Privacy policy

1. Data controller

GrachtAlert.nl is an initiative of Darcey (hereinafter: “we”). For questions about this privacy policy you can contact us at d@rcey.nl.

2. What data do we collect?

We process the following categories of personal data:

• Report data: date, time, location (coordinates and/or address) and type of object. This data contains no direct personal identification and may in the future be shared with the City of Amsterdam and the police.
• Contact details submitted with a report: skipper name, boat name, operator and optional remarks. These are kept strictly confidential and never made public.
• WhatsApp subscription: your phone number, if you sign up for WhatsApp notifications. Messages are sent via the WhatsApp Business API of Meta Platforms Ireland Ltd.
• Analytics data: we use Google Analytics to keep visitor statistics. This involves anonymised data such as page views and session duration. Google may process this data in the US.

3. Purpose of processing

We process your data exclusively for the following purposes:

• Mapping throwing-related nuisance on the Amsterdam canals
• Providing information to the City of Amsterdam, police and media to address the problem
• Sending WhatsApp notifications about new incidents (only if you signed up)
• Analysing visitor behaviour to improve the website

4. Legal bases

The processing of your data is based on:

• Consent — for WhatsApp messages and Google Analytics
• Legitimate interest — for keeping report statistics and addressing dangerous nuisance

5. Use of the WhatsApp Business API

To send WhatsApp notifications we use the WhatsApp Business API, provided by Meta Platforms Ireland Ltd. Your phone number is used exclusively to send the notifications you signed up for. We do not share your phone number with third parties, except for the technical transfer to Meta required for delivery.

Meta’s privacy policy can be found at whatsapp.com/legal/privacy-policy.

6. Retention periods

• Report data (location, type): indefinitely, for trend analysis
• Contact details submitted with a report: at most 2 years after the report
• WhatsApp subscriptions: until you unsubscribe on request

7. Your rights

You have the right to:

• Request access to the data we hold about you
• Have incorrect data corrected
• Have your data deleted
• Object to the processing
• Withdraw your consent (e.g. disable WhatsApp notifications via the website)

To exercise these rights you can contact us at d@rcey.nl. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Security

All data is stored with Supabase (EU region) and is encrypted in transit and at rest. Access is limited to authorised parties through strict security controls. Personal data is kept separate from public report data and is never directly accessible to third parties.

9. Changes

We may amend this privacy policy from time to time. The most recent version is always available on this page, with the date of the latest change.