Privacy statement

This statement is about korfbalinc.nl, the platform with news, results, standings, transfers, polls, predictions and comments.

The shop korfbalinc.shop is also ours, but has its own privacy policy: the shop's privacy policy. It describes what happens when you view, order or pay for something in the shop. One thing from the shop runs via this platform: the "Withdraw from agreement" button (see 3.12).

The short version is at the top. Below it is everything in detail.

Part 1. The short version

For everyone, even if you are 14.

Who are we?
KORFBALINC makes the website korfbalinc.nl about korfball and the shop korfbalinc.shop. When we write "we", we mean KORFBALINC. (with a full stop: that is how our name is registered with the Chamber of Commerce). This statement is about korfbalinc.nl. The shop has its own privacy policy.

You can read without us knowing who you are.
You do not have to fill in anything to read news, results and standings. We do count how many people view which pages, how long they read, how fast the page loads, how far they scroll, where they click and which clubs they follow in My club. In the Netherlands we do that without knowing who you are: as long as you have not chosen anything yet, with a simple counting cookie of ours (12 months, only for counting), after Reject without a cookie. With your consent we also count what you search for on the site and which addresses do not exist. Are you not from the Netherlands? Then we only count you once you click Accept. Do you not want to be counted in the Netherlands either? Turn it off under "Cookie settings" at the bottom of every page.

The cookie notice.
If you click "Accept", we set a cookie. That is a small file on your phone or computer. It helps us see better what works and lets us try out two versions of a page. We then also see where people click on a page, and for some of the visits we make a recording of what happens on the screen. What you type is not included. If you click "Reject", that is fine too. Everything keeps working as normal. Younger than 16? Then choose Reject.

Voting and tapping.
You can vote in a poll without an account. Tapping the winner of a match too. Your browser then gets a random code, so nobody can vote ten times. That code says nothing about who you are. Even if you are logged in, we do not know what you voted.

A short question.
Sometimes we ask something at the bottom of the screen, for example what score you give the site. Answering is not required and is anonymous. On your device we only remember which question you already got, so you do not see it again and again.

An account is possible from age 16.
Do you want to comment, or make predictions for points? Then you need an account. That is possible from age 16. We only ask for your email address, a pseudonym and your year of birth. You log in with a 6-digit code that we email you. Other people only see your pseudonym, never your email address. You choose yourself whether your pseudonym appears in the predictions leaderboard.

Comments.
Every comment first passes a simple filter. It looks for swear words and for details that do not belong there, such as a phone number. The filter can hold a comment back, but only a human removes anything.

Sending something in.
Do you send a tip, a correction or a video? Then only we see what you send. Your name and email are not required. You can send a video as a link or upload it. We only put your name with a video if you tick that box. If someone under 16 is recognisable in a video, we do not publish it.

Buying something.
What happens in the shop is described in the shop's privacy policy: ordering, paying and shipping, and what Meta, Google and Shopify see if you agree to that in the shop's cookie notice. Do you want to undo a purchase with the "Withdraw from agreement" button? That form runs via this platform. You immediately get an email that we have received it (see 3.12).

How do we make the news?
For the news we use AI: Claude, from the company Anthropic. A few times a day Claude searches public sites for new korfball news and writes a first version. A human from the editorial team reads and approves every piece the AI writes. Only then does it go online. For the news we only give the AI public sources and sports data, no comments and no data from your account.

Who helps us?
We use a few companies for the technology. For example the place where the site runs, and the service that sends our emails. Most of these companies may only use your data for us. Some are American. Claude also helps us build and manage the site, and can access our database in doing so. Claude does not look at readers' data: that is a firm agreement. Only when we look into a question about a withdrawal can Claude see that withdrawal.

We sell nothing of yours.
On korfbalinc.nl we do not sell your data, we do not show advertising from others and we do not build an advertising profile of you. For the shop: see the shop's privacy policy.

