This privacy statement was last updated on April 13, 2023
Introduction
GSTA-learning makes every effort to ensure that your privacy is protected. We therefore take every care and attention to the safe storage and use of personal data. This privacy statement tells you how we handle personal data. With this privacy statement, we fulfill our information obligation imposed on us, as data controllers, by the General Data Protection Regulation (AVG).
Contact details
DG-Learning
Dominican Avenue 18
2408 KH Alphen aan den Rijn
CHAMBER OF COMMERCE: 89314204
VAT no: NL 0047.16.653.B 15
06 – 54 95 56 70
Personal data we process
GSTA-learning processes personal data as part of their services. This personal data may belong to you. Information that GSTA-learning may need from you and that is processed by us includes, in any case:
- First and last name;
- Address information;
- Phone number;
- E-mail address;
- IP address and data about the device used;
- Other personal data that you provide to us actively or at our request, for example by completing contact or registration forms, in correspondence or by telephone. But also for using our online platform.
Why we need personal data
We use personal data from you including:
- for the performance of our services – including, but not limited to, the processing of the data you enter or upload on our online platform in order to make the best possible use of this platform – and, if applicable, the agreement entered into with you;
- for creating an account for and providing access to the online platform;
- To maintain the relationship with you for such purposes as, but not limited to, the performance of our services;
- For billing for services rendered and collecting billing statements;
- To inform you of relevant information, including, among other things, information about changes to our services and products;
- To best serve you when you ask a question about any of DG-learning’s services;
- For improving our services;
- For our accounting;
- for sending our newsletter and other mailings containing information in connection with our services and similar services and/or taking surveys and
- for our marketing, promotional and communication activities, such as improving our product and service information, conducting targeted marketing campaigns and conducting and analyzing client satisfaction surveys
- For other situations where DG-learning has a legitimate interest in processing personal data.
Basis of processing personal data
GSTA-learning processes the aforementioned personal data exclusively on the basis of one of the bases referred to below in Article 6 of the AVG:
Consent
If you have given consent, we may process personal data about you. For example, consider the processing of the first and last name and e-mail address to create an account for our online platform and the other personal data when using the online platform. In principle, you have the right to withdraw a consent already given, but this will affect our services. We may then no longer be able to offer you our service. For this we refer you to our Terms and Conditions.
Agreement to which you are a party
If you enter into an agreement with us, we will process personal data if and to the extent necessary for the performance of the agreement. For example, we process your data for keeping proper accounting records.
Legal obligation
In some cases, we are legally obliged to process your personal data.
Legitimate interest
We may also process personal data if we or third parties have a legitimate interest in doing so. Such processing will not then constitute a disproportionate invasion of your privacy.
How long we keep data
GSTA-learning does not retain personal data longer than is strictly necessary to fulfill the purposes for which it is collected. However, we are bound by the legal retention periods that apply to the storage of (financial) data. For example, the Internal Revenue Service requires us to keep your data needed for our accounting records for at least 7 years.
Your rights
In principle, you have the right to submit a request to GSTA-learning for access to the personal data processed about you. In principle, if you believe that such personal data is incomplete or no longer complete, you may request that such personal data be supplemented, corrected, rectified or deleted, or request that personal data processing be restricted. In addition, in some cases you have the right to transfer the personal data (or have it transferred) to a third party. This means that you can make a request to us to send the personal data we hold about you in a computer file to you or another organization named by you.
In addition, in some cases you have the right to object to the processing of your personal data. This is possible insofar as the personal data processing is based on necessity for the protection of our legitimate interests or takes place for the purpose of direct marketing.
Not all requests can or do we have to grant. The law gives us some frameworks for this. We will follow those frameworks. We will fulfill your requests as soon as possible or give you a reasoned explanation as to why your request cannot (yet) be fulfilled. Whether we comply with your request will be assessed on a case-by-case basis. You can send your request to [email protected]. Any such request must be accompanied by a copy of a valid ID. In the copy of this ID, black out your photo, MRZ (Machine Readable Zone, or strip of numbers at the bottom of the passport), passport number and BSN (Citizen Service Number). This is to protect your privacy. In addition, your request should include contact information for us to contact you. Within 1 month of the submitted request, you will in principle receive a reply. Depending on the complexity of the requests and the number of the requests, we may extend this deadline by 2 months if necessary.
Unsubscribe mailings DG-learning
If you have requested a download, signed up for the online platform or filled out a contact form, we may send you direct marketing emails. In addition, you may be able to sign up to receive newsletters in the future. If you receive such emails from us and do not wish to receive them in the future, you may unsubscribe at any time using the link at the bottom of the email or by contacting us using the contact information provided elsewhere in this privacy statement.
Sharing data with third parties
In principle, GSTA-learning does not provide your personal data to third parties. We only provide this personal data to third parties if it is necessary for the performance of our agreement with you, to perform our services, to comply with a legal obligation or to achieve our other purposes of processing. Personal data processed by us is additionally stored on servers at our platform provider BuddyBoss and learning environment provider LearnDash.
Cookies
GSTA-learning uses only technical and functional cookies on their website. And analytical cookies that have no or a minor invasion of your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit the website. A cookie contains data so that you can be recognized as a visitor each time you visit the website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and, for example, remember your preference settings. It also allows us to optimize our website. When you visit our website, a banner will appear informing you about the use of cookies. By continuing to use our website, you accept its use. You can opt out of cookies by setting your Internet browser to stop storing cookies. In addition, you can also delete any information previously stored through your browser’s settings.
Personal data security
GSTA-learning takes the protection of your data seriously and takes appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. GSTA-learning will ensure a level of security appropriate to the risk. GSTA-learning also establishes data protection agreements with third parties, such as their (IT) suppliers, from whom they obtain services, in the processor agreement. When you use the contact form, this data is sent encrypted (https://) because we use an SSL certificate.
Complaints
Do you disagree with the way we process personal data about you? If so, you may file a complaint with us using the contact information listed elsewhere in this privacy statement. Should we be unable to resolve your complaint, you may file a complaint with the Personal Data Authority.
Privacy statement changes
GSTA-learning reserves the right to make changes to this privacy statement, for example when laws and regulations dictate it. Changes will be announced only through the website in an updated version of this privacy statement. Therefore, please consult our website regularly.
