This translation is provided for information only. Only the Dutch version is legally binding.
WebOké Privacy Statement
Last updated: November 8, 2026. This version applies from November 1, 2026.
Who is responsible for the processing?
WebaWere Internet Solutions B.V. (trading under the name WebOké), established at Hoogstraat 13, 1391 BP Abcoude, is responsible for the processing of personal data as set out in this privacy statement.
Contact details:
- Website: https://www.weboke.nl
- Address: Hoogstraat 13, 1391 BP Abcoude
- E-mail: support@weboke.nl
- Chamber of Commerce (KvK) number: 24366368
Personal data we process
WebaWere Internet Solutions B.V. processes your personal data because you use our services and/or because you provide this data to us yourself. Below is an overview of the personal data we process:
- First name and surname
- Company name (if applicable)
- Address details
- E-mail address
- Telephone number
- Bank account number (IBAN)
- Chamber of Commerce (KvK) number and VAT number (business customers)
- IP address
- Data about your activities on our website
- Other personal data that you actively provide, for example in correspondence and support tickets
- The content of your conversations with our AI assistant and via WhatsApp, including attachments
Special and/or sensitive personal data
Our website and/or service does not intend to collect data about website visitors who are under 16 years of age, unless they have permission from their parents or guardian. However, we cannot check whether a visitor is over 16. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without that consent, please contact us at support@weboke.nl and we will delete this information.
For what purpose and on what legal basis we process personal data
| Purpose | Legal basis |
|---|---|
| Your account, providing hosting, domains and related services, and handling your payment | Performance of the contract |
| Support via e-mail, tickets, WhatsApp and the AI assistant | Performance of the contract; for visitors without an account, our legitimate interest in answering questions |
| Informing you about changes to our services and terms | Performance of the contract |
| Fraud prevention and security, including logs | Legitimate interest |
| Complying with legal obligations, such as the statutory tax retention obligation | Legal obligation |
| Newsletters, and functional and advertising cookies | Consent |
| The free courses and learning tools: signing up, progress, practice zone, final exam, certificate, My courses and the DNS analysis | Performance of the service you request yourself (agreement) |
| The public verification page of your certificate | Performance of the service: the certificate must be verifiable. You choose the name yourself and can delete the certificate |
| Preventing abuse of the practice zones, the exam and the DNS analysis | Legitimate interest |
AI assistant
Our AI assistant in My WebOké and on www.weboke.nl works with a language model from Mistral AI SAS in France. Your messages and attachments are sent to Mistral. Account data is only sent there if the owner of the account has given their approval. The processing remains within the EU, and Mistral does not store your messages. The AI does not carry out anything without your consent. Do not put passwords or codes in the chat. This also applies if you use the assistant without an account. More information can be found in Annex 2 to our general terms and conditions.
The WebOké app
The WebOké app for Android and iOS opens the same customer portal as the website, so everything in this privacy statement also applies to the app. In addition, the app processes the data below. We do this to perform our agreement with you; push notifications only with your permission.
- Push notifications: only if you allow notifications, we store a push token for your device, together with the platform (Android or iOS), the app version, the language and when the app was last used. We send notifications via Google Firebase Cloud Messaging. The subject of the notification (for example a new invoice or a reply to your ticket) and a link to the portal then pass through Google; on an iPhone also through Apple.
- Signing in: you sign in through your phone's browser. The app then receives a one-time code that is valid for 2 minutes. We record the IP address with this code to prevent misuse.
- App lock: Face ID, Touch ID or your fingerprint is handled entirely on your device. WebOké receives no biometric data.
- Voice input in the AI chat: only when you use it does the app ask for access to the microphone. The recording goes to Mistral AI in the EU to turn it into text and is not stored; only the text becomes part of the conversation.
- No tracking: the app contains no advertisements, no advertising IDs, no analytics or crash reporting software, no cookie banner and no marketing tags. Payments open in your browser at Mollie; the app does not see your card or bank details.
Retention: the push token is kept as long as the app on that device is linked to your account. It is removed when you sign out in the app, when you delete your account or when Google reports that the token is no longer valid. We keep at most 20 devices per account. Sign-in codes are deleted after one day.
Sign out in the app to unlink your device, or turn off notifications for the WebOké app in your phone's settings. You can delete your account via Account details > “Delete all my data” or via https://www.weboke.nl/account-verwijderen.