How long do we keep it?
No longer than necessary. Every night the site itself cleans up what is too old. If you delete your account, we immediately remove your account, your comments and your predictions. They then remain in our backups for at most a week. We keep reports for up to 12 months after the decision, without a link to your account.

What are your rights?
You can always ask which data we have about you. You can ask us to correct or remove something. Email info@korfbalinc.nl. You will get an answer within a month. Not satisfied? Then you can complain to the Autoriteit Persoonsgegevens. If you live in another country, you can also complain to the supervisory authority there.

Are you on the site yourself?
If you play in the Korfbal League, your name, club and statistics are on the site. That is sports news. We never add your age, address, phone number or email. We only name youth players if a source, such as a club or a newspaper, already named them. We do not publish photos of children under 16. Is something wrong? Click "Report an error".

Part 2. The full version

1. Who is responsible?

KORFBALINC. is the "controller". That means: we decide why and how your data is used, and we can be held accountable for it. That applies to both sites. Even if a form from the shop sends your data to korfbalinc.nl (see 3.12), we remain the same controller. What the shop does with your data is described in the shop's privacy policy.

We do not have a data protection officer. For a small organisation like ours, one is not required.

2. A few words explained

• Personal data: anything that says something about a person who can be identified. For example a name, an email address or an IP address (the internet address of your device).
• Legal basis: the law names six reasons for which data may be used. We use four of them:
  • contract: we need the data to do what you ask, such as making your account work;
  • legal obligation: the law obliges us, for example to send you a confirmation when you undo a purchase;
  • legitimate interest: we have a good reason, and it outweighs your privacy. For example securing the site. You can always object to that (see chapter 9);
  • consent: you said "yes" yourself, as with the cookie notice. You can always withdraw that consent again.
• Processor: a company that does something with your data on our behalf, such as the place where the site runs.
• IP code: a code we make from your IP address, with a secret key. For submissions and reports that key changes every day. Your IP address cannot be recovered from the code. We only use it to count how often something happens from one internet connection, and delete it after 24 hours.
• Journalism: the law allows room for news and sports reporting. Chapter 4 is about that.

3. Which data, for what and for how long

Every night the site itself deletes whatever has been kept longer than stated below. Where that is (still) done by hand, it says so.

3.1 You visit the site

• What: your IP address, the type of browser and device, the time and the page you request. This is in the server's technical logs. Also the country of your visit (a country code, such as NL). If the site is behind an access code, such as before the launch, a cookie remembers that you entered the correct code (see the cookie statement); the server only counts wrong attempts in its working memory.
• Why: to make the site work and secure it, and to prevent abuse, such as someone trying to retrieve all data in one go.
• Legal basis: legitimate interest (a working, secure site).
• How long: the logs at Vercel, the place where the site runs, 1 day. If something goes wrong, such as an outage or a possible leak, we keep a copy of the part of the log we need, for at most 4 weeks, unless we need it for our register of data breaches.

3.2 Statistics without consent (only in the Netherlands)

• What and why: we count which pages are viewed, how visitors arrive (for example via Google or Instagram), with which type of device and browser, how long someone stays on a page, how fast the page loads and how far people scroll, and which links and buttons are clicked. For a click we only know at which place on the page it was (for example the menu or the results block) and where the link goes; for a link to another site only the name of that site. In My club we count which clubs and competitions are followed (only the name of the club or competition, never which teams). That way we can improve the site. PostHog does this for us (PostHog EU, servers in Frankfurt). As long as you have not chosen anything in the cookie notice, PostHog sets a counting cookie for us (ph_kb_telcookie, 12 months) with a random code, so that you count as one visitor across multiple days. If you chose Reject, we delete it and nothing is placed on your device: PostHog then makes a code from your IP address and browser that changes every day. With the counting cookie we do not make recordings or heatmaps and do not run tests. We do not store your IP address itself. We do not send free text, such as what you type or searched for, and link nothing to an account. With your consent we also count what you search for on the site and which addresses do not exist.
• Legal basis: legitimate interest. We have weighed our interest against your privacy and recorded that assessment.
• Opting out: turn off "Counting in the Netherlands" in "Cookie settings" at the bottom of every page. You then object and we do not count you. If your browser sends a "do not track" signal (Global Privacy Control), we do not count you either.
• How long: at most about 12 months. After that we only keep totals.
• Are you not from the Netherlands? Then we only count you if you click Accept (see 3.3).

