Government & Law Enforcement
Data Requests

Buitenland Loket is committed to protecting the privacy of its users. We require all government and law enforcement requests for user data to follow applicable laws and due process.

Our commitment

Buitenland Loket has never created a backdoor or master key to any of our systems. We evaluate every data request individually and will challenge or reject any request that does not have a valid legal basis, is overly broad, or is otherwise inappropriate. We are committed to being transparent about the requests we receive and will publish a transparency report on a regular basis.

Data availability

Due to our privacy-by-design approach, the data we hold about users is minimal. The following overview describes what data may be available in response to a valid legal request, and what data we do not have access to.

Data we may hold

  • Display name or chosen nickname
  • Country of residence selection
  • User type (individual or business)
  • Installed dashlets and portal items
  • Selected app preferences (icon, theme)
  • Case details and email (if user created a case)
  • Business/organization details (business accounts only)

Data we do not have

  • Real names (users may use nicknames)
  • Home addresses or physical location history
  • Government ID numbers or passport details
  • GPS coordinates or precise location data
  • Content entered on external websites via webviews
  • Login credentials for third-party services
  • Browsing history or app usage patterns
  • Financial or payment information

Legal process requirements

All requests must comply with applicable laws in the requesting jurisdiction as well as UK and EU law. The following types of legal process are accepted.

Subpoena or equivalent

A valid subpoena or equivalent legal instrument issued by a court or authorized government body.

Court order

A court order demonstrating that the requested information is relevant and material to an ongoing investigation.

Search warrant

A search warrant issued based on a showing of probable cause, as required for content data in most jurisdictions.

Emergency requests

In emergency situations involving imminent danger of death or serious physical injury, we may provide information without a court order.

MLAT requests

International requests should be submitted through Mutual Legal Assistance Treaties (MLATs) or other applicable international cooperation frameworks.

Preservation requests

We accept valid preservation requests and will preserve the specified data for up to 90 days, renewable upon request.

Our review process

Every request goes through a structured internal review before any data is disclosed.

01

Receive

The request is received and logged. We verify the identity and authority of the requesting party.

02

Validate

Our legal team reviews the request for legal validity, proper jurisdiction, and appropriate scope.

03

Scope

We narrow the request to the minimum data necessary. We challenge overly broad or inappropriate requests.

04

Respond

If the request is valid, we provide only the specific data covered by the legal instrument. We notify users when legally permitted.

10 business days

Standard requests

We aim to respond to valid legal requests within 10 business days of receipt.

24 hours

Emergency requests

For requests involving imminent danger, we process and respond within 24 hours.

90 days

Preservation

Data preservation requests are honored for up to 90 days, renewable once.

Submit a data request

This form is for government and law enforcement agencies only. Requests from individuals regarding their own data should be submitted through the app or via privacy@buitenlandloket.nl.

All fields marked with * are required. Incomplete requests may be returned, which could delay processing.

By submitting this request, you confirm that you are an authorized representative of the agency or institution identified above, and that this request is made pursuant to valid legal authority in your jurisdiction.

Buitenland Loket reserves the right to challenge or reject any request that lacks a valid legal basis, is overly broad in scope, or does not comply with applicable UK or EU data protection law.