Privacy Statement

Privacy Statement

1   Definitions


Website: www.studyland.nl

Studyland: Legal entity providing e-learning services through the website www.studyland.nl and registered in the Netherlands under Chamber of Commerce Number 59734426.

I, me, my: Refers to the owner/author/creator of the firm Studyland and www.studyland.nl.

You, your: Refers to the visitor, customer (or user of the free or paid products) of www.studyland.nl who has or has not a registered account.

2   About the privacy statement


I care about your privacy. I therefore only process data that I need for (improving) my services and carefully handle the information I have collected about you and your use of my services. I never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided by Studyland. The starting date for the validity of these conditions is 01/06/2023, with the publication of a new version the validity of all previous versions expires. This privacy policy describes what information about you is collected by me, what this information is used for and with whom and under what conditions this information may be shared with third parties. I also explain to you how I store your data and how I protect your data against misuse and what rights you have with regard to the personal data you provide to me.

If you have any questions about my privacy statement, you can contact me using the contact details at the end of this page.

3   Personal data that I process


Studyland (indirectly) processes your personal data because you use my services and/or because you provide this information to me yourself. Below you will find an overview of the personal data that is processed:

  • First and last name. You do not have to disclose your real name or surname when creating an account or sending an e-mail. After you have made a purchase via my site, your first and last name may be visible to Studyland on the dashboard of and in the e-mail notifications of the payment provider Mollie B.V. and PayPal.
  • Your home or business address if you paid with PayPal. This is not the case with other payment methods. Your address details are registered by PayPal itself if you create an account with them and they only communicate this to me upon payment. Your address is known to me if PayPal sends me an email notification of your payment. I do not store your address details in any other way.
  • Email address
  • Other personal data that you actively provide in correspondence, e.g. by e-mail, name, location data, study. If there is contact by telephone, I do not register personal information.
  • Information about your activities on my website, including internet browser, approximate country and city name, device type, click and scroll events, if you have accepted analytical cookies.
  • Bank account number if you have purchased a product (registered by the payment provider Mollie B.V.).

I do not use social media plugins that can track your activities on the web. My website and/or service does not intend to collect data about website visitors under the age of 16. Unless they have parental or guardian consent. However, I cannot check whether a visitor is older than 16. I therefore advise parents to be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that I have collected personal information about a minor without this permission, please contact me via the contact form below this page, then I will delete this information.

4   Online store software


Below you can read how I process your data, where I store it (or have it stored), which security techniques I use and for whom the data is viewable.

4 . 1   Online store

My webshop is a custom website and only under my management. Personal data that you make available to me for the benefit of my services will not be shared with any party. The website is secured through the use of SSL encryption and a strong password policy.

4 . 2   Webhosting: GoDaddy

I purchase web hosting and email services from GoDaddy. GoDaddy processes personal data on my behalf and does not use your data for its own purposes. However, this party can collect metadata about the use of the services. This is not personal data. GoDaddy has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. GoDaddy is bound by the confidentiality agreement.

I use GoDaddy's services for regular business e-mail. This party has taken appropriate technical and organizational measures to prevent misuse, loss and corruption of your and my data as much as possible. GoDaddy does not have access to my mailbox and I treat all my email traffic confidentially.

4 . 3   Payment processors: Mollie & PayPal

I use the Mollie platform to handle (part of) the payments in my webshop. Mollie processes your name, address and residence details and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve the service and to share (anonymised) data with third parties in this context. All the guarantees mentioned above with regard to the protection of your personal data also apply to the parts of Mollie's services for which they engage third parties. Mollie does not store your data longer than permitted by law.

4 . 4   Passwords

The passwords you choose when creating an account are stored encrypted and cannot be traced back to the original combination by anyone. I advise you to choose a password combination that you do not use for other accounts in order to guarantee optimum security for your data.