3.3 Statistics, tests, heatmaps and recordings with a cookie (only if you agree)

• What: if you click "Accept", PostHog sets a cookie for us with a random code. With it we see whether you come back, how you click through the site, and which version of a page or of the menu you saw when we try out two versions (an A/B test). Such a test runs for two to four weeks, and we run at most three at the same time. PostHog derives from your IP address roughly where you are (city, postcode and a spot on the map); we do not store your IP address itself. Furthermore, if you also agree to Statistics (Accept does that):
  • Heatmaps: we see where on a page people click and how far they scroll, as one image per page for all visitors together.
  • Recordings: of about 1 in 10 visits PostHog makes a recording of what happens on the screen (which pages, where you click and scroll). Everything you type in a field is masked and is not recorded; comments neither. On the pages of your account, when logging in and signing up, submitting and reporting we never record. We do not record technical data from your browser (no console log and no network traffic).
  • We do not use it for advertising and never link it to your account.
• Legal basis: consent. You can also switch Statistics and tests on or off separately in "Cookie settings". You can always withdraw via "Cookie settings" at the bottom of every page; we then let the cookie expire and record nothing more. Younger than 16? Then choose Decline.
• How long: the cookie 6 months; recordings 30 days; the other data at most about 12 months. More in the cookie statement.

3.4 Voting in a poll, and tapping the winner without an account

• What: your choice, the time, and a random code in a cookie in your browser (the vote code). We only set the cookie when you vote or tap, not when you open the page. We only store an encrypted version of that code (a "hash"). A vote is never linked to your account, not even when you are logged in.
• Tapping the winner: without an account you can tap the winner once for a match. It works just like voting, without points. After the match you see in your own browser whether you were right.
• Why: to count the votes and taps and to prevent double voting.
• Legal basis: legitimate interest.
• What others see: only the count, never who voted or tapped what.
• How long: the votes themselves as long as the poll is online; a tap counts permanently in the distribution. We delete the encrypted code 30 days after the poll closes, or 30 days after the match. The cookie in your browser disappears by itself 12 months after you last voted or tapped (see the cookie statement).

