Last updated: 22 April 2026
1. Who we are
Attributions is the data controller for personal data processed via this website and the SaaS service Server Side Support.
- Company name: Attributions
- Address: Tijmhof 36, 4907 BE Oosterhout, the Netherlands
- Chamber of Commerce (KvK): 73595039
- Email: support@ga4support.nl
2. What data we process
2.1 As a customer of the SaaS service
- Contact details: name, email address, phone number
- Company details: company name, address, Chamber of Commerce (KvK) number, VAT number (for Business and Agency plans)
- Payment details: handled directly by Mollie; we only see whether a payment succeeded
- Technical data: domain, linked Google account, GTM container IDs, the IP of your VPS
- Communication: messages you send via email, WhatsApp or chat
- GA4 data via the Google Analytics Data API: only aggregate event counts per event name, based on a limited OAuth scope (
analytics.manage.users + analytics.readonly) that links our service account as a Viewer on your GA4 property. We do not store any user IDs, transaction amounts or session details.
2.2 As a visitor to serverside-support.com
- IP address (temporarily, for security and logging)
- Data about your visit (pages, referrer, browser, language) — if you have given consent via the cookie banner
- See the cookie statement for the cookies we place
2.3 During migration to our infrastructure
During a migration we are temporarily granted user access to your Google Tag Manager containers (web and server) in order to host them on our infrastructure. We do not process event payloads persistently; see Security & Compliance for technical details.
3. Why we process this data
We process personal data solely on the basis of one of the following GDPR legal grounds:
- Performance of the contract (Art. 6(1)(b) GDPR): to provide the SaaS service, to invoice and to offer support.
- Legal obligation (Art. 6(1)(c) GDPR): statutory retention obligations, tax and financial administration.
- Legitimate interest (Art. 6(1)(f) GDPR): securing our systems, logging, fraud prevention, and the technical maintenance of the website.
- Consent (Art. 6(1)(a) GDPR): for non-essential cookies (analytics, marketing) on this website.
4. Who has access to your data
We only share personal data with subprocessors that are necessary for the provision of the service. The full list, including location and role, is available on the Security & Compliance page. In summary:
- UpCloud (Amsterdam, NL) — hosting of customer VPSes
- Google Cloud (europe-west1, BE) — dashboard infrastructure and database
- Mollie (Amsterdam, NL) — payment processing
- Rompslomp (NL) — invoicing and administration
- Anthropic (US) — AI chat support, active only per session, without persistent storage
On request, we provide a DPA (Data Processing Agreement) that formalises the processing arrangements.
5. Retention periods
We do not retain personal data longer than necessary, and at most in accordance with statutory provisions:
| Data | Retention period |
|---|
| Invoices and administration | 7 years (statutory retention obligation, Art. 52 AWR) |
| Customer account after cancellation | As long as needed for remaining service delivery + 30 days |
| Technical logs (nginx, server) | 30 days |
| Support correspondence | 2 years after last contact |
| Cookies on the website | See cookie statement |
6. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access (Art. 15) — request which data we process about you
- Rectification (Art. 16) — have inaccurate or incomplete data corrected
- Erasure (Art. 17) — have data deleted (subject to conditions)
- Restriction (Art. 18) — have processing restricted
- Portability (Art. 20) — receive your data in a machine-readable format
- Objection (Art. 21) — object to processing based on legitimate interest
- Withdraw consent — for processing based on consent
Send your request to support@ga4support.nl. We respond within 30 days.
7. Filing a complaint
If you believe that we do not handle your personal data carefully, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Security
We take appropriate technical and organisational measures to protect personal data against loss or unlawful processing. Details are available on Security & Compliance.
9. Changes
We may amend this privacy statement when required by laws or regulations, or when our services change. The latest version can always be found on this page. In the event of significant changes, we inform existing customers by email.
10. Contact
For questions about privacy or this statement, please contact:
- Email: support@ga4support.nl
- Phone/WhatsApp: +31 6 25 11 82 13
- Post: Attributions, Tijmhof 36, 4907 BE Oosterhout, the Netherlands