Translation - if you notice errors, email info@zeres.nl
Privacy and cookie statement
Zeres B.V., ERE services. For business and private customers and for visitors to our website. Version 6 September 2026.
1. What does this statement cover?
This statement applies to everyone whose personal data Zeres B.V. processes: business customers (companies, institutions and owners' associations), private customers, contact persons at partners and suppliers, and visitors to our website.
Our service consists of registering the electricity you supply to transport (your charging electricity) in the Register Energy for Transport (REV) of the Dutch Emissions Authority (NEa), and registering, trading and paying out to you the resulting Emission Reduction Units (EREs) on your behalf. To do so we process personal data.
Part A explains how we handle your personal data. Part B explains which cookies we use on our website and how you give or withdraw your consent for them.
2. Who is responsible for your data?
Zeres B.V. is the controller within the meaning of the General Data Protection Regulation (GDPR).
Zeres B.V.
- Head office: Zeeburgerdijk 490, 1095 AL Amsterdam, the Netherlands
- Operations: Boeing Avenue 1, 1119 PC Schiphol-Rijk, the Netherlands
- Chamber of Commerce 99395142, VAT NL868970591B01
Contact
- +31 85 060 0470 (general)
- +31 85 060 0641 (helpdesk)
- info@zeres.nl
- helpdesk@zeres.nl
- www.zeres.nl
We have not appointed a data protection officer. Questions about this statement can be sent to info@zeres.nl.
Part A: Privacy statement
3. Which personal data do we process?
Business customers. Data about your company is not personal data in itself, but data about your contact person and authorised signatory is. For sole traders, partnerships and general partnerships the company data can also be traced back to a person. We process:
- name, position, business email address and telephone number of your contact person and authorised signatory;
- company name, registered and billing address, Chamber of Commerce number and VAT number;
- contract and administrative data: contract number, invoices and bank account number;
- connection and charging data: EAN code(s), address of the connection, charge point ID and location data, quarter-hourly metering and consumption data of the main meter and the gross production meter, kWh charging volume, data from the Connection and Transport Agreement and, where applicable, guarantees of origin;
- register data: entries, ERE transactions and audit findings in the NEa's REV;
- data from our correspondence and from the dashboard;
- website data: IP address, browser data, cookie data and browsing behaviour.
Private customers. We process:
- name, address, city, email address and telephone number;
- bank account number and billing details;
- EAN code(s) of your connection, address of the charging location, charge point ID, quarter-hourly metering and consumption data and your kWh charging volume;
- register data: entries and ERE transactions in the NEa's REV;
- data from our correspondence and from the dashboard;
- website data: IP address, browser data, cookie data and browsing behaviour.
We do not process special categories of personal data or citizen service numbers.
4. Where does your data come from?
We receive your data from the following sources:
- from you, on registration, in the authorisation and power of attorney, in the agreement and through the dashboard;
- from your energy supplier, insofar as you have given an authorisation for this: your connection and contract data, the applicable supply agreement and the (historical) metering and consumption data of your connection;
- from the grid operator and the metering company: quarter-hourly metering data of the main meter and the gross production meter, data about the connection and the metering installation and a copy of the Connection and Transport Agreement;
- from the operator or supplier of your charge point, if your charging sessions are read out automatically;
- from the Dutch Emissions Authority, from the REV and, with your consent, from the Central Connections Register;
- from a referring partner or intermediary, if you registered with us through that party.
This data is requested on the basis of the authorisation and power of attorney you have given to Zeres.
5. What do we use your data for and on which legal basis?
| Purpose | Legal basis |
|---|---|
| Onboarding, assessing and entering into the agreement and the authorisation | Performance of a contract (art. 6(1)(b)) and legitimate interest for business contact persons (point f) |
| Reading out and calculating your charging volume and registering it in the NEa's REV | Performance of a contract (point b) and legal obligation (point c) |
| Verification and the mandatory annual audit by the registration verifier | Legal obligation (point c) |
| Registration, management, sale and transfer of EREs | Performance of a contract (point b) |
| Payout, invoicing and financial and tax administration | Performance of a contract (point b) and legal obligation (point c) |
| Customer service, communication and the dashboard | Performance of a contract (point b) |
| Security, fraud prevention and improvement of our website and services | Legitimate interest (point f) |
| Analysis of the use of our website | Consent (point a), see part B |
| Marketing communication and placing marketing cookies | Consent (point a) |
6. Who do we share your data with?
We only provide your data to third parties insofar as this is necessary for the performance of our services or to comply with a legal obligation. This concerns:
- the Dutch Emissions Authority (NEa), for the entry and registration in the REV;
- NORMEC, the registration verifier appointed by Zeres, for the verification and the annual audit;
- the grid operator and the metering company of your connection;
- buyers, brokers and purchasers of EREs, insofar as necessary for the sale, transfer, verification or administrative settlement of an ERE transaction;
- our advisers: Krachtwerk for compliance and Berghoef Accountants for accountancy and tax matters;
- our IT, hosting and software suppliers;
- our bank and payment service providers;
- competent authorities, where a legal obligation exists.
If you registered through a partner or intermediary, that party may receive an overview of the participants affiliated with it. With parties that process data solely on our behalf we conclude data processing agreements in accordance with article 28 GDPR. We do not sell your personal data and do not use it for third-party purposes.
