Skip to content
Back to the Privacy Policy

Privacy Statement: Contacting the Municipality (Coosto)

This specific information should be read in addition to and in conjunction with the general information regarding the processing of personal data by the municipality of Moerdijk.

The Municipality of Moerdijk processes personal data in a careful and secure manner in accordance with applicable laws and regulations. The Municipality of Moerdijk’s privacy statement outlines the principles governing the municipality’s processing of personal data and provides information on how you can exercise your rights. In this document, we provide further details on the purposes and legal bases, as well as other relevant information regarding the processing of your personal data when you contact the municipality.

Due to new legislation or other developments, the municipality regularly updates its processes. These changes may also affect the processing of your personal data. It is therefore advisable to regularly consult the documents containing general and specific information about the processing of personal data by the municipality of Moerdijk. The date of the last update is indicated at the end of the document.

Coosto

The Municipality of Moerdijk uses the Coosto platform for social media monitoring, online customer service, and environmental analysis. In this privacy statement, we explain what personal data we process, why we do so, and what rights you have.

The person in charge

Coosto is the processor in this sense, and the governing bodies of the municipality of Moerdijk are each a data controller within the meaning of the General Data Protection Regulation (GDPR) for the processing operations carried out by or on behalf of the municipality. Our governing bodies are: 

  • the Mayor;
  • the Municipal Executive (College van B&W);
  • the City Council.

The Municipal Executive is the data controller for the personal data that the municipality processes when you contact it.

The municipality of Moerdijk has a Data Protection Officer (DPO). You can contact him or her at datalek@moerdijk.nl.

Why does the municipality of Moerdijk use Coosto?

Objective

Your personal data is processed so that the municipality can contact you. Coosto collects data to make public sources searchable for users, to help organizations discover the impact of their content, and to measure their earned media. In doing so, Coosto helps clients create better content and demonstrably improve their performance across all marketing objectives: from increased brand awareness to greater brand preference, customer loyalty, and online conversion.

‍Legally speaking, Coosto, as the data controller, relies on its legitimate interest in making the public internet more searchable and on its users’ consent to achieve the aforementioned purposes. ‍In addition, Coosto, as a data processor, processes personal data for the purpose of fulfilling its agreements with its customers.

Basis

Pursuant to Article 6(1)(f) of the GDPR, personal data may be lawfully processed if the processing is necessary to pursue the legitimate interests of the municipality. One of the municipality’s interests is to facilitate digital contact with citizens. This interest stems from the principles of proper service delivery established bythe National Ombudsman (NO)regarding digital contact between citizens and the government.

What personal data do we process?

Coosto can be used to process data that is publicly available on the internet and social media. This may include:

  • name or username;
  • profile photo;
  • public account information;
  • content of public posts;
  • location data, if it has been shared publicly;
  • the content of private messages you send directly to the municipality;
  • images, videos, attachments, and voice messages that are part of a message;
  • other personal data that a person has disclosed themselves in a message or shared directly with the municipality.

The municipality does not collect restricted or non-public information through Coosto. Social media data is obtained exclusively through official interfaces (APIs) provided by the relevant platforms.

On what legal basis do we process this data?

The municipality processes personal data based on its legitimate interest in order to:

  • to keep residents well informed;
  • respond to questions and comments on social media;
  • keep track of relevant developments in society;
  • to improve the quality of our communication and services.

When you contact the municipality directly via social media, we process the information you provide to us in order to handle your question or request.

How long do we retain this data?

The municipality does not retain personal data longer than necessary for the purpose for which it was collected. The Municipality of Moerdijk uses Coosto to monitor public online posts. Within Coosto, public posts are available by default for a maximum of one calendar year. For certain sources, this period may be extended to a maximum of five years if necessary for the municipality to carry out its communication tasks. For Facebook and Instagram posts, a maximum retention period of one calendar year always applies. Personal data is not retained longer than necessary for the purpose for which it was processed and in accordance with the municipality’s information management and archiving policy.

The retention periods depend on:

  • the purpose of the processing;
  • legal obligations;
  • the municipal information management and archiving policy.

Public posts remain available in Coosto as long as they are publicly accessible on the original platform and within Coosto's specified retention periods.

Do we share data with third parties?

To provide this service, the municipality uses Coosto B.V. as a data processor. The municipality has entered into a data processing agreement with Coosto that sets forth provisions regarding privacy, security, and the processing of personal data.

Coosto hosts data on secure servers within the European Union and uses carefully selected subprocessors.

The municipality does not disclose personal data to third parties, unless required to do so by law.

How is your data protected?

The municipality and Coosto take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or unlawful processing.

Coosto states that it operates in accordance with an ISO 27001-certified information security and privacy management system and applies the principle of privacy by design.

Use of Algorithms

Coosto assists the municipality in collecting, searching, and analyzing publicly available online information. The results are used as a resource for employees.

The municipality does not make decisions regarding individuals based solely on automated processing within Coosto. Coosto itself states that it does not use algorithms for automated decision-making or profiling of individuals.

Your Privacy Rights

You have the right to:

  • to access your personal data;
  • to have personal data corrected;
  • to have personal data deleted, to the extent permitted by law;
  • to object to the processing;
  • to submit a request to restrict processing.

Would you like to exercise these rights? If so, please contact the municipality of Moerdijk. You may also file a complaint with the Dutch Data Protection Authority.

Contact

If you have any questions that are not answered in this document or in the general privacy statement, or if you would like to contact the municipality for any other reason related to privacy or data protection, please call 14 0168 or submit your question via the contact form.

Why isn't the link to the contact form included here? Where is the resident supposed to look for it then?

Exercising Your Rights and Filing Complaints

As a resident or interested party in our municipality, you may exercise your rights with us. This means that you may request access to the personal data (and police records) that we process about you.

You may also submit a request to correct or delete your personal data, or to restrict its use.

Finally, if your consent is the legal basis for the processing of your personal data, you may withdraw your consent and object to our processing of your personal data.

You can submit these requests by clicking the button below after logging in with DigiD or eIDAS. We will notify you within one month regarding the action taken in response to your request. Your request may not be granted in all cases. Both the GDPR and the Wpg specify situations in which your right may be restricted.

Submit your request online

Date: October 16, 2026