Privacy Policy

The controller for your personal data is:

Blue Innovation BV
Rietsingel 46, 2136 LB Zwaanshoek, The Netherlands
Chamber of Commerce (KvK) number: 80387578
VAT number: NL861658383B01
Email: [email protected]

For all questions about this privacy policy or the processing of your data, you can contact us at [email protected].

We process the following categories of personal data:

Account data. When you create an account: your email address and the data needed to manage your account and give you access to the training you have purchased.

Progress data. While using the learning environment: your progress through the lessons, your answers to practice questions and quizzes, and your results on the practice exams. This data allows you to track your progress and allows us to operate the learning environment.

Payment data. When you make a purchase, the payment is processed by our payment service provider Mollie. We receive a confirmation of the payment and the associated order data; we do not ourselves receive or store full credit card or bank account details.

Communication data. When you contact us: the content of your message and your contact details, so that we can help you.

Technical data. Limited, privacy-friendly usage statistics via Vercel Web Analytics (see section 6). We do not place tracking cookies for this.

We do not keep your data longer than necessary:

• Account and progress data: for as long as you have an active account. After your account is terminated, we delete this data within a reasonable period, unless a legal retention obligation requires otherwise.
• Payment and order data: we retain invoice and transaction data for the statutory tax retention period of seven years.
• Communication data: for as long as needed to handle your question and for a reasonable period thereafter.

We never sell your data. We share data only with service providers that help us deliver the service (processors), on the basis of a data processing agreement. These processors are:

For processors that process personal data outside the European Economic Area (EEA), we have put appropriate safeguards in place in the form of the Standard Contractual Clauses adopted by the European Commission and, where applicable, certification under the EU-US Data Privacy Framework. You can request a copy of the applicable safeguards at [email protected].

GovCompass places no tracking cookies and uses no privacy-invasive analytics tools such as Google Analytics.

To measure visits, we use Vercel Web Analytics, a privacy-friendly, cookieless statistics tool that counts visitors with a daily-rotating hash, stores no IP address, and shares no data for advertising purposes.

We use only strictly necessary functional cookies that are needed to keep you logged in and to secure your session. No consent is required for these strictly necessary cookies. Because we place no tracking or marketing cookies, we do not show a cookie consent banner.

We take appropriate technical and organizational measures to protect your data against loss or unlawful processing. Our infrastructure uses encrypted connections, access restrictions at the database level, and monitoring to detect failures and misuse in good time.

Under the GDPR you have the following rights regarding your personal data:

• Access — you can request which data we process about you.
• Rectification — you can have incorrect data corrected.
• Erasure — you can request that your data be deleted (“right to be forgotten”).
• Restriction — you can have processing restricted.
• Portability — you can request your data in a common format.
• Objection — you can object to processing based on legitimate interest.

You can exercise these rights by sending a message to [email protected]. We respond within the statutory period of one month. To protect your identity, we may ask you to confirm your request.

If you believe we are not handling your data carefully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

We may amend this privacy policy from time to time, for example in the event of changes to our services or to applicable law. The most current version is always available on our website, with the date of the most recent change at the top.