Free courses and learning tools
You can use our free courses, such as the DNS course, and the accompanying learning tools (the practice zone, the final exam with certificate, My courses and the DNS analysis) without a customer account. You can read the lessons without signing up. Which lessons you've read and your quiz scores are then not stored by us, but only in your own browser (local storage).
For the practice zone, the final exam, the certificate and the DNS analysis you sign up with your email address. You'll then receive a login link by email. If your email address belongs to a WebOké account, we link it to that account. We then process:
- Signing up: your email address, your language and when you were last active. A login link is valid for 15 minutes and works once. You stay logged in for 30 days via the cookie wbcursist.
- Progress: if you're logged in, we also store which lessons you've read, your quiz scores and the assignments you've completed successfully, so your progress is correct on every device.
- Practice zone and exam zone: the DNS records you set yourself in your practice domain, the result of your assignments and a log of your changes.
- Final exam: your answers, your score per section, your result and how long you took. During the exam we set the cookie dnsexamen (at most 100 minutes), so the exam can only continue in your browser.
- Certificate: if you pass, you fill in yourself the name that appears on the certificate. That name, along with the date, your score and the verification code, is shown on a public verification page, so anyone with the code can see that the certificate is genuine. Search engines do not index this page.
- My courses: you'll receive a personal link by email to your My courses page, with your progress, your assignments, your exam result and your certificate. Whoever has this link can view and delete your course data, so don't share it. You can request a new link with your email address; the previous link will then stop working.
- DNS analysis: the domain name you have checked and the result. The result is available via a unique link; whoever has that link can view the result.
- Preventing abuse: we store an encrypted derivative of your IP address (no readable IP address) and use it to count how often something happens from the same address or network.
We do this to provide the free courses and learning tools you request yourself, and to prevent abuse. We only use your email address for your login links, your personal link, your certificate and the reminder before we delete your data; not for newsletters or advertising. The data stays on our own servers and we don't share it with other parties.
On My courses you can delete your certificate, a course or all your data yourself. If you don't have a certificate and haven't been active for 60 days (not logged in and your personal link not used), we automatically delete your course data; you'll get an email a week in advance. We keep a certificate until you delete it yourself. A deleted certificate can no longer be verified afterwards. If we revoke a certificate due to abuse, or you revoke it yourself, the verification page will show "revoked"; after that the 60-day period applies.
How long we keep personal data
| Data | Retention period |
|---|---|
| Account and profile, including your approval for the AI assistant and AI actions carried out | For as long as your account exists. We automatically delete an account without active products after 1 year; you will receive an e-mail 30 days beforehand. You can also delete your account yourself in Account details. |
| Invoices, payments, credit notes, credit balance and the activity log | For as long as your account exists. After deletion, 7 years after the end of the financial year (statutory tax retention obligation), thereafter without name and address. |
| Tickets and sent e-mails | For as long as your account exists, after 7 years without name and address. If you delete your account, they are removed immediately. |
| Technical logs and security logs, including IP addresses | Maximum of 6 months |
| Shopping baskets and visitor data (IP address, origin) | Maximum of 6 months |
| Log of commands sent to domain registries | Maximum of 2 years |
| Log of API tokens (without content) | 90 days |
| Payment links via SMS and WhatsApp | Expire after 90 days |
| Conversations with the AI assistant | 12 months after the last message; a deleted conversation for a further 30 days; visitors without an account 30 days |
| Free courses: your email address, progress, assignments, exam attempts and results | Until you delete them yourself on My courses. Without a certificate, we delete them automatically after 60 days of inactivity; you'll get an email 7 days in advance. |
| Certificates (name, date, score, verification code) | Until you delete the certificate yourself on My courses |
| Login links and staying logged in for the courses | A login link is valid for 15 minutes and deleted after 7 days; staying logged in for 30 days |
| Practice zone, exam zone and the log of your changes | Practice zone 14 days after your last change; exam zone as soon as you submit the exam, otherwise after 24 hours; log 30 days |
| DNS analysis (domain name, result) and its log | 48 hours after the last measurement |
| Counters against abuse of the courses and learning tools (derivative of your IP address) | 24 hours |
| Backups | Maximum of 180 days |
What you store in your hosting package, such as your website, e-mail and files, we process on your instructions. Our data processing agreement (Annex 1 to the general terms and conditions) applies to this.
Sharing personal data with third parties
We only share your data with third parties when this is necessary for our services or when we are legally obliged to do so. With companies that process your data on our behalf, we conclude a data processing agreement to ensure the same level of security and confidentiality of your data.
