Privacy Policy

SafetyXAcademy takes the protection of your personal data seriously. This privacy policy explains which personal data we collect, why we collect it and how we use it. We act in accordance with the General Data Protection Regulation (GDPR).

1. Who are we?

Data controller:

• Trade name: SafetyXAcademy
• Part of: ABshops.nl
• Chamber of Commerce (KVK): 72037628
• Address: Westplein 12, 3016 BM Rotterdam, Netherlands
• Email: info@safetyxacademy.nl
• Website: www.safetyxacademy.nl

SafetyXAcademy is a trade name of ABshops.nl (KVK 72037628).

2. What personal data do we collect?

We may collect the following personal data from you:

2.1 Contact details

• First and last name
• Email address
• Phone number
• Address (where relevant for training or certification)

2.2 Training-related data

• The course/training you are interested in
• Education level and work experience
• CV and cover letter (if shared for job orientation)
• Certifications and diplomas
• Progress and results during training

2.3 Payment information

• Billing details
• Payment history (via external payment providers)
• We do NOT store credit card or bank details ourselves

2.4 Technical data

• IP address
• Browser type and version
• Device information
• Page visits and click behaviour (via cookies)

3. Why do we collect this data?

We use your personal data for the following purposes:

3.1 Delivering our services

• Registering you for NEBOSH IGC or other training
• Communicating about your course
• Providing study materials and exams
• Issuing certificates

3.2 Career orientation services

• Matching your profile with suitable vacancies
• Sharing your CV and data with potential employers (with your consent)
• Support during the application process

3.3 Marketing and communication

• Sending newsletters and updates (with your consent)
• Information about new courses and vacancies
• You can unsubscribe from marketing at any time

3.4 Website improvement

• Analysing website usage (via Google Analytics)
• Improving the user experience
• Resolving technical issues

3.5 Legal obligations

• Administration for tax purposes
• Meeting NEBOSH reporting requirements

4. Legal basis for processing

We process your personal data on the basis of:

• Contract: To deliver our training and services
• Consent: For marketing and sharing data with employers
• Legitimate interest: For website analytics and improvement
• Legal obligation: For administration and reporting

5. How long do we keep your data?

Type of data	Retention period
Contact details (no course taken)	2 years after last contact
Training data and certificates	7 years (legal obligation)
Billing data	7 years (tax law)
Marketing consent	Until consent is withdrawn

6. Who do we share your data with?

We only share your data when necessary:

6.1 NEBOSH

• For exam registration and certification
• NEBOSH has its own privacy policy

6.2 Potential employers

• Only with your explicit consent
• For career orientation services
• You decide what information is shared

6.3 Service providers

• Payment providers (for secure payments)
• Email service providers (for communication)
• Hosting providers (for the website)
• All service providers are contractually bound to confidentiality

6.4 Legal obligations

• Government (where legally required)
• Tax authorities (for administration)

We NEVER sell your data to third parties!

7. Cookies

Our website uses cookies to improve the user experience:

7.1 Functional cookies (necessary)

• For the website to function properly
• Remembering preferences
• No consent required

7.2 Analytical cookies

• Google Analytics (anonymised)
• For analysing website usage
• Helping us improve the site

7.3 Marketing cookies

• For targeted advertising (where applicable)
• Social media integration
• Only with your consent

You can disable cookies at any time in your browser settings.

8. Your rights

Under the GDPR you have the following rights:

• Right of access – request which personal data we hold about you.
• Right to rectification – have incorrect or incomplete data corrected.
• Right to erasure ("right to be forgotten") – ask us to delete your data, unless we are legally required to keep it.
• Right to restriction of processing – ask us to restrict the processing of your data.
• Right to data portability – request your data in a structured format.
• Right to object – object to processing based on legitimate interest.
• Right to withdraw consent – withdraw previously given consent at any time.

9. Security of your data

We take appropriate technical and organisational measures to protect your data:

• SSL certificate for a secure connection (HTTPS)
• Encryption of sensitive data
• Restricted access to personal data (need-to-know basis)
• Regular security updates
• Data back-ups
• Secure storage with trusted hosting providers

10. International transfers

Your data is processed within the European Economic Area (EEA). If we need to send data outside the EEA (for example to NEBOSH UK), we ensure:

• Adequacy decisions of the European Commission
• Standard contractual clauses
• Other appropriate safeguards under the GDPR

11. Data of minors

Our services are aimed at people aged 18 and over. We do not knowingly collect data from people under 16 without parental/guardian consent.

12. Changes to this privacy policy

We may update this privacy policy from time to time. The most recent version is always available on this page. For major changes we will inform you by email.

13. Complaints

If you are not satisfied with how we handle your data, you can file a complaint with:

• Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
• Website: www.autoriteitpersoonsgegevens.nl
• Phone: +31 88 1805 250

14. Contact and questions

Do you have questions about this privacy policy or want to exercise your rights? Contact us:

SafetyXAcademy (ABshops.nl)
Westplein 12
3016 BM Rotterdam
Netherlands
KVK: 72037628

Email: info@safetyxacademy.nl

We respond to your request within 1 month.

Version: 1.0