Privacy Policy

Effective date: 11 November 2025

This Privacy Policy explains how Rijschool Graduate B.V. (“Rijschool Graduate”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you visit www.rijschoolgraduate.nl or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

1) Who we are (Data Controller)

Rijschool Graduate B.V.
KvK (Chamber of Commerce): 92281095
Registered address (no public visiting address): Radarweg 29 A 1, 1043 NX Amsterdam, Netherlands
Email: info@rijschoolgraduate.nl

We do not operate a physical shop or public visit location. Please contact us by email.

2) Personal data we collect

• Identity & contact data you provide: name, email address, phone number, message content (e.g., inquiries, bookings).
• Lesson-related data you provide: preferred language, availability, pickup/meeting location, planning details.
• Payment/billing data: invoice details and payment status (we do not store full card details).
• Website & device data: IP address, pages visited, and aggregated analytics (see Cookies).

We do not use in-car audio/video recording, telematics, or CCTV.

3) How we obtain data

• Directly from you (web forms, email/phone/WhatsApp, bookings).
• Automatically via our website through cookies and similar technologies, limited to Google Tag Manager (GTM) and Google Analytics (GA4).

4) Purposes and legal bases

• Provide and manage lessons & respond to inquiries – contract or pre-contract steps (GDPR Art. 6(1)(b)).
• Customer service & communications – contract and/or legitimate interests (Art. 6(1)(b),(f)).
• Billing, accounting, tax – legal obligation (Art. 6(1)(c)).
• Website analytics and improvement – consent for non-essential cookies and legitimate interests for essential operation (Art. 6(1)(a),(f)).

We do not sell personal data.

5) Sharing your data

• Authorised staff/instructors (to deliver services).
• IT/hosting and email providers.
• Payment processors (if you pay online).
• Professional advisers or authorities when legally required.

6) International transfers

Our analytics and some service providers may process data outside the EEA/UK (e.g., Google). Where that happens, we rely on an adequacy decision or Standard Contractual Clauses (SCCs) and apply additional safeguards when needed.

7) Data retention

• Customer & lesson correspondence: up to 2 years after your last interaction.
• Financial records: 7 years (Dutch tax law).
• Analytics data: per Google’s defaults and your consent choices (see Cookies).

We may retain anonymised, non-identifiable data for statistics.

8) Cookies (Google Tag Manager & Google Analytics only)

We use Google Tag Manager (GTM) to load Google Analytics (GA4). We do not use marketing/advertising pixels. Non-essential cookies (analytics) are placed only with your consent via the cookie banner. You can withdraw consent anytime through the banner (where available) or your browser settings.

What runs on our site

• Google Tag Manager: container to deploy GA tags.
• Google Analytics (GA4): measures traffic and usage to improve our site.

Examples of cookies that may be set (names can change):

• _ga (2 years) – distinguishes users (analytics, GA4).
• _ga_XXXXXX (2 years) – session state for a specific property (GA4).

Data sent to Google: truncated IP, device information, pages visited, session metrics. Where required, IP anonymisation is enabled for analytics.

How to control cookies:

• Use our cookie banner to accept/decline analytics.
• Adjust your browser settings to block or delete cookies.

9) Security

We implement appropriate technical and organisational measures (HTTPS, access controls, least-privilege access, secure hosting). No method is 100% secure, but we work to protect your data continuously.

10) Your rights (GDPR)

You may request:

• Access to your data;
• Rectification of inaccuracies;
• Erasure (where applicable);
• Restriction or objection to certain processing;
• Data portability;
• Withdrawal of consent (for analytics cookies) at any time.

Contact: info@rijschoolgraduate.nl.
You may also lodge a complaint with the Autoriteit Persoonsgegevens (Dutch DPA).

11) Third-party links

Our website may link to external sites. Their privacy practices are governed by their own policies.

12) Changes

We may update this Policy from time to time. The latest version will be posted here with the effective date.

13) Contact

Rijschool Graduate B.V.
Registered address (no visiting address): Radarweg 29 A 1, 1043 NX Amsterdam, Netherlands
Email: info@rijschoolgraduate.nl
KvK: 92281095