This is the Privacy Statement of Hypotheek & Abroad. Here we explain, among other things, why we collect and use personal data, what data that is and what rights you have when we process your personal data. We advise you to read this statement carefully.

Who we are

Mortgage & Abroad is a Dutch company. Mortgage & Abroad is involved in guiding customers through the process of purchasing a home abroad, advising customers about (mortgage) credit and insurance and mediating in the conclusion of (mortgage) credit and insurance agreements. We process personal data for these activities. We would like to inform you about this clearly and transparently. In this privacy statement we answer the most important questions about the processing of personal data.

Hypotheek & Buitenland is located in Amsterdam and registered in the trade register under number 74627198. Hypotheek & Buitenland processes personal data of people with whom it maintains a (potential) customer relationship.

With this Privacy Statement, Hypotheek & Buitenland aims to provide clarity on how it handles personal data.


Our privacy policy

Hypotheek & Buitenland attaches great importance to protecting the privacy of (potential) customers. We will handle your personal data in a proper and careful manner. Personal data is processed in accordance with the General Data Protection Regulation (GDPR). Furthermore, our privacy policy is partly based on the Code of Conduct for the Processing of Personal Data by Financial Institutions.

The most important basic concepts about the processing of personal data:

What are personal data?

Personal data is data that says something directly or indirectly about you. For example, consider your name, address details and telephone number. But it also includes your citizen service number (BSN), your IBAN number and the IP address of your computer.

What is processing of personal data?

That’s all that can be done with personal data. For example, collecting, but also storing, changing, using, passing on and deleting your data from our administration.

Who is responsible for your personal data?

Mortgage & Abroad is responsible for the processing of your personal data.

1. How do we collect personal data?

We collect your personal data in the following ways:

  1. You share your personal data with us when you become a customer, register for our online services, fill out a form online, enter into a service agreement, use our products and services, contact us via one of our communication channels or visit our website.
  2. We may also have obtained personal data from other available sources such as debtor registers, other financial institutions, external marketing agencies or trade information agencies.

2. What personal data do we process?

We may process the following types of personal data:

  1. Ordinary personal data:
    1. Your contact details (such as: name, address, place of residence, e-mail address, telephone number)
    2. Other data that is important (such as: profession or business, marital status and family composition, contract data)
    3. Contact moments (such as: letters and e-mails that we send and receive from you and what you do and view on our websites, our contact via social media, such as Facebook and Twitter)
  2. Sensitive personal data
    1. Identification data (such as: Citizen Service Number (BSN), passport number, ID number, date of birth, gender, copy of identity documents)
    2. Financial data (such as data about loans, real estate, income, financial obligations and your IBAN numbers and bank statements)
  • Special This is, for example, data about health or criminal history. In order to properly fulfill our role as an insurance intermediary, we sometimes process special personal data. For example, if you want to take out term life insurance. We only process special personal data if this is strictly necessary for our services and only if you have given explicit permission for this, or when legislation and regulations determine that we must or may do this.

3. What valid reason (basis) for processing do we have?

We may only use personal data for a reason stated in the privacy legislation. Such a reason is called a basis.

Hypotheek & Buitenland bases its processing on the following

legal bases:

  1. We need information from you to conclude and implement the loan agreement.
  2. To promote a legitimate interest of Mortgage & Abroad or of a third party, except when your interests are more important. For example: the protection of your and our property and data and that of others, the protection of our own financial position and the interests of others protecting customers, marketing, carrying out efficient administration such as centralizing or replacing systems, using service providers, the security of systems and networks, carrying out statistical and scientific research. Someone else may also have a legitimate interest for which we need to use your data.
  • To comply with legal laws that require us to retain your data, such as the Civil Code, the Financial Supervision Act (WFT) or specific provisions of the Money Laundering and Terrorism Financing (Prevention) Act (Wwft).
  1. With your consent, where you have given it and which you can withdraw at any time

4. For what purposes do we use personal data?

We only collect personal data that is necessary for the following purposes:

  1. to be able to enter into and execute an agreement, i.e. to be able to provide you with products and services. Without your information, we cannot, for example, advise you on taking out a mortgage.
  2. for promotional marketing purposes, for example to inform you about a new product that may be of interest to you.
  • to assess your and our risks.
  1. for customer satisfaction surveys to develop and improve our products and services, but we also investigate possible trends, problems, causes of errors and risks. For example, to check whether new rules are properly complied with. This way we can prevent complaints and damage.
  2. to comply with our legal obligations and to cooperate with supervisors.
  3. to ensure that the financial sector remains safe and reliable and to protect your and our interests, for example when it comes to combating fraud and research, for which we consult, among other things, incident registers and warning systems of the financial sector, newspapers and the internet. For example, by reporting unusual transactions or by recognizing possible fraudulent transactions, stopping them and, if necessary, verifying them with you. We always first check whether this is permitted.

5. What if we don’t get data from you?

Do we need information from you to advise you when taking out a mortgage? And do you not want to give them anyway, even though the law states that you have to or because we simply need them to be able to execute the agreement? Then unfortunately we cannot enter into a service agreement with you or we will have to terminate a current agreement. In the (online) forms that you sometimes have to complete, you can see which information is required. Do you want us to delete your data from our systems? Unfortunately, this is not possible for the mandatory data. We need that. For example, for the execution of the agreement you have with us, or because we are obliged to keep it by law, or because of a legitimate interest of Mortgage & Abroad.

