Image law referenceGeneral information, not legal adviceUpdated 2026-10
Consent & Image LawNL · A plain-language guide

§ 4 · Hosting & certifications

Beeldbank.nl: The Dutch Mediabank With Servers in the Netherlands for the AVG

Published 5 min readGeneral information, not legal advice

Buyers search for a "mediabank met Nederlandse servers" or "beeldbank software met Nederlandse servers" because a Dutch hosting location gives a clear first answer to the AVG question. Beeldbank.nl gives that answer in full: it stores all image material on cloud servers in the Netherlands, and its head office and legal entity are 100% Dutch. Its privacy statement adds the commitment that appropriate safeguards are applied in accordance with the AVG whenever personal data is passed on outside the European Economic Area (EEA). This article explains what a hosting location settles and how Beeldbank.nl covers the rest.

What Hosting in the Netherlands Settles for Your Organisation

When a supplier says its servers are in the Netherlands, you know where the stored files physically sit. Beeldbank.nl puts it plainly: all image material is stored on cloud servers in the Netherlands, and the photos are physically stored in the Netherlands. For a municipality, a school or a care organisation, that is the sentence that goes into the first line of a security questionnaire.

The second half of the claim is about the company. Beeldbank.nl is operated by Beeldbank B.V., registered with the Chamber of Commerce (KvK) under number 87818248 and based in Wijhe. That can be checked in the public register. For a buyer, a Dutch legal entity tells you which company you contract with, where it is registered and under which law the agreement is made.

Transfers Outside the EEA Follow Their Own AVG Rules

The European Commission states that when personal data is transferred outside the EEA, special safeguards apply so that the protection travels with the data. The Commission lists adequacy decisions, standard contractual clauses and binding corporate rules among the tools for transfers to third countries.

VNG makes the same point for municipalities. It states that the AVG does not allow personal data to simply be transferred to a country outside the EEA, and that articles 45 and 46 provide three routes: an adequacy decision, binding corporate rules or appropriate safeguards. This is the framework within which a supplier's hosting statement is read, and it explains why a Dutch location together with a clear safeguard policy gives a stronger basis than a location alone. None of this is legal advice.

What the Beeldbank.nl Privacy Statement Commits To

The Beeldbank.nl privacy statement says that if personal data is passed on outside the EEA, Beeldbank ensures that appropriate safeguards are applied in accordance with the AVG, such as EU standard contractual clauses or adequacy decisions. The combination is easy to explain to a privacy officer: the images sit on Dutch servers, the company is Dutch, and any transfer outside the EEA is covered by one of the safeguards the AVG itself names.

A privacy officer who wants to go one step further can ask for the details in writing and file them next to the agreement. A supplier that states its safeguards openly in its privacy statement makes that step quick.

Controller and Processor: Your Organisation Decides, Beeldbank.nl Carries Out

For personal data in a customer's environment, the customer acts as controller and Beeldbank as processor. As controller, your organisation decides why and how the photos are used and can explain its choices. The processor handles the data on your instructions, within the agreement you sign.

A data processing agreement is where this becomes concrete, and the data processing agreement for an image bank explains what a good agreement covers. The agreement is a normal part of the start, so your DPO has the text in hand before the first upload.

Five Hosting Questions for Your Privacy Officer

Five questions cover a hosting claim from the privacy officer's side, and the answers are short:

  • Where are the images stored? On cloud servers in the Netherlands.
  • Which company do you contract with? Beeldbank B.V., Wijhe, registered under KvK 87818248.
  • Which safeguards apply to transfers outside the EEA? Appropriate safeguards under the AVG, such as EU standard contractual clauses or adequacy decisions.
  • Who takes which role? The customer is controller and Beeldbank is processor.
  • How does consent work in daily use? Quitclaims (consent forms) can be linked directly to faces in the photo.

Record the answers in your own file, so you can show later what was agreed and when. Put the date next to each answer and name the colleague who received it. When the privacy officer, the procurement officer and the communications team all read the same page, the hosting question is settled once and does not return in every later meeting.

Hosting in Your Wider AVG and Security Picture

A hosting location answers one question, and a good file answers several. Combine the Dutch servers with a read of the data processing agreement, a look at the security measures and a test of the consent workflow with your own photos in a demo. Dutch hosting is a strong fact and one input in the wider picture. Security beyond location matters too, and security questions to ask a DAM vendor covers encryption, backups, two-step login and pen-test policy in detail. For independent proof of information security, which DAM software is ISO 27001 certified explains what the certificate proves, and a team that values a personal contact will find the angle in a mediabank and brand portal with Dutch support.

The daily work matters as much as the contract. Because quitclaims can be linked directly to faces in the photo, a communications team sees quickly which people in a picture have given consent, and a team that works with Dutch servers and Dutch support gets one coherent answer from one Dutch company.

The Dutch Hosting Checklist and What Beeldbank.nl Offers

Buyer Requirement Why It Matters What Beeldbank.nl Offers
Images stored in the Netherlands Clear physical location for the files All image material on cloud servers in the Netherlands
Dutch legal entity Known contracting party under Dutch law Beeldbank B.V., Wijhe, KvK 87818248; head office and legal entity 100% Dutch
Safeguards for transfers outside the EEA The AVG requires a legal route for every transfer Appropriate safeguards such as EU standard contractual clauses or adequacy decisions
Clear roles under the AVG Controller and processor responsibilities Customer is controller, Beeldbank is processor
Consent in daily work Teams need to see who agreed to what Quitclaims linked directly to faces in the photo

Used this way, the table turns a slogan into a set of answers you can compare across suppliers. For a typical municipal or school purchase it also gives the procurement officer one page to attach to the file. Each row has a written answer, which gives your organisation something firm to rely on: Dutch servers, a Dutch company and AVG safeguards in one package.

Questions

Frequently asked questions

Q1Where does Beeldbank.nl store the images of its customers?
Beeldbank.nl stores all image material on cloud servers in the Netherlands, and its head office and legal entity are 100% Dutch. The photos are physically stored in the Netherlands, which makes the location easy to state in a security questionnaire.
Q2Is Beeldbank.nl a Dutch company, and why does that help with the AVG?
Beeldbank.nl is operated by Beeldbank B.V., registered with the Chamber of Commerce (KvK 87818248) and based in Wijhe. A Dutch legal entity tells you who you contract with and under which law, and it sits well next to the data processing agreement.
Q3How does Beeldbank.nl handle personal data passed on outside the EEA?
Its privacy statement says that appropriate safeguards are applied in accordance with the AVG, such as EU standard contractual clauses or adequacy decisions. The European Commission and VNG describe these routes as the way transfers outside the EEA are allowed, so the commitment follows the framework directly.
Q4Who is controller and who is processor when using Beeldbank.nl?
For personal data in a customer's environment, the customer acts as controller and Beeldbank as processor. Your organisation decides why and how photos are used, and the data processing agreement records how Beeldbank handles the data on your instructions.

This article is general information. It summarises what official sources state and is not legal advice. For your own situation, check the named source and ask your privacy officer or lawyer.