3.5 Your account

• Who: an account is possible from age 16. Because we only ask for your year of birth, it is only possible from the year in which you turn 17. See the age policy.
• What: your email address, your pseudonym, your year of birth, the tick box "I am 16 years or older", the date on which you agreed to the house rules, and if you wish your favourite club. We also keep track of: your role (reader, regular contributor or writer), a trust level that only the editorial team sets, the status of your account, when you were last active, whether and when we emailed you that you had been inactive for almost 2 years, and your points and level in predicting.
• Logging in: with a 6-digit code that we send to your email address. There is no password and there is no login link in the email. A code is valid for 10 minutes, works only once, and no longer works after 5 wrong attempts. We only store the code encrypted. During logging in and signing up we set two short cookies that expire after 10 minutes. After logging in we set a cookie that keeps you logged in. It lasts 90 days. Every time you visit, those 90 days start again.
• Preventing abuse when logging in: we count how often a code is requested, per email address and per internet connection. We only store that as an encrypted code and as an IP code, and we delete it after 24 hours.
• The email with the code is sent for us by Brevo (see chapter 5). Brevo only counts per type of email how many emails are opened or clicked, not per person.
• Log out everywhere: in your account there is a button with which you log out on all your devices at once.
• Downloading your data: in your account you can download a file with your account data, your comments and your predictions.
• Why: to let you comment and predict, to guard the age limit, and to prevent abuse.
• Counting: we count per week how many accounts did something, only as a total. That way we know at least how many people use the site.
• Legal basis: contract. You create an account and agree to the house rules. For the weekly count and preventing abuse: legitimate interest.
• What others see: only your pseudonym. If you opt for the public leaderboard in predicting, also your points and level (see 3.8). Never your email address or your year of birth. Your favourite club is not public, unless you yourself take part in your club's leaderboard. Then your pseudonym appears in that club's leaderboard.
• How long:
  • as long as your account exists;
  • if you delete your account, we remove your account immediately, with your comments and your predictions. Reports are kept, but no longer linked to your account: a report you made, with your pseudonym and email address, and a report about a comment of yours, with a copy of that comment. We delete those 12 months after the decision (see 3.7). Tips, corrections and videos are not attached to your account; the periods in 3.9 apply to those. In our backups it remains for at most 7 more days afterwards; we only use those backups to restore the site after an outage. If we have to restore a backup, we delete your account again immediately;
  • if you are inactive for 2 years (you did not visit in that time while logged in, and did not log in either), we delete your account. You get one email about it a month in advance;
  • if we block an account, it continues to exist as long as the block runs, even if you are inactive for 2 years. If you delete a blocked account, we only keep your email address in encrypted form, for as long as the block lasts plus 12 months. That way we prevent someone from immediately creating a new account. With a permanent block that encrypted form remains as long as the block applies. We review such a block after 5 years. If it is no longer needed then, we remove it, and that encrypted form too.

3.6 Comments

• What: the text, your pseudonym, the time, under which piece, and the status (awaiting review, visible, hidden, not posted, removed). If the filter holds back a comment, we store what the filter found. If we remove a comment, we store the reason, the house rule, who decided and the explanation we sent you.
• How we keep an eye on things:
  • the editorial team reviews your first comment first;
  • after that a comment goes online directly, but first it passes through a filter on our own server. That filter looks for swear words, phone numbers, email addresses, addresses and more than one link (that may be advertising). We do not use an AI service for this: comments do not go to another company;
  • the filter never decides by itself that a comment disappears. At most it can make a comment wait until a human looks at it;
  • between 23:00 and 07:00 every comment awaits review;
  • you can post at most 30 comments per day, and one per 20 seconds.
• Why: a safe, pleasant place to talk about korfball.
• Legal basis: contract (the house rules) and legitimate interest (a safe environment). For reports and the explanation when removing: legal obligation (the European Digital Services Act).
• How long:
  • visible comments as long as the piece is online, or until you delete your account;
  • removed and unposted comments and the decision about them 12 months after the decision. That is necessary if you object, and to recognise repeated abuse;
  • if we are obliged to hand something over to the police, we keep it as long as that investigation requires.

3.7 Reporting something (the report button)

• What: which comment you report, a copy of the text, why, whether it is urgent, and your name and email address. If you are logged in, we take those from your account. If you report sexual content involving children without logging in, you do not have to give your name and email address. Without an email address we cannot send you a confirmation or an outcome.
• Preventing abuse: you can make at most 10 reports per 24 hours. If you report without an account, we count that with an IP code, which we delete after 24 hours. With an account we count per account.
• Why: to handle the report properly. If you gave an email address, you get a confirmation and later the outcome.
• Urgent: an urgent report goes directly by email to the editorial team. That email only contains the type of report, under which piece and when. Not the text of the comment, and not your name or email address.
• Legal basis: legal obligation (Digital Services Act) and legitimate interest (preventing abuse).
• What the writer hears: we do not tell the writer who reported.
• How long: 12 months after the decision. A report that is still open remains until it has been handled.

