Privacy Policy

Last updated: May 15, 2026

This English text is a translation. In case of any discrepancy, the Dutch version prevails.

1. Who we are — data controller

The data controller (GDPR Article 4(7)) for the data processed via this platform is the operator of Registro Bonaire.

Provider: Registro Bonaire is a trade name of F.A.S.T rental Bonaire B.V., established on Bonaire (Caribbean Netherlands). Full company details — registered address and KvK (Chamber of Commerce) number — are listed on About us. The data controller can be reached at info@registrobonaire.com or via our contact page.

2. What data we process

We only process what is needed to deliver the service:

• Account: email address, password (hashed), CRIB number, optional phone number
• Vehicle: license plate, VIN, vehicle type, color, photos
• Transactions: Stripe payment IDs, amounts, currency, timestamps
• Technical: IP address (for rate limiting), Cloudflare Turnstile token (bot protection), session cookie, append-only audit log

3. Purposes

We use this data solely for:

• Maintaining the vehicle register and the ownership history
• Carrying out ownership transfers and generating proof PDFs
• Fraud and abuse prevention
• Processing payments via Stripe

4. Legal basis

• Performance of the contract (GDPR Article 6(1)(b)) — for the account, vehicle registration, transfers and payments
• Legitimate interest (GDPR Article 6(1)(f)) — for rate limiting, fraud detection and maintaining the audit log
• For residents of Bonaire, the BES Personal Data Protection Act (Wet bescherming persoonsgegevens BES) also applies.

5. Retention periods

• Account data: as long as the account is active
• Transaction and payment data: 7 years (Dutch tax law)
• Audit log: indefinitely — the audit log is immutable by design because it proves the chain of ownership transfers
• Vehicle photos: until the vehicle is removed from the register

6. Who we share with

We only share what is necessary to deliver the service, with specialized processors (sub-processors):

We never sell data and we do not use analytics or marketing trackers. A data processing agreement has been (or is being) concluded with every processor.

7. Your rights

You have the right to:

• Access your data
• Correction of inaccurate data
• Erasure of your account and data — with one exception: the audit log of ownership transfers is immutable by design and can only be anonymized, not deleted, because deletion would break the chain of evidence for other parties
• Data portability — you can request your account and vehicle data in a commonly used format
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, NL) or the BES data protection authority (College bescherming persoonsgegevens, BES)

Requests: email info@registrobonaire.com.

8. International transfers

Our users live predominantly on Bonaire (BES). Our database and file storage (Supabase) are located in the EU (Frankfurt). Some of our processors — Vercel, Stripe, Resend and Cloudflare — are established in the United States, which means certain data is processed outside the European Economic Area (EEA). For these transfers we rely on appropriate safeguards: the Standard Contractual Clauses of the European Commission and, where applicable, the EU–US Data Privacy Framework. Transfers between BES and the EU take place in accordance with Article 13 of the BES Personal Data Protection Act (Wet bescherming persoonsgegevens BES).

Not a government register. This is a commercial service and not a replacement for the official license plate, ownership or vehicle register of Bonaire (KPCN/RDW/BCN). The data and proof documents on this platform have informational value between parties that use the service — no independent legal evidentiary value — until formal government recognition has been obtained.