5. How Do We Collect Your Personal Data?

We collect personal data in a variety of ways, including when you:

• enrol in a course;
• place an order through our website;
• complete a contact form;
• contact us by email or telephone;
• participate in an online lesson;
• use the Edu-Dutch Academy online learning platform;
• subscribe to our newsletter.

In addition, technical information, such as your IP address and browser information, may be collected automatically when you visit our website.

6. With Whom Do We Share Your Personal Data?

Edu-Dutch Academy B.V. never sells your personal data to third parties.

We only share personal data when this is necessary to provide our services, to comply with a legal obligation, or when you have given your consent.

To provide our services, we use, among others, the following systems and service providers:

Where a service provider processes personal data on behalf of Edu-Dutch Academy B.V., we enter into a Data Processing Agreement (DPA) where required by law. This agreement sets out arrangements regarding the security, confidentiality, and careful processing of personal data in accordance with the General Data Protection Regulation (GDPR).

7. How Long Do We Retain Your Personal Data?

We do not retain personal data for longer than is necessary for the purposes for which it was collected or for as long as required by law.

After the applicable retention period has expired, personal data will be deleted or anonymised unless a legal obligation requires us to retain it for a longer period.

8. How Do We Protect Your Personal Data?

Edu-Dutch Academy B.V. implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure.

Among other things, we use:

• a secure website protected by SSL encryption;
• a dedicated VPS server hosted by SEO Host;
• daily backups;
• Synology NAS for secure data storage;
• Bunny Storage for storing e-learning files;
• strong passwords and restricted access rights;
• two-factor authentication (2FA) for critical systems;
• regular software and security updates.

Only employees and teachers who require access to personal data for the performance of their duties are authorised to access such data.

Edu-Dutch Academy B.V. regularly reviews its technical and organisational security measures and updates them where necessary. In this way, we ensure that personal data remains protected against loss, unauthorised access, misuse, alteration, or any other form of unlawful processing.

8a. Privacy and Information Security

Edu-Dutch Academy B.V. treats personal data as confidential and implements appropriate technical and organisational measures to protect it. Access to personal data is restricted to employees and teachers who require it for the performance of their duties. We regularly evaluate our security measures and update them where necessary to ensure continued compliance with applicable laws and regulations.

8b. Do We Process Special Categories of Personal Data?

As a general rule, Edu-Dutch Academy B.V. does not process special categories of personal data, such as information relating to health, racial or ethnic origin, religious or philosophical beliefs, political opinions, or any other category of personal data that receives additional protection under the General Data Protection Regulation (GDPR).

Our courses are intended for adults. We do not knowingly collect personal data from individuals under the age of 16 without the consent of a parent or legal guardian. If we become aware that such data has been provided without the required consent, we will delete it as soon as reasonably possible.

If, in exceptional circumstances, it becomes necessary to process special categories of personal data or the personal data of minors, this will only take place where there is a lawful basis for doing so or where explicit consent has been obtained.