3.8 Predicting, points and levels

• What: your prediction per match, your points, your level, your highest level this season, your place in the leaderboard, your choices for the public leaderboard and your club's leaderboard, and whether the editorial team removed you from the leaderboard (see the house rules, chapters 4 and 9).
• Legal basis: contract.
• What others see: you choose that yourself. With your first prediction you choose: "Show my pseudonym in the leaderboard" or "Rather not". Nothing is switched on in advance. If you opt for the leaderboard, others see your pseudonym, points and level in the leaderboards, and perhaps in the block "De voorspellers" in Het Weekend. If you choose "Rather not", you still get points and a level, and only you see your place. You can change your choice at any time, in your account.
• Your club's leaderboard: only if you switch it on yourself in your account ("Yes, I take part in my club's leaderboard"). Nothing is switched on in advance. Others then see which club you chose as your favourite. A club leaderboard only appears once at least 5 people take part.
• What others never see: what you predicted for a match. Others only see how all predictors chose together, for example "62% think KZ".
• Prizes: there are no prizes to be won.
• How long: as long as your account exists.

3.9 Submitting something: tips, corrections, club news and videos

• What: your message, a link to a video or the video file itself, the page you came from, and what it is about. Optional: your name, email address, club and role (player, coach, board). We do not link your submission to your account, not even if you are logged in.
• Videos: you can submit a video from the age of 16; younger via a parent. You send a link or upload the file (mp4, mov or webm, up to 50 MB). An uploaded file goes directly from your browser to protected storage at Supabase in Frankfurt; in doing so Supabase, as a processor on our behalf, sees your IP address and the type of browser. Only the editorial team can view the file. You agree to short terms shown with the form: you made the video yourself or the maker agrees; nobody under 16 is recognisable in it; we may show it on the site and on social media, and shorten it; and we remove it if you or the maker ask us to. We only add a name if you tick "Credit my name with the video". If you do not tick it, we name nobody and you waive attribution (article 25 of the Auteurswet). When a video comes in, the editorial team receives an email with the type (link or file), the club if you filled it in and a link to the admin area; your name, your email address and the file are not included.
• Report an error: for this we ask for no name and no email address. If it concerns something that does not work on the site, we include the type of device and browser (such as "iPhone" and "Safari"). You can see these in the form and change them.
• Preventing spam: we do not use a service from another company. The form has a hidden field that only computer programs fill in, and a form submitted within 2 seconds does not count. You can also submit at most 20 times a day from one internet connection. We count that with an IP code, which we delete after 24 hours. We do not keep spam.
• Why: to make news, correct errors, and be able to ask you something about your message.
• Legal basis: legitimate interest, and the room the law gives for journalism.
• What others see: nothing automatically. The editorial team reviews everything first. If we use your tip, we do not name you, unless you want us to. If we publish your video, a name is only shown if you ticked that box.
• How long:
  • your name, email address, club and role 6 months after we have dealt with your message;
  • your message itself as long as we need it for our work, at most 2 years after dealing with it. If it led to an article, we keep it as a source with that article;
  • an uploaded video: if we reject it, we remove the file immediately; if we do not use it, after 90 days; if we do use it, at most 2 years, or sooner if you or the maker ask us to. An upload whose form was not completed disappears within 48 hours. If we remove your submission, the file goes with it immediately.

3.10 You email us

• What: your email address, your name and what you write.
• Where: in the mailbox of info@korfbalinc.nl, at Zoho Mail from Zoho Corporation B.V. (the Netherlands), in a data centre in the European Union.
• Legal basis: legitimate interest, or contract if it concerns an order.
• How long: 2 years. If it concerns an order, a refund or a withdrawal, it is part of our records and we keep it for 7 years. Once a year, in January, we clear out the email we no longer need to keep.

3.11 Rights complaints

Do you think we are using something of yours without permission, such as a photo, a text or a logo? Then you can report it (see the Rights complaints page).

• What: your name, email address, possibly your organisation, which content it concerns and why.
• Legal basis: legitimate interest and legal obligation.
• How long: 2 years after it has been dealt with. We keep a list of all complaints.