6. With whom do we share your data?

We may use your data within Mortgage & Abroad for internal administrative purposes or to improve services, or because the law says we have to. This way we can get a more complete picture of your financial situation.

Your personal data may be shared with other parties outside Mortgage & Abroad if we are legally obliged to do so, for example to the tax authorities, or because we have to execute an agreement with you, for example with lenders, insurance companies or notaries.

We also engage third parties to carry out our services, such as marketing communications agencies, IT companies and data centers. If these third parties have access to your data when performing the relevant services, we have taken the necessary contractual and organizational measures to ensure that your data is processed exclusively for the above purposes.

In principle, Mortgage & Abroad does not share personal data with organizations outside the European Economic Area (EEA). Where this is necessary, we ensure that appropriate safeguards have been put in place that meet the requirements of the GDPR, ensuring that the data receives the same protection as within the EEA.

We do not share your data with third parties for marketing or sales activities.

7. How do we protect personal data?

Our website, portal and IT systems are well secured and we do our utmost to protect your personal data as best as possible by taking so-called appropriate technical and organizational measures. Our employees and those of our suppliers have also been instructed to handle your data carefully and to keep it confidential. In this way we try to prevent unauthorized persons from gaining access to your personal data.

To achieve this protection, we have an appropriate security policy, which is periodically evaluated and adjusted if necessary.

8. How long do we keep personal data?

We keep your data for as long as we need it for the purposes for which we process it, for as long as we are required to keep it by law and for as long as we are allowed to keep it for claims (until the possible claim has expired) against which we defend ourselves. should be able to defend. The retention period may differ per purpose.

9. What do we do with your data after the retention period expires?

After the retention period, your personal data will be deleted or anonymized. Anonymization means that personal data is stripped of all possible identifying characteristics, so that no one can see that it is about you.

10. What rights do you have?

Mortgage & Abroad uses your personal data to serve you. We handle this very carefully. Of course, you remain in control of this information. We would therefore like to point out your rights:

  1. Inspection: you have the right to inspect your personal data and can generally inspect the personal data that we process about you within one month of your request.
  2. Correction: you can ask us to have inaccuracies in your personal data corrected.
  • Deletion: you can ask us to delete personal data under certain circumstances. In that case, we will take reasonable steps to inform other processors who process the personal data on our behalf that you have requested removal of links to and copies of your personal data.
  1. Objection to processing: if you object to certain processing of your personal data, for example emails with offers.
  2. Restricting processing: you can request us to restrict the processing of personal data under certain circumstances, for example if you contest the accuracy of personal data.
  3. Portability: you can ask us to obtain the personal data that you have provided to us and that we store automatically in a structured, commonly used and machine-readable form, for example in order to subsequently transmit it to a third party. This is called ‘data portability’ .
  • Withdrawal of consent: where you have given permission to use your personal data, you can withdraw this consent, so that we no longer use the personal data for which the consent applied.
  • Submit a complaint: you can submit a complaint about our processing of your personal data to the Authority

When exercising these rights, exceptions may apply, which means that you cannot exercise certain rights in all cases.

11. How can you exercise your rights? Question or complaint?

You can exercise the right of inspection and the right to portability by contacting Hypotheek & Buitenland by telephone. To exercise the other rights, please send us a letter or e-mail. Then add a copy of your passport or ID card, where you have made the BSN and passport photo illegible? We will respond within four weeks of receiving your letter.

If you have any questions or complaints about the way we handle your personal data, you can contact:

Hypotheek & Buitenland

If we receive a complaint, we register it. In addition to your personal data, we also register and process those of parties involved in the cause and resolution of the complaint. If we cannot reach an agreement together, you always have the right to file a complaint with the Dutch Data Protection Authority via

12. Using

When you visit our website, general visitor data (such as click behavior, visit time, visit frequency, etc.) is collected and stored by us to improve the user-friendliness of our website. This data can also be used to place more targeted information and offers on the website for you.

13. Cookie policy

When you visit our website, we may automatically store some information on your computer in the form of a cookie to automatically recognize you on your next visit. A cookie is a small file that is stored on your computer. This file cannot be used to identify you personally. You can refuse the storage of cookies by adjusting the settings of your browser. To adjust the settings, consult your browser manual.

To collect visitor data, we use, among other things, Google Analytics, a web analysis service offered by Google Inc. (“Google”). Google Analytics uses cookies to help Mortgage & Abroad analyze how users use the site. The information generated by the cookie about your use of the website (including the IP address) is transferred to and stored by Google on servers in the United States. Google uses this information to keep track of how you use the website, to compile reports on website activity for Mortgage & Abroad and to offer other services relating to website activity and internet usage.

Google may provide this information to third parties if Google is legally obliged to do so, or insofar as these third parties process the information on behalf of Google. Google will not combine your IP address with other data held by Google. By using this website, you consent to the processing of the information by Google in the manner and for the purposes described above.

14. Amendment of this Privacy Statement.

We may adjust this Privacy Statement. A new version is always published on our website.

Do you have any questions? Please contact us via