May 15, 2025, version 1.1

Privacy Policy

Who are we?

Copilot Academy B.V., located at Obrechtstraat 97, 2517 VN The Hague, the Netherlands (CoC: 98017705).

We take privacy protection seriously and process personal data in accordance with the GDPR and Dutch data protection legislation. For privacy-related questions, please contact us at hallo@copilot-academy.nl.

Processing of personal data

Personal data is information that identifies an individual. The organization collects only the minimum data necessary to achieve the stated purposes. Processing follows principles that require:

Collection only for disclosed, legitimate purposes
Lawful, fair, and transparent use, proportionate to necessity
Accuracy with regular updates and secure handling

What data do we collect?

The organization may collect: addresses, VAT numbers, bank details, business addresses, payment information, timestamps, cookies, email addresses, photos/videos, correspondence, client files, and consent documentation.

Specific processing activities

Website activities: Informing clients and prospects through the website (legitimate interest; data stored within the EU).

Client communication: Ensuring service delivery through paper or electronic communication (contractual basis; processing within the EU).

Service delivery: Enabling correct delivery, follow-up, and feedback (contractual basis; processing within the EU).

Invoicing and accounting: Calculating fees and managing payments (contractual basis; processing within the EU).

Newsletter and promotions: Keeping clients informed (legitimate interest; processing within the EU).

Data sharing

The organization shares data with the following third parties:

LinkedIn: Employee promotion (legitimate interest)
Google: Business management software (legitimate interest)
Microsoft: Video conferencing (legitimate interest)
Zoom: Video conferencing (legitimate interest)
Trainingspartners: Training support (legitimate interest)

All processing takes place within the EU.

Supplier data

The organization collects contact details, VAT numbers, and vehicle registrations from suppliers when required for organizational or security purposes. Legal basis: performance of a contract. Retention period follows the applicable statute of limitations.

Your rights under the GDPR

You have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion when there is no valid reason for retention
Object to processing based on legitimate interest
Request restriction of processing
Withdraw your consent at any time
Avoid decisions based solely on automated processing
Receive your data in a portable, machine-readable format

Security and confidentiality

The organization maintains security procedures that meet industry standards to prevent loss, misuse, or alteration of data.

Website and cookies

When visiting the website, cookies may be stored on your device to improve the experience. The web server automatically processes IP addresses and domain names. The organization requests cookie consent during site visits. External links are subject to a separate privacy policy.

Social media

Using social media features (like/share buttons) or visiting social media pages involves processing by those platforms. The organization and the platform are considered joint data controllers. Photos and videos taken during events may be used for marketing, unless you object.

Dutch Data Protection Authority

Complaints can be addressed to:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV Den Haag
autoriteitpersoonsgegevens.nl