5   The purpose and basis on which I process (personal) data


Your (personal) data may be processed on the basis of four of the six legal bases, namely Consent, Agreement, Legal Obligation and Legitimate Interest, as laid down in the privacy law, the General Data Protection Regulation (GDPR). For more information about the basis for the processing of personal data, you can consult the website of the Dutch Data Protection Authority.

The goals are:

  • Handling your payment, where your details are automatically processed by the payment provider and stored in their system.
  • Sending newsletters
  • To be able to email you if this is necessary to perform my services
  • To inform you about changes to my services, products, conditions, privacy statement and disclaimer
  • Offer you the possibility to create an account (only name and email address are stored in Studylands database.
  • Anonymously track your activities on my website in order to improve the website and tailor the range of products and services to your preferences. Think of, for example, Google Analytics or the analysis of database data. Personal data is not processed for this purpose.

5 . 1   General purpose of the processing

I only use your data for the benefit of my services. This means that the purpose of the processing is always directly related to the assignment you provide. I do not use your data for (targeted) marketing. If you share information with me and I use this information - other than at your request - to contact you at a later time, I will ask you for explicit permission. Your data will not be shared with third parties, other than to comply with accounting and other administrative obligations. These third parties are all held to secrecy by virtue of the agreement between them and me or an oath or legal obligation.

5 . 2   Automatically collected data

Data automatically collected by Google Data Analytics through my website. This data (for example your web browser, operating system, scrolling and clicking activities) is not personal data.

5 . 3   Cooperation in tax and criminal investigations

In some cases, Studyland may be required by law to share your data in connection with government tax or criminal investigations. In such a case, Studyland is forced to share your data, but Studyland will oppose this within the possibilities offered by the law.

6   How long I keep personal data


I keep your data as long as you are a client of Studyland. This means that I keep your customer profile until you indicate that you no longer wish to use my services. If you indicate this to me, I will also regard this as a request to be forgotten. This also means that I do not store your account details for longer than one year from the last contact moment or transaction, unless there is a legal justification for doing so. Based on applicable administrative obligations, I must keep invoices with your (personal) data, so I will keep this data for as long as the applicable term runs. According to the tax authorities, a retention period of 7 years applies to invoices sent to customers.

7   Sharing personal data with service providers


I do not sell your data to third parties and will only provide it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. I conclude a processing agreement with companies that process your data on my behalf to ensure the same level of security and confidentiality of your data. I will only do this with your explicit permission. Studyland remains responsible for these processing operations. The hosting company GoDaddy only stores the name and email address that you provide during account creation in a database. The companies Mollie B.V. and PayPal do not receive personal data from Studyland, but only process it when you proceed with the payment of my products on my site.

Table 1: Data Processors Studyland.nl
Company Function Goal data processing Data
GoDaddy Website hosting Customer database management Name, email address
Mollie B.V. Payment provider Transactions Name, bank account number, address
PayPal Payment provider Transactions Name, bank account number, address
Vimeo Video hosting Video player experience No personal data collection

8   Cookies, or similar techniques, that I use


Studyland only uses technical and functional cookies. And analytical cookies that do not infringe your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies I use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and, for example, remember your preferred settings, e.g. which products you have placed in a basket. I can also optimize my website with this. On your first visit to my website, I have already informed you about these cookies and I have asked for your permission to place them. You can disable cookies via the settings button for cookies on my website. You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously saved via the settings of your browser. Session cookies are also stored. These are temporary cookies that are deleted after closing your browser.

Besides from cookies, I use local storage and session storage to store user preferences, e.g. dark mode/light mode, icon data retrieved from API (Iconify Local Storage). I do not store personal data with local storage. For more information about cookies, and local and session storage: Local Storage and Cookies: The Pillars of Web Storage.

8 . 1   Purpose of the cookies

From https://gdpr.eu/cookies/:

  • Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user.
  • Preferences cookies — Also known as “functionality cookies,” these cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your user name and password are so you can automatically log in.
  • Statistics cookies — Also known as “performance cookies,” these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymized. Their sole purpose is to improve website functions. This includes cookies from third-party analytics services as long as the cookies are for the exclusive use of the owner of the website visited.
  • Marketing cookies — These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.