3.12 Cancelling a purchase in the shop (withdrawal)

What happens in the shop, such as ordering, paying, shipping and returns, is set out in the shop's privacy policy. One thing from the shop runs via this platform: the "Withdraw from contract" button. With it you cancel a purchase. This is how it works:

• The route: the form is on korfbalinc.shop, but first sends what you fill in to our platform korfbalinc.nl. That platform is also ours: your data stays with the same controller. The platform runs at Vercel in Frankfurt and stores your withdrawal in our database at Supabase in Frankfurt. After that the form also goes via Shopify to our mailbox, as extra assurance.
• The confirmation: the platform records the time we received your withdrawal, gives it a reference (such as H-2026-7K3M), and immediately sends you a confirmation by email via Brevo, from site@post.korfbalinc.nl. That email states what you filled in and the date and time. After that we receive a notification in info@korfbalinc.nl.
• What we keep: your name, your email address, your order number, which products (empty means the whole order), the time of receipt, the reference, and whether the two emails (to you and to us) were sent.
• Against misuse: this can be done at most 5 times per hour per internet connection, and 3 times per 24 hours per email address. To count this, the server creates a fingerprint from your IP address. It is only briefly held in the server's working memory and never enters our database. We only count attempts from the past hour. We do not store your IP address with your withdrawal.
• In your browser: until the confirmation screen appears, what you filled in is briefly held in your browser's session storage. That way the confirmation screen can show it. After that the shop deletes it immediately, and otherwise it disappears when you close the tab. It is not sent to us (see the cookie statement).
• Legal basis: sending the confirmation is a legal obligation (article 6:230oa paragraph 4 Burgerlijk Wetboek). Keeping your withdrawal as evidence, in case a question or dispute arises later: legitimate interest. Refunding and the related records: contract and legal obligation.
• How long:
  • your withdrawal on the platform 2 years after receipt, as evidence. After that the site deletes it automatically;
  • what goes into our records with a withdrawal, such as the refund and the notifications in info@korfbalinc.nl: 7 years, because the Belastingdienst requires it.
• Returning items: how to return something and what it costs is set out in the shop's terms.

3.13 Error reports and availability

• Error reports (Sentry): your browser only sends something to Sentry when there is an error. We then receive a technical report: the page (without what comes after the question mark), the browser with its language and time zone settings, the error message, and the last steps just before the error, such as which pages you opened and what you clicked on. In addition, our server measures how fast it went about 1 in 20 times it builds a page. Only the page and the type of browser are included. Before the report is sent, we remove your IP address, cookies, login details and what you typed in a form, and email addresses and IP addresses in the error message are replaced by "[weg]". Sentry's own filters and "Enhanced Privacy" are also switched on. The reports are stored in Frankfurt. We do not record your screen.
• Availability (Better Stack): checks every few minutes whether the site and the shop are reachable. No visitor data is used for this.
• Legal basis: legitimate interest (a working site).
• How long: error reports 30 days. After that, they can no longer be viewed, not even by us.

3.14 A short survey

• What: a few times a year we ask readers how often they visit and on which devices. This can be via a form on the site or an Instagram story. The form is anonymous. We ask for no email address and no name.
• Instagram: if you vote via a story, we only use the totals. We do not view or store who chose what. Instagram does show the maker of a story who chose what; we do not look at that list.
• Why: to check whether our visitor figures are correct.
• Legal basis: legitimate interest. Taking part is voluntary.
• How long: the answers 12 months. After that only totals.

3.15 A short question on the site

• What: sometimes a single short question appears at the bottom of the screen: a score for the site, whether you find what you are looking for, or what you still miss. We keep your answer, the page on which you answered (without what comes after the question mark in the address), which version of an A/B test you saw if you took part in one, and the time. No name, no email address, no account and no IP address; the site itself removes email addresses and phone numbers in an open answer. To prevent misuse, the server counts only in its working memory how often answers come from one internet connection, with a code that expires after just over an hour.
• On your device: we remember which question you already got and when, so you do not keep seeing the same question (see the cookie statement). Nothing is sent to PostHog.
• Why: to hear what readers think of the site and to improve it.
• Legal basis: legitimate interest. Answering is voluntary; with "No, thanks" or the cross you close the question.
• How long: the answers 1 year; after that the site removes them automatically.

