Cold Email Infrastructure for the Netherlands

The Netherlands is one of the friendlier European markets for B2B cold email. Dutch cold email is governed by the Telecommunicatiewet (Telecommunications Act) article 11.7, which implements the EU ePrivacy Directive with a B2B exemption that both Germany and (formally) France chose not to apply. The law draws a sharp line between natural persons and legal entities:

Natural persons (consumers, sole traders, freelancers who haven't registered a BV or NV) require prior express consent to receive commercial email. This is the standard ePrivacy rule.

Legal entities (BV, NV, stichting, vereniging, coöperatie) can be emailed for commercial purposes without prior consent, provided: 1. The sender clearly identifies themselves 2. The message offers a clear opt-out mechanism 3. Each subsequent message continues to honor opt-out requests 4. The sender maintains a suppression list

This is a genuinely useful exemption for B2B cold email, and it is why the Netherlands has a more active cold outbound market than Germany or France. Dutch B2B SaaS companies, agencies, and recruiters run large cold email programs into Dutch limited companies and public sector entities every day, legally and at scale.

• Autoriteit Consument & Markt (ACM) enforces the Telecommunicatiewet itself, including the electronic marketing rules
• Autoriteit Persoonsgegevens (AP) enforces the Dutch implementation of GDPR (Uitvoeringswet AVG)

Both can fine Dutch senders. ACM typically focuses on technical violations (missing opt-outs, hidden sender identity, ignored suppression lists) while AP focuses on the data-processing side (lawful basis, privacy notices, data subject rights).

A 2,000/day Dutch cold email operation typically lands around €210/month total.

The Netherlands cold email compliance test is mostly about correctly classifying recipients. A Dutch cold email program that maps every contact to a legal-entity classification survives ACM scrutiny; one that blasts @company.nl addresses without classification does not.

• Besloten Vennootschap (BV): private limited company
• Naamloze Vennootschap (NV): public limited company
• Stichting: foundation
• Vereniging: association
• Coöperatie: cooperative
• Public sector bodies (ministries, municipalities, universities)

• Zelfstandige zonder personeel (ZZP) / sole trader not registered as a legal entity
• Freelancer operating under their own name
• Private individuals
• Partners in a commanditaire vennootschap (CV) or vennootschap onder firma (VOF): because these are not separate legal entities under Dutch law

How to verify legal entity status: The Kamer van Koophandel (KvK) Handelsregister is the Dutch business register. Every legal entity in the Netherlands has a KvK number, which can be looked up to confirm its status. Dutch cold senders should verify that their list contacts work for KvK-registered BVs, NVs, stichtingen, etc. before first send. This is a small piece of friction but it is the single best defense against ACM complaints.

The subtle issue: a VOF (general partnership) is the most common Dutch SMB legal form and does not count as a legal entity under the Telecommunicatiewet B2B exemption. Each partner is a natural person. So a cold email to jan@smitenjansen.nl where Smit en Jansen is a VOF technically requires prior consent: even though the recipient is acting in a clearly professional capacity. This is the most common mistake in Dutch cold outbound.

Practical classification workflow: 1. Scrape or acquire the target list 2. For each domain, look up the KvK Handelsregister to confirm the entity type 3. Filter out natural-person entities (ZZP, VOF, CV) 4. For remaining legal-entity domains, match role relevance 5. Send

The Netherlands has a fairly standard Gmail + Microsoft 365 dominated inbox mix, with a meaningful share of ISP-branded webmail from KPN (formerly the Dutch national telco) and hosted mail from Dutch webhosts.

KPN Mail is easier than Orange in France. After KPN migrated its consumer mailbox service to a Microsoft-hosted backend in 2022, the filtering rules converged with standard Microsoft 365 filtering, so KPN delivery issues usually track the same root causes as Outlook.com issues. Ziggo and TransIP are smaller but have their own quirks: both are stricter on unauthenticated mail and both benefit from clean DMARC alignment.

Dutch recipients are unusually tolerant of English-language cold email. Unlike France or Germany, where native-language content is effectively required for acceptable open rates, Dutch B2B recipients (especially in tech, SaaS, finance, and logistics) open and engage with English-language cold email at rates comparable to native-language messages. This is a real operational advantage for teams running pan-EU outreach out of a single English-language sequence.

The Telecommunicatiewet B2B exemption covers the electronic marketing message. GDPR still applies to the underlying data processing. Dutch cold senders need to cover both.

