SEPA File Checker
Menu

Terms and conditions

Last updated: 27 October 2026

1. Provider and scope

  1. The provider is Tevfik Özdemir, trading as Bedrijfsboekhouder.com, Einsteinlaan 28, 2289 CC Rijswijk, the Netherlands, registered with the Netherlands Chamber of Commerce (KVK) under no. 78320550 (“we”). SEPA File Checker is a service of Bedrijfsboekhouder.com.
  2. These terms apply to the use of the free check and to all orders via sepafilechecker.com, that is the repair of individual files and the annual licence, including where ordering, payment or download take place on our page start.bedrijfsboekhouder.com.
  3. Our services are intended exclusively for businesses, legal entities such as associations and other organisations, not for consumers. By ordering you confirm that you are not acting as a consumer. Consumer withdrawal rights therefore do not apply.
  4. Your own terms and conditions do not apply, even if we do not expressly object to them.

2. Services

  1. Check. The free check examines SEPA XML files for direct debits (pain.008) and credit transfers (pain.001) against the ISO 20022 XML schemas and the rules of the SEPA schemes, as far as these can be checked automatically. It is a technical aid. It does not replace your bank's check and does not guarantee that your bank will accept the file, as banks may have their own requirements.
  2. Repair. The repair converts the file to the current version, handles addresses according to the option you choose and fixes other errors where this is possible automatically. The number of transactions and the totals stay the same. The result is validated against the ISO 20022 XML schema; if it is not valid, we provide no file and charge nothing. You receive a ZIP file with the repaired XML file, a change report (PDF) and an overview of the changes (CSV). We do not repair errors that cannot be fixed automatically, such as a wrong IBAN or missing mandate data; the check points them out.
  3. Annual licence. With the annual licence you can have any number of files repaired for 12 months from purchase, on the website and in our browser extension. The licence applies to the ordering organisation and its staff. You may also use it to repair files of your clients, customers or members. You must not pass the licence code on to third parties. If the code is passed on or misused, for example by automated mass requests, we may block the licence. The licence does not renew automatically.
  4. Availability. We aim for high availability but do not guarantee uninterrupted operation. Maintenance and disruptions may temporarily limit the service.

3. Conclusion of the contract

  1. The presentation of our services on the website is not a binding offer.
  2. The steps: you upload a file and receive the check result. You choose “Repair file” or “Buy the annual licence” and enter your details; you can also order the annual licence without a prior check. Until you click “Order and pay” you can check and change all details. By clicking it you make a binding offer and are forwarded to Mollie for payment. We accept your offer by providing the repaired file or the licence code after receipt of payment. The invoice by email also confirms receipt of your order. With a valid annual licence, the contract for an individual repair is concluded when the repair is provided.
  3. The contract language is the language in which you order: English, German or French. We do not store the contract text separately. You receive the invoice by email; you can view and save these terms on this page at any time.

4. Prices and payment

  1. The prices on the website at the time of the order apply. All prices are net prices plus statutory VAT where applicable.
  2. If you are established in an EU Member State other than the Netherlands and have a valid VAT number, we invoice without VAT and you account for the VAT as the recipient of the service (reverse charge). Without a valid VAT number we charge Dutch VAT at 21%, unless the law requires the VAT of your country. Customers outside the EU are invoiced without Dutch VAT.
  3. You pay in advance via our payment provider Mollie B.V. The available payment methods are shown during ordering.
  4. You receive the invoice by email.

5. Provision and download

  1. After payment you can download the repaired file once, up to 30 minutes after upload. After that we delete it.
  2. If a paid file has already been deleted when the payment arrives, or if we cannot provide it for technical reasons, we refund the amount paid automatically.
  3. We show the licence code on screen after payment and send it by email.

6. Your obligations

  1. You ensure that you may transmit the data in the file to us, in particular that you have a legal basis for this under the GDPR.
  2. Check the repaired file and the change report before you submit the file to your bank. You remain responsible for your payment orders.
  3. Keep your original file; we do not store it.
  4. You must not misuse the service, for example by automated mass requests or attacks on our systems.

7. Defects and refunds

  1. If a repaired file contains an error caused by our repair, you must notify us by email within 14 days of discovering the error, and no later than three months after the download. As we keep no copy, please upload the original file again. We will then, at our choice, repair the file again free of charge or refund the price.
  2. Further refunds are made only where mandatory law requires them. In individual cases we may grant a refund at our own discretion; there is no entitlement to it. This does not affect section 5(2).

8. Liability

  1. We are liable without limitation for intent and deliberate recklessness (opzet en bewuste roekeloosheid under Dutch law).
  2. Otherwise our liability for a paid service is limited to the amount you paid for that service. For the free check we are only liable under paragraph 1.
  3. For indirect and consequential loss, in particular loss of profit, fees for returned direct debits, loss caused by late payment or loss caused by rejected payment orders, we are only liable under paragraph 1.
  4. This does not limit any further liability under mandatory law or our liability towards data subjects under Art. 82 GDPR.

