Government Data Request Policy

Last edited: Oct 12, 2026

Purpose and scope

AZPR handles every request from a public authority for users' personal data under this policy.

• Who: AZPR, a Dutch eenmanszaak registered at the KvK under number 73026832. An eenmanszaak has no separate legal entity, so Kyrian Kroon, trading as AZPR, is the data controller.
• Data covered: all personal data AZPR holds, including data received from Meta through Facebook Login (name, Meta user ID, email address, profile picture) and customer data stored in AZPR's Shopify store.
• Requests covered: national security, intelligence, police, tax and other government requests, in any form.
  
  

Legality review

No data is shared until AZPR has checked that the request has a valid legal basis.

1. Confirm the requester's identity and authority through an official channel.
2. Check that the legal basis cited (Dutch or EU law, a court order) applies to AZPR and to the data requested.
3. If in doubt, get advice from a lawyer before responding.
4. Requests made only by phone or email, or that cite no legal basis, do not get any data.
   
   

Challenging unlawful requests

AZPR challenges any request that is unlawful, too broad, or lacks a valid legal basis.

• Ask the authority in writing to clarify or narrow the request.
• Use available legal remedies, such as an objection or court review, when a request appears unlawful.
• Tell the affected user about the request, unless the law forbids it.
  
  

Data minimisation

When a request is lawful, AZPR shares only the minimum data it legally requires.

• Share only the people, data fields and time period the request explicitly covers.
• Never share Meta access tokens, the app secret, or passwords.
• This follows the data minimisation principle in GDPR Art. 5(1)(c).
  
  

Documentation

AZPR logs every request, whether or not it shares any data, and keeps the log for at least five years.

Responsibility and review

Kyrian Kroon, trading as AZPR, owns this policy and handles every request personally. The policy is reviewed every year, or sooner if the law or AZPR's use of data changes. The next review is due on Oct 12, 2027.