• Documents a legitimate interest assessment (LIA) covering purpose, necessity, and balancing
• Provides clear information at first contact (GDPR Art. 13)
• Honors the right to object (GDPR Art. 21), which dovetails with the Telecommunicatiewet opt-out requirement
• Minimizes the personal data processed (name, role, work email is fine; anything beyond that needs justification)

• GDPR Art. 13 privacy notice at the data collection point
• Privacy notice link in every cold email
• LIA document (internal, not shared unless AP asks)
• Record of Processing Activities (ROPA) entry under Art. 30, Dutch senders with more than 250 employees or high-risk processing must maintain a ROPA
• Suppression list with indefinite retention
• Per-contact record showing how the data was obtained and why it was relevant

AP fines in practice have ranged from €525,000 for repeated GDPR violations involving commercial data processing down to small-business warnings. AP focuses more on data minimization and transparency than on the sending act itself, which is ACM's domain.

• 2-3 .nl domains for Netherlands-native outreach (Dutch recipients open .nl addresses at ~5-8% higher rates)
• 3-5 .com, .eu, or .io domains for pan-BeNeLux or international outreach
• Register .nl through a SIDN accredited registrar
• Meet SIDN's administrative contact requirement
• Publish a Dutch privacy notice on every redirect target
• 301 redirect secondary domains to the primary brand

• Google Workspace default
• Microsoft 365 at 35-40% to reach enterprise and KPN-migrated recipients
• Consider EU-region Microsoft 365 for Schrems II comfort
• Per-mailbox volumes: 20/day week 1 → 40/day week 2 → 60/day week 3 → 80+/day after week 4
• Isolated warmup for 14-28 days

• SPF: v=spf1 include:_spf.google.com ~all
• DKIM: two selectors
• DMARC: p=none to start, p=quarantine after 30 days
• MX: matches mailbox provider

• Sender legal entity name and KvK number in the footer (not required by law but signals legitimacy)
• Physical mailing address
• Privacy notice link
• Clear opt-out, 'Afmelden' or 'Uitschrijven' as the link label
• Optional but recommended: a one-line explanation of how the recipient data was obtained ('We found your details on [source]')

Dutch cold email has the same Gmail + Microsoft 365 volume math as everywhere else, with two ACM-specific drivers.

Driver 1: Suppression list integrity. ACM has fined Dutch senders for continuing to email addresses after an opt-out. This is the most commonly cited violation and the easiest to prevent: mailbox rotation must not lose the suppression list. InboxKit's mailbox-independent suppression approach (maintained by the sequencer, not per-mailbox) avoids this.

Driver 2: Sender identification. ACM has also fined senders who hid their identity behind unclear 'From' names or used fake reply-to addresses. The Telecommunicatiewet opt-out clause becomes meaningless if the recipient can't identify the sender, so ACM treats these together.

• Week 1: 10-20/day per mailbox, warmup only
• Week 2: 20-40/day per mailbox, 5-10 real cold touches
• Week 3: 40-60/day per mailbox, 70/30 warmup-to-cold
• Week 4+: 60-100/day per mailbox, 30/70 warmup-to-cold

• ~35 active mailboxes at 60/day each
• ~10 domains at 3-4 mailboxes each
• InboxKit Agency ($99/mo, 30 slots) + 5 extras at $3.25 = $115/mo
• Warmup: 35 × $3 = $105/mo
• InfraGuard: ~$10/mo for 10 domains
• Total: ~$230/month (~€210/month) for 2,000 Dutch cold emails/day: about €0.005 per sent message.

• [ ] Register 5-10 domains (mix of .nl, .com, .eu)
• [ ] Publish Dutch privacy notice on every domain redirect target
• [ ] Provision Google Workspace (65%) + Microsoft 365 (35%)
• [ ] Automated DNS via InboxKit
• [ ] Enable isolated warmup and InfraGuard

• [ ] Verify KvK legal entity status for every target contact's employer
• [ ] Filter out ZZP, VOF, and CV recipients (they need opt-in consent)
• [ ] Draft email templates with sender identity, KvK number, opt-out, privacy notice link
• [ ] Document legitimate interest assessment
• [ ] Build suppression list workflow

• [ ] Start sequences at 40-60/day per mailbox
• [ ] First-touch in English or Dutch (both work for Dutch B2B)
• [ ] Same-day opt-out processing
• [ ] Weekly deliverability review (Gmail, Microsoft 365, KPN, Ziggo)
• [ ] Monthly KvK re-verification for new contacts

• Any ACM or AP correspondence
• Google Postmaster domain reputation drops to Medium
• Complaint rate above 0.15%
• Any opt-out processing delay beyond 24 hours