PRIVACY

This is a translation provided for your convenience. In the event of any discrepancy, the Dutch version prevails.

Autorijschool Krijtland attaches great importance to the protection of your personal data. In this privacy statement we want to provide clear and transparent information about how we handle personal data. We do everything we can to safeguard your privacy and therefore handle personal data with care. Autorijschool Krijtland complies in all cases with the applicable laws and regulations, including the General Data Protection Regulation (GDPR). This means that we in any case:

  • process your personal data in accordance with the purpose for which they were provided; these purposes and types of personal data are described in this privacy statement;
  • limit the processing of your personal data to only the data that are minimally necessary for the purposes for which they are processed;
  • ask for your explicit consent if we need it to process your personal data;
  • have taken appropriate technical and organisational measures to ensure the security of your personal data;
  • do not pass on personal data to other parties, unless this is necessary for the purposes for which they were provided;
  • are aware of your rights regarding your personal data, want to point them out to you and respect them.

As Autorijschool Krijtland, we are responsible for processing your personal data. If, after reading this privacy statement or more generally, you have any questions about this or would like to contact us, you can do so using the contact details below:

Autorijschool Krijtland
Benedictijnenstraat 15
6294 BE Vijlen
The Netherlands
info@autorijschoolkrijtland.nl

Why we process personal data

Your personal data are processed by Autorijschool Krijtland for the following purposes, on the legal basis stated for each:

  • performing the lesson agreement so that you can take part in a driving course at Autorijschool Krijtland, including planning lessons, applying for exams and informing you about your progress (legal basis: performance of the agreement);
  • keeping financial records and complying with tax and other legal obligations (legal basis: legal obligation);
  • sending newsletters, invitations and information and offers about our own similar services by e-mail or message, from which you can unsubscribe at any time (legal basis: legitimate interest, or your consent);
  • all other purposes, for example publishing photos or visual material, exclusively with your express consent (legal basis: consent).

For the above purposes, we may ask you for the following personal data:

  • first name
  • name prefix
  • surname
  • date of birth
  • place of birth
  • citizen service number (BSN)
  • address
  • phone number
  • email address
  • bank account number
  • gender
  • details of your proof of identity
  • lesson planning, progress and payment data
  • photos

We only ask for your citizen service number (BSN) insofar as it is legally required to apply for an exam at the CBR. We only make a copy of your proof of identity if this is legally required. We do not ask for medical data; see also Article 2.6 of our General Terms and Conditions.

Sharing with third parties

We may share the data you provide with third parties if this is necessary for the purposes described above. For example, we use a third party for:

  • handling applications with the Central Office for Driving Licences (CBR);
  • handling the (financial) administration;
  • IT services, such as managing our website and e-mail.

We never pass on personal data to other parties with whom we have not concluded a data processing agreement. With these parties (processors) we of course make the necessary arrangements to safeguard the security of your personal data. Furthermore, we will not provide the data you supply to other parties unless this is legally required and permitted. An example of this is the police requesting (personal) data from us as part of an investigation. In such a case we must cooperate and are obliged to hand over these data. We may also share personal data with third parties if you give us written permission to do so.

We do not sell or provide your data to third parties for their own direct marketing purposes. Your data is not processed outside the European Economic Area (EEA), unless an appropriate safeguard is in place.

Special and/or sensitive data

We only process personal data of minors (persons under the age of 16) if written consent has been given by the parent, guardian or legal representative.

We also use photos for publication on our website, social media and/or for advertising purposes.

Retention period

Autorijschool Krijtland does not keep personal data longer than necessary for the purpose for which they were provided, or than required by law. Specifically:

  • we keep financial data for 7 years (statutory tax retention obligation);
  • other student data is deleted or anonymised 5 years after the lesson agreement ends or after the driving licence has been obtained, unless a legal obligation requires a longer period.

Security

We have taken appropriate technical and organisational measures to protect your personal data against unlawful processing. For example, we have taken the following measures:

  • all persons who may have access to your data on behalf of Autorijschool Krijtland are bound to confidentiality;
  • we use a username and password policy on all our systems;
  • we pseudonymise and encrypt personal data where there is reason to do so;
  • we make backups of personal data so that they can be restored in the event of physical or technical incidents;
  • we regularly test and evaluate our measures;
  • our staff have been informed about the importance of protecting personal data.

In the event of a data breach that poses a risk to your rights and freedoms, we report this to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours and, where required, to you as well.

Your rights regarding your data

You have the right to access, rectify or erase the personal data we have received from you, and to restrict the processing. You can also object to the processing of your personal data (or part of it) by us or by one of our processors, for example if the processing is based on a legitimate interest. You can always object to direct marketing; we will then stop immediately. In addition, you have the right to have the data you provided transferred by us to yourself or, on your instructions, directly to another party.

If you have given consent, you can withdraw it at any time, without affecting the lawfulness of the processing up to that moment.

You can submit your request via info@autorijschoolkrijtland.nl. We may ask you to identify yourself before we can comply with a request. We respond within one month.

Complaints

Do you have a complaint about the processing of your personal data? Then please contact us directly. If we cannot resolve it together, we would of course regret that. You always have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, the supervisory authority for privacy protection.

Cookie statement

This website does not place cookies and does not store any data in your browser. We do not use tracking, advertising or social media cookies, and fonts and scripts are loaded from our own server, without the involvement of third parties.

If you fill in the contact form, your data are only sent to us by email and are not stored on the website. We use them solely to answer your question.

If you click a link to an external website, such as Facebook, Instagram, LinkedIn, WhatsApp or Google, the privacy and cookie rules of that party apply.