LemonB B.V. ("we"), established in the Netherlands, is responsible for the processing of personal data as set out in this privacy policy.
LemonB B.V. considers the careful processing of personal data to be of the utmost importance. Personal data is processed and secured with care. In our processing, we comply with the requirements of the General Data Protection Regulation (the "GDPR"). This Privacy Policy sets out how we collect and use your data, in accordance with the GDPR.
In this Privacy Policy, we explain which personal data we collect and use, and for what purpose. We recommend reading this Privacy Policy carefully. This Privacy Policy applies to our website, https://tenderb.nl, and related websites and Services.
This Privacy Policy was last updated on: 5 August 2026
If you use websites and related Services offered by LemonB B.V., you may share personal data with us. We collect and use personal data that you, or your company, share with us directly. We will not use this personal data for purposes other than those described in this policy, unless you have given prior consent.
When you use our Services, we may collect the following data:
We generally process your personal data for the following purposes:
We collect your personal data on the basis of legitimate interests or your consent, which you can withdraw at any time.
We retain your personal data for as long as necessary to fulfil the purposes of this Privacy Policy. In general, we retain personal data from our website visitors for 24 months.
You have the right to access the information we process. If you wish to exercise this right, you can contact us directly. We will ensure you receive a copy of the data we process about you. We may need to verify your identity to fulfil your request. If you believe the information we process about you is incorrect, you can contact us to have it updated. You also have the right to object to the processing of your data. If you want us to delete your information, you can inform us at any time. You can contact us at any time regarding these requests. We will always respond in a timely manner, in accordance with the GDPR. If you are not satisfied with the response you receive, you can lodge a complaint with the relevant supervisory authority.
We will not share your information with others without your consent, unless necessary for the performance of the agreement you, on behalf of yourself or your organisation, have entered into with us, or unless required by law.
Depending on your choice in the cookie preferences, this specifically concerns the following parties:
| Vendor | Which data | Purpose | Legal basis | Outside the EEA |
|---|---|---|---|---|
| LinkedIn Ireland | browsing behaviour on tenderb.nl, IP address, browser data | advertising and conversion measurement | consent | Yes — basis to be determined |
| ActiveCampaign | name, email address, company name, job title, browsing behaviour, origin of your visit (campaign data) | email marketing and site tracking | consent | Yes — basis to be determined |
| IP address, browsing behaviour on tenderb.nl, browser and device data | visitor statistics (Google Analytics) and advertising with conversion measurement (Google Ads) | consent | Yes — basis to be determined | |
| Calendly | name, email address, chosen time slot | scheduling a demo appointment | performance of the agreement | Yes — basis to be determined |
| Stripe | browser data, IP address | fraud detection while scheduling an appointment, within the Calendly widget | legitimate interest (fraud prevention) | Yes — basis to be determined |
| Vercel | IP address, pages visited | hosting and visitor statistics | legitimate interest (hosting), consent (statistics) | Yes — basis to be determined |
| Supabase | website content, administrator login details | storage and management of the site | legitimate interest | No |
| Resend | name, email address, LinkedIn profile, motivation and CV when you apply | sending the application notice to TenderB and the confirmation email to you | legitimate interest (handling your application) | Yes — basis to be determined |
| Spotify | IP address, browser data | displaying the embedded podcast player on /podcasts | legitimate interest (providing the requested service) | Yes — basis to be determined |
| YouTube (Google) | IP address, browser data | displaying the embedded video on /podcasts, after you click play | legitimate interest (providing the requested service) | Yes — basis to be determined |
| CARTO | IP address | displaying map tiles on /, /security, /duurzaamheid and /tools/data-opslag | legitimate interest (displaying the page) | Yes — basis to be determined |
To fulfil the purposes described in this Privacy Policy, we may transfer your data outside the EEA. Where this is the case, we will take appropriate measures to ensure personal data is properly protected. For transfers to the United States, we rely on the relevant party's certification under the EU–US Data Privacy Framework, or on the standard contractual clauses adopted by the European Commission. The applicable basis per vendor is set out in the overview above. For other transfers, we may transfer your data to a country recognised by the European Commission as offering an adequate level of protection for Personal Data.
We measure how visitors use our website with Google Analytics and Vercel Analytics. Google Analytics places cookies to do this; Vercel Analytics does not — for that, we only see aggregated counts per page. Both measurements only take place after you have given consent for the Statistics category. We use this data to improve the website.
We use cookies and similar technologies. Necessary cookies are always active; cookies for statistics and marketing are only placed after you have given your consent.
A complete overview of all cookies, with the vendor, purpose, category, retention period and whether data is processed outside the EEA for each cookie, can be found in our cookie policy. You can change your choice at any time via the Cookie preferences link at the bottom of every page.
In addition, the IP address of your device may be stored in the log files of our web server. This is necessary to manage and secure our Services. We do not use your IP address to track your online behaviour.
We ensure your personal data is protected against loss or unlawful processing. Among other things, we have taken the following technical and organisational measures:
Our website may contain links to third-party websites. This Privacy Policy does not apply to such third-party websites. We cannot guarantee that these third parties handle your personal data safely and reliably. We recommend reading the privacy policies of these parties.
The /demo page has a Calendly scheduler embedded to book a demo. The /podcasts page has a Spotify podcast player embedded, which loads automatically as soon as you visit the page. The same page also contains YouTube videos, which only load once you click play. If you use these features, data is sent to Calendly, Spotify or YouTube respectively. That processing is subject to the relevant party's own privacy policy.
We also display CARTO map tiles on some pages (including /, /security, /duurzaamheid and /tools/data-opslag). These are images; nothing is stored on your device, but your IP address is sent to CARTO in order to retrieve the map tile.