8 . 2   Analytical Cookies

Cookies from the American company Google are placed via my website as part of the “Analytics” service. I use this service to keep track of and receive reports on how visitors use the website. This processor may be obliged to provide access to this data on the basis of applicable laws and regulations. I collect information about your surfing behavior and share this data with Google. Google can interpret this information in conjunction with other data sets and thus track your movements on the internet.

The Google cookies are:

Table 2: Google Analytics cookie information (source: Google)
Cookie name Expiration time* Description
_ga 90 days Used to distinguish users.
_ga_<container-id> 90 days Used to persist session state.
* Expiry period for cookies relative to last visit

For more information on analytical cookies: Google

I use two methods to collect and analyze data: Google Analytics 4 (GA4) and Google Tag Manager.

8 . 2 . 1   Google Analytics 4 (GA4)

From Google:

Google Analytics 4 does not log or store individual IP addresses.

From Google:

GA4 is a new kind of property designed for the future of measurement:

  • Collects both website and app data to better understand the customer journey
  • Uses event-based data instead of session-based
  • Includes privacy controls such as cookieless measurement, and behavioral and conversion modeling
  • Predictive capabilities offer guidance without complex models
  • Direct integrations to media platforms help drive actions on your website or app

8 . 2 . 2   Google Tag Manager

From Google:

Google Tag Manager is a tag management system that allows you to update tags on your website quickly and easily. Tag Manager installation for web requires a small piece of code that you add to your web pages. This code enables Tag Manager to fire tags by inserting tags into web pages.

From Google's data privacy and security page:

Data collected by Google Tag Manager

In order to monitor and provide diagnostics about system stability, performance, and installation quality, Google Tag Manager may collect some aggregated data about tag firing. This data does not include user IP addresses or any measurement identifiers associated with a particular individual. Other than data in standard HTTP request logs, all of which is deleted within 14 days of being received, and diagnostics data noted above, Google Tag Manager does not collect, retain, or share any information about visitors to our customers’ properties, including page URLs visited. Learn more about our use of Google Tag Manager data in our terms of service.

The following events may be collected depending on your activities (source: Google):

  • Page view triggers
  • Click trigger
  • Element visibility trigger
  • Form submission trigger
  • Scroll Depth trigger
  • YouTube video trigger
  • Custom event trigger
  • History change trigger
  • JavaScript error trigger
  • Timer trigger
  • Trigger group

8 . 3   Video hosting: Vimeo

Vimeo is the video hosting provider. They set various cookies on your pc if you play videos.

8 . 4   Payment Provider: Mollie

Mollie is the payment provider that makes the payment on my website possible. They place session and analytical cookies on your mobile, pc or tablet when you visit my website and make payments. Check their cookie policy.

Mollie states on their privacy statement page:

If you (apply to) use Mollie’s services as a customer, your personal data are processed for the following purposes:

  • To assess your application;
  • To draft and perform the agreement;
  • To process payments;
  • To send information about your product or service and updates and/or changes to it;
  • To contact you in relation to your experience with our products and services and to inform you of other new or relevant Mollie products or services;
  • To perform analyses for statistical and scientific purposes;
  • To train and assess Mollie employees;
  • To record evidence (if necessary);
  • To provide support (such as via e-mail and phone);
  • To ensure the safety and integrity of the financial sector, for example by identifying, investigating, preventing and actively countering (attempted) criminal/illegal conduct;
  • To comply with legal obligations as a financial institution, such as under financial legislation and AML/CFT statutory frameworks.

