1. Data collection

• Personal and professional data is collected only for training administration, communication, and certification purposes.

2. Legal Basis for Data Processing

• Processing is based on gerechtvaardigd belang (legitimate interest) for course management or toestemming (consent) for optional marketing purposes under the GDPR.

3. Data Retention

• Data will be retained for the duration of your participation and for legal retention periods under Dutch law. After this period, data will be securely erased.

4. Rights of Participants

• Participants have the right to:
  o Access and correct their data (Art. 15 and 16 GDPR).
• Request deletion or data portability under Dutch privacy law (AVG).
• File complaints with the Autoriteit Persoonsgegevens.

5. Third-Party Sharing

• Data will not be shared with third parties unless required by law or explicitly agreed to by the participant.