3.16 The questionnaire about the site and the prize draw

• What: between 17 October and 1 November 2026 you can fill in a questionnaire about the site. We keep your answers and the time. No name, no email address, no account and no IP address; the site itself removes email addresses and phone numbers in an open answer. To prevent misuse, the server counts only in its working memory how often something comes in from one internet connection, with a code that expires after just over an hour.
• Prize draw: if you then take part in the draw for € 100 shop credit, we keep your email address, the day you took part (no time) and whether you were drawn. This is stored separately from your answers and cannot be linked to them. We only email the winner.
• On your device: we remember whether you already got the invitation to take part and what you chose, so it appears at most twice (see the cookie statement). If you allow measurement cookies, PostHog only counts that the question appeared and what you chose, never your answers.
• Why: to improve the site with what readers themselves say, and to run the prize draw.
• Legal basis: for the answers legitimate interest (filling it in is voluntary); for your email address the performance of the promotion terms you agree to.
• How long: the answers 1 year; the email addresses at the latest one month after the draw, and in any case deleted on 2 December 2026.

4. People in our news and in our sports data

KORFBALINC is a news site about korfball. That is why it contains names of people: players, coaches, staff, referees, board members and clubs.

• What we show: name, club, team, role, matches, goals and other statistics, transfers, and what a source writes about someone. At launch, player pages exist only for players from the Korfbal League.
• Where it comes from: the official match data of the federation, the Korfbal League website, the commentary on livestreams, club websites and social media, other media, and submissions.
• What we never do:
  • we do not show or store the age, date of birth or place of residence of players;
  • we do not show telephone numbers or email addresses of persons or clubs;
  • for youth matches we do not store or show the names of referees. For matches in the top senior competitions we do show the referees by name, as the source names them;
  • we only name youth players if a source has already done so;
  • we do not post photos or videos in which children under 16 are recognisable.
• How we work: we use AI to find and write news: Claude, from the company Anthropic (see chapter 5).
  • A few times a day, as a scheduled task, Claude searches public websites for new korfball news, such as the websites of clubs, the federation, the Korfbal League and other media.
  • Figures, such as results, standings and goals, are calculated by a computer program from the official data. It then checks what a piece says about figures.
  • Claude writes a first version (a draft). That draft goes into our review queue, and the editorial team receives an email about it. The AI cannot put anything online itself.
  • A human from the editorial team reads every draft and approves it, or sends it back. Only after that approval does it go online, under the responsibility of the editorial team.
  • For the news we give the AI only public sources and sports data, such as matches, standings, players and earlier pieces. We do not give the AI comments or data of readers or customers. The scheduled task can only read the database; which sports data it requests is fixed in its instructions.
  • Pieces the site makes from figures only, without text from the AI, go online automatically. For example results, standings and a weekend overview with figures only.
• Legal basis: the law gives room for journalism (article 43 of the Uitvoeringswet AVG). As a result, a number of privacy rules do not apply, or apply less strictly. In addition: legitimate interest.
• Your request: we correct an error as quickly as possible, at the latest within 24 hours, with a correction line below the piece. If you want something removed, we assess case by case whether the news interest outweighs your interest. This also applies to referees, coaches and others who appear on the site. If it concerns a minor, that weighs extra heavily for us. If it concerns your own child under 16, we remove it as quickly as possible, at the latest within 48 hours, and you do not need to explain why (see the age policy). Email info@korfbalinc.nl, or use "Report an error".

5. Who we share data with

Most of the companies below help us make the platform work. They may only use your data for us, and not for themselves. One exception: for what we do with our subscription to Claude (see Anthropic below), the terms and privacy policy of Anthropic apply, and Anthropic itself is responsible for that. We are responsible for what we show Claude. Who receives which data when you view or order something in the shop is described in the shop's privacy policy.

