Privacy statement

Last updated: 21 July 2026.

1. Who is responsible

XXLKoerier is a Dutch brand for large, wide, heavy and oversized (XXL) transport. The actual transport is carried out by a verified courier or transport partner from our network. The controller responsible for the processing of your personal data is:

Zipload B.V. (brand: XXLKoerier)
Legal form: Besloten Vennootschap (B.V.) under Dutch law
Jan van Krimpenweg 73
2031 CH Haarlem, the Netherlands
Phone: +31 6 1508 1713
Email: info@zipload24.com
Chamber of Commerce (KvK): 42078890 · VAT number: NL869609075B01

Data Protection Officer

We have not appointed a Data Protection Officer (DPO), because our organisation does not meet the criteria of Article 37 GDPR (we are not a public authority, large-scale systematic monitoring is not our core activity, and we do not carry out large-scale processing of special categories of personal data). For all privacy-related questions you can contact us at info@zipload24.com. We respond to your request within 30 days at the latest.

2. Which personal data we collect

Depending on how you use our website, we may collect and process the following personal data:

• Contact details you provide yourself: name, company name, email address and phone number.
• Request details: pick-up and delivery address, dimensions, weight, preferred time, required equipment (for example a tail lift or pallet truck) and a description of your shipment.
• Communication: messages you send us by email, via the contact form or via WhatsApp.
• Technical access data of your visit: IP address, date and time, requested URL, referrer URL, browser type/user-agent and the amount of data transferred (server logs).

3. Purposes of the processing

• Handling your request and preparing a price indication or quote.
• Communicating about the request or the performance of the transport.
• Matching your request with a suitable courier or transport partner.
• Complying with legal obligations (for example our financial records).

4. Legal basis

We process your personal data on the following legal grounds under the GDPR:

• Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR) — to handle your request and carry out a transport order.
• Legitimate interest (Article 6(1)(f) GDPR) — the secure and stable operation of our website, effective communication and the handling of your request. We always weigh your privacy interests.
• Legal obligation (Article 6(1)(c) GDPR) — for example the retention of financial data for tax purposes.
• Consent (Article 6(1)(a) GDPR) — where we explicitly ask for it; you can withdraw consent at any time.

5. Sharing with third parties and processors

We only share your personal data where this is necessary for our service or where we are legally obliged to do so. We never sell your personal data. The following parties may process data on our behalf or receive data to carry out the service:

• Couriers and transport partners — to carry out your transport order we share your pick-up and delivery address, contact details and relevant information about the load with the courier who performs the job. This is necessary for the performance of the contract.
• mijnhosting.nl (hosting) — our website and the contact-form script are hosted with mijnhosting.nl on servers within the EU (the Netherlands). They process server logs and handle the delivery of contact-form emails. A data processing agreement under Article 28 GDPR is in place.
• Google Fonts (Google Ireland Limited / Google LLC) — our website loads web fonts from Google servers (fonts.googleapis.com / fonts.gstatic.com). When the fonts load, your IP address is transmitted to Google; no cookies are set by the fonts. Google LLC is based in the United States; transfers take place on the basis of the EU-US Data Privacy Framework and the Standard Contractual Clauses. More information: Google Privacy Policy.
• WhatsApp (WhatsApp Ireland Limited / Meta) — if you contact us via the WhatsApp button, your message and phone number are processed by Meta under their own privacy terms. We only use WhatsApp when you take the initiative yourself or when it is necessary for an ongoing request. We recommend not sending particularly sensitive data via WhatsApp.

This website does not use analytics tools, advertising networks, social-media pixels or cross-site tracking. In exceptional cases we may also share data with a bookkeeper/accountant for our financial administration, or with government authorities where we are legally obliged to do so.

6. Retention periods

We do not retain your personal data for longer than is necessary for the purposes for which it is processed:

• Requests without a resulting order — deleted once they are no longer needed for follow-up.
• Completed orders and financial data — retained in accordance with the statutory retention period (in general 7 years under Dutch tax law).
• Server logs — kept short-term for technical processing and abuse prevention, then deleted or anonymised.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent. To exercise your rights, send an email to info@zipload24.com; we respond within 30 days.

You also have the right to lodge a complaint with the supervisory authority. As the controller is established in the Netherlands, the competent lead authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl. You may also contact the supervisory authority in your own EU country of residence.

8. Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised processing. All communication between your browser and our website is encrypted via SSL/TLS (HTTPS). Only authorised staff have access to personal data, and only insofar as this is necessary for their role.

9. Cookies

This website does not use tracking cookies, analytics cookies or advertising networks, and does not build profiles of visitors. Only technically necessary functionality is used to operate the site. Web fonts are loaded from Google Fonts (see section 5), which transmits your IP address to Google but does not set cookies.

10. Liability during transport

Transport carried out via XXLKoerier takes place under the carrier's liability provided by the CMR Convention (the Convention on the Contract for the International Carriage of Goods by Road). The CMR Convention is an international treaty and is not an insurance product. For higher-value goods, the conditions are discussed individually per request.

11. Changes

We may amend this privacy statement. The most recent version is always available on this page, with the date of the last update shown at the top.

Controller: Zipload B.V. (brand XXLKoerier) — Besloten Vennootschap (B.V.) under Dutch law — KvK 42078890 · VAT NL869609075B01. Last updated: 21 July 2026.