7. Transfers outside the EEA
Your data is in principle processed within the European Economic Area. If data is nevertheless processed outside the EEA, for example by a software supplier, we ensure appropriate safeguards in accordance with chapter V GDPR, such as an adequacy decision of the European Commission or the Standard Contractual Clauses.
8. How long do we keep your data?
We do not keep your data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it longer.
| Category | Retention period |
|---|---|
| Registration, metering and verification data in the context of the REV | 5 years, based on the retention obligation in the energy for transport regulations |
| Invoices, payouts and financial administration | 7 years, based on the tax retention obligation |
| Agreement, authorisation and power of attorney | For the duration of the agreement and 5 years thereafter |
| Contact details and correspondence | Up to 2 years after the end of the customer relationship |
| Data processed on the basis of consent, such as marketing | Until you withdraw your consent |
| Cookies and website data | See the retention periods per cookie in part B |
9. How do we protect your data?
We take appropriate technical and organisational measures to protect your data against loss and unlawful processing. These include:
- encrypted connections (SSL/TLS);
- access restriction based on authorisation, with passwords of at least 8 characters including non-alphanumeric characters;
- two-factor authentication where appropriate;
- logging and monitoring of access to systems;
- periodic security updates and evaluation of our measures.
10. Your rights
You have the right to:
- access your personal data;
- have incorrect data corrected or completed;
- have your data erased;
- have the processing restricted;
- object to processing based on a legitimate interest;
- transfer your data (data portability);
- withdraw a given consent at any time, without affecting the lawfulness of the processing before that.
You can submit a request via info@zeres.nl. We respond within one month. To prevent misuse we may ask you to identify yourself. Please note that we cannot comply with an erasure request insofar as we must keep the data on the basis of a legal retention obligation.
11. Automated decision-making
Your charging volume is read out and calculated automatically. We do not take decisions based solely on automated processing that have legal effects for you or similarly significantly affect you, and we do not apply profiling.
Part B: Cookie statement
12. What are cookies?
Cookies are small text files that are placed on your computer, tablet or phone when you visit www.zeres.nl and are read back on a subsequent visit. We also use similar techniques, such as pixels, scripts and local storage in your browser. Where this statement refers to "cookies", those techniques are included.
13. Which cookies do we use?
| Type of cookie | Purpose, consent and retention period |
|---|---|
| Necessary and functional cookies | Make the website and the customer dashboard work: remembering your session, logging in, language and form settings, distributing visitors across servers and protecting against misuse. No consent is required; without these cookies the website does not work. Retention period: for the duration of your session up to a maximum of 12 months. |
| Cookie for your cookie choice | Remembers the choice you made in the cookie banner, so that we do not have to ask you again on every visit. No consent required. Retention period: a maximum of 12 months, after which we ask for your choice again. |
| Analytical cookies | Measure how visitors use our website, which pages are viewed and where visitors drop off, so that we can improve the site. We only place these cookies with your consent. Retention period: a maximum of 24 months. |
| Marketing and tracking cookies | Follow your browsing behaviour within and outside our website, measure the effect of advertisements and make it possible to show you relevant advertisements. These cookies are placed by third parties, who may also use your data for their own purposes. We only place these cookies with your consent. Retention period: a maximum of 24 months. |
In practice www.zeres.nl currently places: session cookies for form protection (CSRF) and the admin login, Cloudflare Turnstile against spam on the contact and registration forms (necessary), Google Analytics for anonymous visitor statistics via Google Consent Mode v2 (analytical, only after consent) and conversion measurement of registrations (marketing, only after consent).
14. How do you give consent?
On your first visit to www.zeres.nl a cookie banner appears. It shows which types of cookies we want to place and for what purpose. You can:
- accept all cookies; or
- accept only the necessary cookies; or
- indicate per category which cookies you allow.
We only place analytical and marketing cookies after you have given consent for them. As long as you have not made a choice, we only place necessary and functional cookies. Refusing is as easy as accepting and has no consequences for your access to the website or the customer dashboard. Clicking through or scrolling on without making a choice does not count as consent.
15. Changing or withdrawing your choice
You can change or withdraw your consent at any time via the "Cookie settings" link at the bottom of every page of our website. Your new choice applies from that moment; cookies that were placed earlier can be deleted yourself via your browser settings. There you can also set that you no longer wish to receive cookies. Please note that the website may then no longer work fully.
We ask for your consent again when the retention period of your cookie choice expires or when we want to start using new cookies.
16. Third-party cookies
Some cookies are placed by third parties, such as providers of statistics and advertising services and of embedded content such as videos and maps. The processing of data by those parties is governed by their own privacy policy. We have no control over that. We only place these cookies after your consent and, where we act as controller, we conclude the required agreements with these parties.
17. Personal data and cookies
With analytical and marketing cookies we process data that may be personal data, such as your IP address, your device and browser data and your click and browsing behaviour. Part A of this statement applies to that data: you have the same rights, and you can always withdraw your consent. We do not use cookie data to take automated decisions about you.
Complaints and changes
18. Complaints
If you have a complaint about the way we handle your data, please contact us first via info@zeres.nl; we are happy to resolve it together with you. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl.
19. Changes
We may change this privacy and cookie statement, for example if the regulations, our services or the use of cookies change. The most recent version is always available on www.zeres.nl. In the event of significant changes we will inform you actively and, where necessary, ask for your consent again.
Version 6 September 2026. This statement belongs with the general terms and conditions of supply of Zeres B.V., the ERE Services Agreement and the Authorisation and power of attorney for the ERE registration service provider.