Privacy Policy

2. Personal Data We Collect

We collect personal data that you provide directly and data that is generated when you use the site. The exact data depends on how you interact with the website (browsing, submitting a form, managing cookie preferences).

• Identity and contact details: name, email address, phone number, and any other contact details you choose to provide.
• Form content: messages, programme selection, workshop interest (if provided), preferred timing, and any other information you include in a registration or support inquiry.
• Technical data: IP address, browser type and version, device type, operating system, language settings, and basic network information.
• Usage data: pages visited, time spent, approximate navigation paths, referrer URL, and interaction events (for example, clicking a call-to-action button).
• Cookies and identifiers: cookie values and similar identifiers described in Section 4 and in our Cookie Policy.
• Conversion events: events related to submitting forms or completing a registration inquiry flow, used for measuring content performance and (if you consent) advertising effectiveness.

We do not intend to collect special-category data (such as health data, religious beliefs, political opinions), financial account details, payment card details, or government identification numbers through this website. Please do not submit such information in free-text fields.

3. Why We Process Personal Data & Legal Basis (GDPR Art. 6)

We process personal data only when we have a lawful basis under the General Data Protection Regulation (“GDPR”) and, where applicable, similar privacy laws. The purposes and legal bases typically include:

• Responding to your inquiry and supporting registration: to communicate with you, answer questions about programmes and workshops, and provide information you request. Legal basis: Art. 6(1)(b) (steps at your request prior to entering into a contract) and, where applicable, Art. 6(1)(a) (consent) for the submission itself.
• Website analytics (optional): to understand which pages are useful, improve navigation, and measure content performance. Legal basis: Art. 6(1)(a) (consent) for analytics cookies and similar technologies.
• Marketing and remarketing (optional): to measure advertising and show relevant ads after you visit the site, including building audiences for remarketing or lookalike targeting. Legal basis: Art. 6(1)(a) (consent) for marketing cookies and similar technologies.
• Security and fraud prevention: to protect the website, prevent misuse, detect suspicious activity, and maintain the integrity of forms and systems. Legal basis: Art. 6(1)(f) (legitimate interests) in operating and securing our website.
• Legal obligations: where we must comply with applicable laws, regulatory requests, or enforce our legal rights. Legal basis: Art. 6(1)(c) (legal obligation).

Automated decision-making (Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects for you.

4. Cookies & Tracking

Cookies are small text files stored on your device. We also use similar technologies such as pixel tags and server-side events. Our cookie categories match the choices available in our cookie preference panel. Essential cookies are required for basic site operation, while analytics and marketing cookies are optional and activate only after consent.

Essential (always active)

These cookies are required for the site to function. They support session continuity and remembering your cookie choice. Examples include _site_session and cookie_consent. Retention typically ranges from session to 12 months. Essential cookies do not require consent under EU cookie rules when strictly necessary for the service you request.

Analytics (consent required)

If you enable analytics cookies, we may measure aggregated site usage to improve content and navigation. We reference Google Analytics 4 (“GA4”) as an example analytics tool; IP anonymization may be applied where supported. Typical GA4 cookies include _ga and _ga_XXXXXXXXXX. We set analytics retention to 14 months for reporting.

Marketing (consent required)

If you enable marketing cookies, we may measure advertising performance and create audience lists for remarketing and similar advertising features. Typical cookies include _gcl_au (Google Ads) and _fbp/_fbc (Meta). Marketing cookies are used for conversion attribution and to understand which ads lead to site visits or inquiries.

Beyond cookies, tracking may also occur through pixel tags or server-side events. If implemented, server-side events may send limited event data such as a page view or form submission. Some partners support hashed identifiers (for example, hashing an email address) for matching. These technologies are only used for analytics or marketing when you consent to the relevant category.

5. Consent (EEA/UK)

Users in the European Economic Area and the United Kingdom receive a consent notice under GDPR/UK GDPR rules. Analytics and marketing cookies activate only after explicit, informed, freely given consent (Art. 6(1)(a)). Your consent choice is recorded in the cookie_consent browser cookie for up to 12 months.

You can withdraw consent at any time by opening “Manage cookie preferences” in the footer of the website, or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.

6. Sharing With Advertising & Service Partners

We share limited data with service partners to operate the site and, if you consent, to measure analytics and advertising performance. We do not sell personal data. The categories of partners can include:

• Google LLC (Google Analytics 4, Google Ads, Tag Manager, remarketing): cookie IDs, usage data, and conversion events. Privacy information: https://policies.google.com/privacy.
• Meta Platforms, Inc. (Meta Pixel, Custom/Lookalike Audiences, Conversion API): page views, conversions, audience membership, and hashed identifiers when implemented. Privacy information: https://www.facebook.com/privacy/policy.
• Cloudflare, Inc. (CDN and security services): IP-based threat detection, performance optimisation, and security logging. Privacy information: https://www.cloudflare.com/privacypolicy/.

