Privacy statement.

1. Who is responsible?

Didacs Learning Technologies is responsible for the processing of personal data as described in this privacy statement.

Didacs Learning Technologies
Oss, Noord-Brabant
KvK 76419320
Btw NL003083084B40

2. What personal data does Didacs process?

Didacs processes only personal data needed for contact, collaboration, administration or the performance of assignments. This may include:

name;
email address;
telephone number;
job title and organisation;
business address details;
Chamber of Commerce number and VAT number for sole proprietorships or general partnerships;
bank account number and account holder's name for payments;
quotation, assignment, contract and invoice details;
correspondence by email, telephone, LinkedIn or other business channels;
project information provided by the client;
name, role or quotation when someone consents to its use as a reference, testimonial or case;
technical website data, such as IP address, browser information and limited analytics data.

Didacs does not request special category personal data, such as medical information, political opinions, religion or criminal records. If such data is nevertheless shared, it is processed only where necessary and where a valid legal basis exists.

3. How does Didacs obtain personal data?

Didacs usually receives personal data directly from you or from the organisation you work for. For example, when you:

get in touch by email, telephone or LinkedIn;
request a quotation;
commission an assignment;
collaborate on a project;
provide information for advice, training, implementation or documentation;
give consent for a quotation, testimonial or case.

Didacs sometimes uses public business sources, such as the Dutch Chamber of Commerce, LinkedIn or an organisation's website, for example to check contact details or company information.

4. Why does Didacs process personal data?

Didacs processes personal data for the following purposes:

Contact and communication: To answer questions, arrange appointments, send information and maintain contact.

Quotations and assignments: To prepare quotations, confirm assignments, perform work and record agreements.

Service delivery: For advice, analysis, project guidance, LMS advice, implementation guidance, instructional design, training, workshops, evaluation and other L&D-related work.

Project administration and evidential position: To record agreements, decisions, project information, deliveries and correspondence. This is necessary to perform assignments carefully and to be able to demonstrate afterwards what was agreed and delivered.

Invoicing and financial administration: To prepare invoices, process payments, keep accounts and comply with statutory tax retention requirements.

Website and security: To ensure the website works properly, prevent misuse and gain limited insight into use of the website.

References, testimonials and cases: Didacs uses names, logos, quotations or project information in an identifiable way on the website or in portfolios only where consent has been given or clear arrangements have been made.

5. Legal bases for processing

Didacs processes personal data on one or more of the following legal bases:

performance of an agreement;
preparation of an agreement, such as a quotation;
a legal obligation, such as tax administration;
a legitimate interest, such as project administration, security, business communication and protecting its legal position;
consent, for example to use a testimonial, client quotation or identifiable case.

If processing is based on consent, you can withdraw that consent at any time. Withdrawing consent has no retroactive effect.

6. How long does Didacs retain personal data?

Didacs retains personal data no longer than necessary for the purpose for which it was collected, unless a statutory retention requirement or legitimate interest requires a longer retention period.

Contact details that do not result in an assignment are retained for a maximum of 2 years after the last substantive contact. Quotations that do not result in an assignment are retained for a maximum of 2 years.

Quotations, invoices, payment details and financial records are retained for 7 years because of statutory tax retention requirements.

Agreements, order confirmations and project records are retained for up to 5 years after completion of the assignment, or longer if necessary because of a dispute, a legal obligation or the need to preserve evidence.

Email correspondence about ongoing assignments is retained for as long as necessary for performance, administration and evidential purposes.

Testimonials, quotations and cases are retained for as long as they remain relevant or until consent is withdrawn, unless retention is necessary for evidential purposes.

Website and analytics data is retained for as short a period as possible, depending on the settings of the website or analytics service.

7. With whom does Didacs share personal data?

Didacs shares personal data only where necessary for service delivery, administration, security or legal obligations.

Didacs may share data with:

Moneybird, for quotations, invoices and administration;
the bookkeeper or tax adviser;
the business bank or payment service provider;
Apple iCloud, for email, calendars, documents or cloud storage;
Microsoft 365, for business email, calendars, documents or collaboration;
OpenAI (Sites), for hosting this website;
hosting or domain providers needed for didacs.nl;
business communication platforms, such as email, telephone, video calling or LinkedIn;
legal, tax or insurance advisers where necessary;
government bodies, only where Didacs is legally obliged to do so.

Didacs does not use a CRM system, delivery service or online shop for its normal business operations. These parties are therefore not listed as regular recipients of personal data.

Where necessary, appropriate security and confidentiality arrangements are made with parties that process personal data on behalf of Didacs.

8. Processing outside the EEA

Didacs uses digital services from professional providers. As a result, personal data may sometimes be processed outside the European Economic Area, for example by cloud, email or software providers.

Where this occurs, Didacs ensures that it takes place only on the basis of appropriate safeguards, such as an adequacy decision, standard contractual clauses or other measures permitted under the GDPR.

9. AI tools and digital resources

Didacs may use digital resources and AI tools to support writing, analysis, structure, summaries, documentation or preparation of work.

In doing so, Didacs uses as little personal data as possible. Confidential information, personal data or client documents are not processed in external AI tools unnecessarily. If an assignment requires the processing of sensitive or confidential information in specific tools, appropriate arrangements are made in advance.

The client remains responsible for the lawfulness of the information, documents and personal data provided to Didacs.

10. Security

Didacs takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful processing.

Examples of these measures include:

use of secure accounts;
strong passwords and, where possible, two-step verification;
limited access to documents and systems;
business storage and administration using professional software;
careful handling of confidential documents;
regular reviews of which data is still needed.

11. Cookies and website use

The Didacs website uses cookies and similar technologies only insofar as necessary for a properly functioning website, security or limited analysis of website use.

Didacs does not use advertising cookies, tracking pixels or social media pixels for personalised advertising, unless this is explicitly stated at a later date and consent is requested.

The website is hosted through OpenAI Sites. Your selected language is stored locally in your browser so the website remembers your choice on a future visit.

External links on the website may lead to third-party websites, such as LinkedIn or other organisations. Didacs is not responsible for how these third parties handle personal data or cookies.

12. Your rights

You have the right to:

request access to the personal data Didacs processes about you;
have inaccurate data corrected;
have data erased;
have processing restricted;
object to processing;
have data transferred to yourself or another party;
withdraw consent previously given.

You can submit a request using the email address info@didacs.nl. Didacs may ask for additional information to verify your identity before processing a request.

Didacs responds as soon as possible and no later than one month after receiving the request. If a request is complex, this period may be extended in accordance with the GDPR.

13. Complaints

If you have a complaint about how Didacs handles personal data, you can get in touch using the email address info@didacs.nl. An attempt will first be made to resolve the issue directly.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Changes

Didacs may amend this privacy statement if its working methods, services, website or legislation change. The latest version is always available on the website.

If a change directly affects individuals whose data Didacs processes, they will be informed separately where necessary.

For questions, requests or objections concerning the processing of personal data, you can get in touch using the email address info@didacs.nl.