Parties we work with
| Party | Purpose | Location |
|---|---|---|
| NorthC Datacenters B.V. | Colocation of servers | Netherlands |
| SIDN B.V. | Registration of .nl domains | Netherlands |
| EURid vzw | Registration of .eu domains | Belgium |
| DNS Belgium vzw | Registration of .be domains | Belgium |
| Key-Systems GmbH (RRPproxy) | Registration of other domains | Germany |
| Mollie B.V. | Payment processing | Netherlands |
| Mistral AI SAS | AI assistant | France |
| OpenAI Ireland Ltd. | AI Builder | Ireland / United States |
| Twilio | SMS and WhatsApp | United States |
| WhatsApp Ireland Ltd. (Meta) | Sending WhatsApp messages (support conversations and payment links) | Ireland / United States |
| Cloudflare, Inc. | Protection against bots and abuse | United States |
| Signing in with your Google account; measuring advertising (only with consent) | United States | |
| Google Ireland Ltd. (Firebase Cloud Messaging) | Push notifications in the WebOké app | Ireland / United States |
| Meta Platforms Ireland Ltd. | Facebook pixel (only with consent) | Ireland / United States |
| CookieYes Limited | Cookie banner and recording your cookie preferences | United Kingdom |
A number of parties process data outside the European Union. In that case we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.
Cookies
WebaWere Internet Solutions B.V. uses cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone on your first visit to this website.
Necessary cookies
Necessary cookies are required to enable the basic functions of this site, such as logging in securely or adjusting your cookie preferences. These cookies do not store any personally identifiable data.
| Cookie | Duration | Description |
|---|---|---|
| weboke_sessie | Session | Keeps you logged in to My WebOké and allows the site to work securely. |
| weboke_basket | 14 days | Remembers what is in your shopping basket. |
| _cfuvid | Session | Cloudflare sets this cookie to recognise users and provide a consistent experience. |
| cookieyes-consent | 1 year | CookieYes sets this cookie to remember your cookie preferences on subsequent visits. |
| wbcursist | 30 days | Keeps you logged in for the free courses and learning tools (practice zone, exam, My courses, DNS analysis). Contains only a random key. |
| dnsexamen | At most 100 minutes | Belongs to your ongoing exam, so the exam can only continue in your browser. |
Functional cookies
Functional cookies help to perform certain functions such as sharing content on social media, collecting feedback and other third-party functions.
| Cookie | Duration | Description |
|---|---|---|
| g_state | 6 months | Google cookie for sign-in functionality. |
Advertising cookies
Advertising cookies are used to show visitors personalised advertisements based on previously visited pages and to analyse the effectiveness of advertising campaigns.
| Cookie | Duration | Description |
|---|---|---|
| _gcl_au | 3 months | Google Tag Manager sets this cookie to measure advertising effectiveness. |
| _fbp | 3 months | Facebook sets this cookie to store and track interactions. |
| test_cookie | 15 minutes | DoubleClick (Google) sets this cookie to check whether your browser supports cookies. |
Managing cookie preferences
On your first visit to our website, we ask for your consent to place functional and advertising cookies. Necessary cookies are always placed because they are essential for the website to function.
You can change your cookie settings at any time via the cookie banner on our website. In addition, you can block or delete cookies via your browser settings.
How we secure personal data
WebaWere Internet Solutions B.V. takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. Our measures include, among other things:
- Encrypted connections (TLS/SSL)
- Two-factor authentication for access to systems
- Firewalls and malware detection
- Physical security of the data centre
- Regular security updates
- Duty of confidentiality for employees
If you feel that your data is nevertheless not properly secured or there are indications of misuse, please contact us at support@weboke.nl.
Accessing, correcting or deleting data
You have the right to access, correct or delete your personal data. In addition, you have the right to withdraw any consent you have given for the data processing, to object to the processing of your personal data and to have your data transferred (data portability).
In Account details you can change your details, download all your data and invoices with “Download all my data”, and delete your account if nothing is outstanding any more. For other requests, e-mail support@weboke.nl. We may ask you to demonstrate that the request comes from you. We will respond as quickly as possible, but in any case within four weeks.
For the free courses and learning tools, you can view and delete your data yourself on My courses: https://www.weboke.mt/courses/my-courses
Submitting a complaint
We are happy to help you if you have a complaint about the processing of your personal data. Please contact us at support@weboke.nl.
If we are unable to resolve the matter together, you also have the right under the GDPR to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl
Changes
We may amend this privacy statement from time to time. You can always find the most up-to-date version on our website. In the event of important changes, we will inform you by e-mail.