We do not permit these providers to use data collected from our site for their own independent commercial purposes. They process data on our instructions and/or as separate controllers for certain services, depending on the provider and configuration.

7. International Transfers

We are based in the Netherlands. Some partners (such as Google and Meta) may process data outside the European Economic Area, including in the United States. Where international transfers occur, we rely on appropriate safeguards, which may include:

• EU–US Data Privacy Framework (where applicable)
• UK Extension to the EU–US Data Privacy Framework (where applicable)
• Swiss–US Data Privacy Framework (where applicable)
• Standard Contractual Clauses (EU 2021/914) as a fallback safeguard
• UK International Data Transfer Addendum/IDTA as a fallback safeguard

You can request more information about transfer safeguards by contacting us using the details in Section 18.

8. Retention

We keep personal data only as long as needed for the purposes described in this policy and to meet legal, security, and operational requirements. Typical retention periods are:

• Contact and registration submissions: up to 2 years from the last interaction, to support follow-up and learner support continuity.
• Email correspondence: for the duration of the communication and typically up to 1 year thereafter, unless a longer period is needed for dispute handling.
• Server logs and security records: typically up to 90 days, unless extended for investigating abuse or incidents.
• Analytics data: 14 months for reporting settings (where analytics is enabled by consent).
• Marketing cookies: retained according to cookie lifetime (for example, 90 days for certain marketing identifiers), where enabled by consent.
• Cookie consent record: up to 3 years for audit and compliance evidence.
• Legal and tax obligations: where applicable, retention may be longer (often 6–10 years) for records required by law.

9. Your Rights (GDPR & UK GDPR)

Depending on your location, you may have rights regarding your personal data. Under GDPR/UK GDPR, these include:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, email [email protected]. We aim to respond within 30 days. For complex requests, we may extend the response time by up to 60 additional days as permitted by law.

If you are in the Netherlands, you can contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP). Information is available at https://autoriteitpersoonsgegevens.nl. EU-wide guidance is also available from the European Data Protection Board at https://edpb.europa.eu.

10. Children

This site is not directed at individuals under 16. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a child under 16 without appropriate consent, we will delete it promptly.

11. Do Not Track

This website does not respond to “Do Not Track” (DNT) browser signals. Third-party providers may have their own approaches to DNT and similar signals.

12. Account & Data Deletion Requests

This website does not require you to create an account to submit a registration inquiry. If you want us to delete personal data associated with your inquiry, email us at [email protected] with the subject line “Data Deletion Request”.

For security, we may ask for information to verify your identity before completing the request. We aim to complete deletion within 30 days, unless we must retain certain information to meet legal obligations or to establish, exercise, or defend legal claims.

13. Business Transfers

If PIMTV B.V. is involved in a merger, acquisition, asset sale, financing, reorganisation, or insolvency, personal data may be transferred to a successor entity or counterparty as part of that transaction. If such a transfer materially changes how personal data is used, we will provide notice on the website.

14. California (CCPA / CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act. Over the past 12 months, we may have collected the following categories of personal information:

• Identifiers: name, email, IP address, device identifiers (shared with service providers and, if consented, advertising partners).
• Internet or network activity: browsing and interaction data (shared with analytics and advertising providers when enabled by consent).
• Inferences: interests or preferences inferred from site usage for advertising relevance (only when marketing cookies are enabled by consent).

We do not sell personal information as defined by CCPA. We may share personal information for cross-context behavioral advertising when marketing cookies are enabled; California residents can opt out by using our cookie preferences panel via “Manage cookie preferences” in the footer.

Requests to know, delete, or correct can be submitted by emailing [email protected] with the subject “California Privacy Request”. Identity verification may be required. Authorized agents must provide written permission or proof of authority.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling that produces legal or similarly significant effects.

To submit a request, email [email protected] with the subject “Virginia Privacy Request”. If you want to appeal a refusal, email with the subject “Appeal of Refusal — Privacy Request”. We respond to appeals within 60 days.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the website, and where appropriate we will provide a notice at least 14 days before the change takes effect. The “Last Updated” date at the top of this page will be revised whenever we publish an update.

18. Contact

If you have questions about this Privacy Policy or how we process personal data, contact:

• Legal entity: PIMTV B.V.
• Address: Eerste Tuindwarsstraat 10, 1015 RV Amsterdam, Netherlands
• Email: [email protected]
• Phone: +31 20 808 2691