · The Netherlands