Better Stack, which checks whether the sites are reachable, receives no data of visitors or customers.

Sometimes we have to give data to others:

• to the police or judicial authorities, if the law requires us to, or if someone threatens another person in a comment;
• to the Belastingdienst, for our accounts.

6. Data outside Europe

Some of our suppliers are American. Sometimes your data is then stored in the United States, or an American company can access it. The law allows this if there are proper arrangements: a decision by the European Commission that a country offers adequate protection (such as the EU-US Data Privacy Framework for participating companies, or the decision for the United Kingdom), or model contracts approved by the Commission (standard contractual clauses).

You can get a copy of the arrangements via info@korfbalinc.nl.

There is a court case about the Data Privacy Framework at the Court of Justice. That is why we choose storage in Europe where possible, and keep a list of all our suppliers, so that we can switch quickly.

7. What we do not do

• On korfbalinc.nl we do not sell your data.
• On korfbalinc.nl we do not show advertising from others and do not use advertising cookies.
• We do not create a profile of you for advertising.
• A computer does not make decisions about you that have major consequences for you. The comment filter can at most put a comment on hold; a human decides. The AI only writes drafts of news; a human approves them.
• For the shop: see the shop's privacy policy.

8. Security

• All connections to our sites are encrypted (https).
• For our accounts with suppliers we use strong, unique passwords. Secret keys are stored only in protected settings, never in the code.
• Readers do not have a password with us. They log in with a 6-digit code sent by email. So there is no password to steal. Codes, sessions and IP codes are stored only in encrypted form in the database.
• Only the editorial team can access the data, and only what is necessary. Claude helps the editorial team with this and can technically access the database, but under a fixed agreement does not look at reader data (see chapter 5). The scheduled task that searches for news can only read the database and cannot change anything; which sports data it requests is fixed in its instructions.
• We make a backup of the platform's database every day (kept for 7 days).
• We ask for as little data as possible.
• If something does go wrong, we follow our data breach plan. If there is a risk to you, we report it to the Autoriteit Persoonsgegevens within 72 hours. In case of a high risk, we also inform you.

9. Your rights

You have these rights:

• Access: ask which data we hold about you.
• Rectification: have something corrected that is not right.
• Erasure: have your data removed. You delete your account yourself with one button in your account. Sometimes removal is not allowed immediately, for example for invoices we must keep for 7 years.
• Restriction: ask us not to use your data for a while, for example while we investigate whether something is correct.
• Objection: object if we use your data on the basis of legitimate interest. For example to the statistics in the Netherlands. The quickest way is the "Counting in the Netherlands" switch in "Cookie settings" at the bottom of every page: turn it off, and we no longer count you. Emailing is also fine.
• Portability: receive your data in a file you can use elsewhere. With an account you can download that file yourself.
• Withdraw consent: for example for the cookie, via "Cookie settings". For email from the shop: with the unsubscribe link at the bottom of the email.

How: email info@korfbalinc.nl, preferably from the email address of your account or order. Sometimes we ask you to show that it is really you. You will receive a reply within a month. If your request is complex, it may take two months longer; we will let you know within a month. It costs nothing.

Complaints: are you not satisfied with how we handle your data? Let us know first. You can also always file a complaint with the supervisory authority:

• in the Netherlands: the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl);
• in Belgium: the Gegevensbeschermingsautoriteit (gegevensbeschermingsautoriteit.be);
• in another country of the European Union: the supervisory authority in that country.

10. Young people

• Anyone can read and vote, without an account.
• An account is possible from the age of 16.
• We do not post photos and videos with recognisable children under 16.
• Parents can always email us to have an account or a video featuring their child removed.

Everything about this is in the age policy.

11. Cookies

Which cookies we use and how to change your choice is set out in the cookie statement.

12. Changes

If we change something important in this statement, we will put that at the top of this page, with the date and the number of the new version. Previous versions remain available to read. If you have an account, you will receive an email in the event of a major change.