And below their cookie chapter on same page:

Mollie uses functional cookies, cookies that improve your experience on our Website(s) and cookies that improve your experience on third party websites. A cookie is a small text file that is stored in the browser of your device such as a computer, tablet or smartphone when you first visit Mollie’s websites. On the one hand, Mollie uses cookies with purely technical functionality. These cookies ensure that the website works properly and, for example, remembers your preferred settings, so that Mollie is able to optimize the websites. On the other hand, Mollie uses cookies that keep track of your browsing behavior so that Mollie can offer you tailor-made content and advertisements. Some cookies on Mollie’s websites are placed by third parties, for example advertisers and/or social media companies. More information about Mollie’s use of cookies can be found in our Cookie Statement.

8 . 5   A list of stored cookies

A list of cookies that may be stored on your phone, PC or tablet, depending on the page you navigate to.

Table 3: Stored cookies
Cookie name Purpose Domain Definition Duration (days/years)
Cookies that are placed by Studyland.nl
Studyland_cookie Functional www.studyland.nl Variable that stores the user’s initial cookie preferences. Stores only whether the user allows functional and/or analytical cookies. 90 days
PHPSESSID Functional www.studyland.nl A session cookie that is used to identify a user's session on a website. It is commonly used in PHP-based web applications to store a unique identifier for a user's session on the server. Expires when user closes the browser. Session
basket Functional www.studyland.nl To store user’s item selection and addition to the basket. Only product-specific information is stored, i.e. product name, product price, product id. 90 days
darkmode Functional Local storage To store user’s preference for light or dark mode. 1 day
iconify0 Functional Local storage Used by the website's content management system (CMS) to determine how the website's menu-tabs should be displayed. Session
iconify-count Functional Local storage Used by the website's content management system (CMS) to determine how the website's menu-tabs should be displayed. Session
iconify-version Functional Local storage Used by the website's content management system (CMS) to determine how the website's menu-tabs should be displayed. Session
_ga Non-essential/Analytical www.studyland.nl Google cookie set by gtag.js cookie. The main cookie used by Google Analytics, enables a service to distinguish one visitor from another and lasts for 2 years. Any site that implements Google Analytics, including Google services, uses the ‘_ga’ cookie. Each ‘_ga’ cookie is unique to the specific property, so it cannot be used to track a given user or browser across unrelated websites. 90 days
_ga_<container-id> Non-essential/Analytical www.studyland.nl Google cookie set by gtag.js. Used to persist session state. 90 days
cc_vimeo Non-essential www.studyland.nl Variable that stores the user’s preference to comply with GDPR by completely removing iframes initially and setting a notice relative to that service. 182 days
Cookies that are placed by GoDaddy
JSESSIONID Functional seal.godaddy.com Preserves users states across page requests. Triggered when GoDaddy's Verified Security Seal is clicked. Session
Cookies that are placed by Mollie
_dd_s Functional www.mollie.com Session cookie via payment provider Mollie B.V. Deleted after the user returns from payment to Studyland.nl. Session
Cookies that are placed by Vimeo
__cf_bm Functional vimeo.com Part of Cloudflare's Bot Management service and helps mitigate risk associated with spam and bot traffic. 30 minutes

9   How I protect personal data


I take the protection of your data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of abuse, please contact me via the contact form at the bottom of this page. If you would like to know what measures Studyland has taken to protect your personal data, visit: https://en.internet.nl/.

10   Your rights to view, modify or delete data


You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to the data processing or to object to the processing of your personal data by Studyland and you have the right to data portability. This means that you can submit a request to me to send the personal data I hold about you in a computer file to you or another organization mentioned by you. You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data via the contact form below this page. To ensure that the request for inspection has been made by you, I ask you to enclose a copy of your proof of identity with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and citizen service number (BSN) black in this copy. This is to protect your privacy. Studyland will respond to your request as soon as possible, but in any case, within four weeks. Studyland would also like to point out that you have the option of submitting a complaint to the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link.

11   Changes to the Privacy Statement


I reserve the right to change the privacy statement at any time. You will always find the most recent version on this page. If the new privacy policy has consequences for the way in which I process already collected data relating to you, I will inform you by e-mail.

12   Contact


If you require any more information or have any questions about my site's privacy statement, please feel free to contact me by the Contact Form.