9. Data protection and data processing

How we process data is described in our privacy policy. For personal data in the files you upload, the data processing agreement in Annex 1 applies. It becomes part of the contract when you upload a file and also applies to the free check.

10. Law, jurisdiction and final provisions

  1. Dutch law applies, excluding the UN Convention on Contracts for the International Sale of Goods.
  2. Where legally permitted, the District Court of The Hague (Rechtbank Den Haag) has jurisdiction.
  3. The version of these terms valid at the time of the order applies. These terms are available in English, German and French; the version in the language in which you ordered prevails.
  4. If a provision is invalid, the remaining provisions remain valid.

Annex 1: Data processing agreement (Art. 28 GDPR)

This agreement applies between you as controller and us as processor for all personal data in SEPA files that you upload to SEPA File Checker.

1. Subject matter, nature and purpose

We check the uploaded files automatically, repair them when you order this, compare address data with public address registers and provide the result to you. We do not process the data for any other purpose.

2. Duration

Each file is deleted after the repaired file has been downloaded, and no later than 30 minutes after upload. This agreement applies for as long as you use the service.

3. Types of data and data subjects

Data: names, IBAN and BIC, amounts, mandate references and mandate data, creditor identifier, remittance information, references and addresses. Data subjects: your members, customers, tenants, suppliers, staff and other payers or payees, and you yourself. If the file allows conclusions about special categories of personal data, for example membership of a trade union, political party or religious community, this agreement also applies to that data.

4. Instructions

We process the data only on your documented instructions, including with regard to transfers to a third country, unless we are required to process it under EU or Member State law; in that case we inform you beforehand, unless the law prohibits this. Your instructions follow from your use of the service: the upload, the option chosen for addresses and the order. If we consider an instruction unlawful, we inform you without delay.

5. Confidentiality

Only the proprietor has access to the systems. Anyone who comes into contact with the data is bound to confidentiality.

6. Technical and organisational measures (Art. 32 GDPR)

  • Encrypted transmission only (TLS).
  • Processing of the file only in memory in encrypted form, no storage on disk, no backups of the files.
  • Automatic deletion after download, and no later than 30 minutes after upload.
  • No logging of file contents, names or IBANs.
  • Address registers receive only postcodes and street names, for Dutch addresses also the building number, and no names, IBANs or amounts.
  • Server in a data centre in the Netherlands; administrative access only by the proprietor.
  • Limits on requests per connection and regular security updates.

7. Sub-processors and recipients

You give us general authorisation to engage sub-processors; currently this is TransIP B.V. (hosting, the Netherlands). We bind every sub-processor by contract to the same data protection obligations as in this agreement and are liable to you for its performance as for our own acts. We announce any intended change at least 14 days in advance on this page, and to annual licence holders also by email. You can object to the change by email; if we cannot reach agreement, you can stop using the service.

The public address registers are not sub-processors. On your instructions we transmit to them only postcodes and street names, for Dutch addresses also the building number, without names, IBANs or amounts: for Germany, Austria, Switzerland and Liechtenstein the OpenPLZ API (openplzapi.org), for the Netherlands the Basisregistratie Adressen en Gebouwen (BAG) via PDOK, for France the Base Adresse Nationale via the IGN Géoplateforme and for the United Kingdom postcodes.io. postcodes.io is operated in the United Kingdom; the European Commission has adopted an adequacy decision for the United Kingdom.

If you process the data yourself on behalf of your clients, we are your sub-processor; you are responsible for obtaining your clients' authorisation.

8. Assistance

We assist you in responding to requests from data subjects and with your obligations under Articles 32 to 36 GDPR, as far as this is possible given the short retention period. We notify you of a personal data breach without undue delay after becoming aware of it. If we have no contact details for you, for example after a check without an order, we inform you on this website.

9. Deletion

When processing is complete, we delete all data from the file automatically; we keep no copies.

10. Evidence and audits

On request we make available the information needed to demonstrate compliance with these obligations and allow for audits by you or an auditor appointed by you. Audits are normally carried out in writing; you must give reasonable notice of an on-site audit and bear its costs.

11. Professional secrecy

If you are bound by professional secrecy, for example as a tax adviser, lawyer or auditor, we undertake to keep confidential all third-party secrets we learn while providing the service and to access them only as far as necessary for the service. We are aware that a breach of this duty may be a criminal offence, for example under section 203 of the German Criminal Code or article 226-13 of the French Criminal Code. We engage other persons only in accordance with section 7 of this annex and bind them to the same confidentiality in writing (email is sufficient).

12. Precedence

In the event of conflict between this annex and the other provisions of these terms, this annex prevails on matters of data protection.