Privacy Policy
Geldwijs ("we", "us", "our"), a financial education company based in Rotterdam, the Netherlands, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share and safeguard your personal data when you visit our website, enroll in our courses, attend our workshops, or use our coaching services. It also describes your rights under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and other applicable Dutch and European data protection laws.
1. Data Controller
The data controller responsible for the processing of your personal data is:
- Company: Geldwijs
- Address: Coolsingel 42, 3011 AD Rotterdam, the Netherlands
- Email: [email protected]
- Phone: +31 30 249 53 81
If you have any questions about this policy or wish to exercise any of your rights, you can contact us at any time using the details above.
2. What Personal Data We Collect
2.1 Data you provide directly
- Contact details: name, email address, phone number when you complete a contact form, request a Free Money Check, subscribe to updates, or communicate with us by email, phone or otherwise.
- Course and coaching data: information you share during enrollment or coaching sessions, such as your financial goals, learning preferences, and relevant background details.
- Billing data: name, address, invoice details and payment information necessary to process purchases of courses or coaching services. We do not store full payment card details on our systems.
- Correspondence: records of communications between you and Geldwijs, including feedback, complaints and support requests.
2.2 Data collected automatically
- Technical data: IP address, browser type and version, device type, operating system, and time zone settings.
- Usage data: pages visited, time spent on pages, referral source, and interactions with our website content, collected through cookies and similar technologies (see our Cookies Policy for details).
3. Purposes and Legal Bases for Processing
We process your personal data only where we have a valid legal basis under the GDPR:
- Contract performance (Art. 6(1)(b) GDPR): to provide the courses, workshops and coaching services you have requested; to process payments; to manage your account and course access; to deliver the Free Money Check.
- Legitimate interests (Art. 6(1)(f) GDPR): to improve our website and services; to respond to inquiries; to ensure the security and integrity of our systems; to send service-related communications about your enrollment.
- Consent (Art. 6(1)(a) GDPR): to send marketing newsletters, place non-essential cookies, and process any data where consent is required. You may withdraw your consent at any time without affecting the lawfulness of prior processing.
- Legal obligations (Art. 6(1)(c) GDPR): to comply with Dutch tax, accounting, and record-keeping requirements.
4. Coaching Confidentiality
Financial information shared during personal coaching sessions is treated with strict confidentiality. Coaches may take notes necessary to deliver your tailored plan, but these are stored securely, accessible only to your coach and, where relevant, our administration team. Geldwijs never sells, rents or shares your personal financial information with third parties for marketing purposes. Our education is independent, and we do not earn commissions on any products we may discuss.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to keep our website functioning (essential cookies) and, with your consent, to gather analytics and support marketing activities. When you first visit our website, you are presented with a cookie consent banner allowing you to accept all cookies, reject non-essential cookies, or save your individual preferences. You can change or withdraw your cookie preferences at any time. For full details, please refer to our Cookies Policy.
6. Data Sharing and Recipients
We do not sell your personal data. We only share data with:
- Service providers (processors): hosting providers, email service providers, payment processors, e-learning platform providers and analytics tools, bound by data processing agreements in line with Art. 28 GDPR.
- Professional advisers: accountants and legal advisers where necessary, under confidentiality obligations.
- Public authorities: where disclosure is required by law, court order or to protect vital interests.
Where personal data is transferred outside the European Economic Area (EEA), we ensure an adequate level of protection through adequacy decisions or Standard Contractual Clauses approved by the European Commission.
7. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy:
- Contact form inquiries: up to 12 months after our last correspondence, unless a service follows.
- Customer and billing records: 7 years, in accordance with Dutch statutory record-keeping obligations.
- Course progress and access data: for the duration of your course access plus 12 months.
- Coaching notes: for the duration of the coaching relationship plus 12 months.
- Marketing consent records: until you withdraw consent or are inactive for 3 years.
Data that must be kept longer due to legal requirements will be restricted in use and securely stored.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. These measures include encryption in transit (TLS), access controls on a need-to-know basis, secure data storage, employee confidentiality obligations, and regular review of our security practices. No system is completely secure, but we continuously work to safeguard your information.
9. Your Rights Under the GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15): request confirmation of whether we process your data and obtain a copy of it.
- Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Right to restriction of processing (Art. 18): request that we temporarily restrict processing of your data.
- Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
- Right to object (Art. 21): object to processing based on legitimate interests or to direct marketing at any time.
- Right to withdraw consent (Art. 7): withdraw consent for consent-based processing at any time.
To exercise any of these rights, please contact us at [email protected] or write to Geldwijs, Coolsingel 42, 3011 AD Rotterdam, the Netherlands. We will respond to your request within one month of receipt. If your request is complex or numerous, we may extend this period by two further months and will inform you accordingly. We may ask for proof of identity to protect your data from unauthorized access.
10. Right to Lodge a Complaint
If you believe that our processing of your personal data violates data protection law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Hoftoren, Zoetermeer, the Netherlands, or with the supervisory authority of your place of residence or work. We would appreciate the opportunity to address your concerns directly before you contact the authority, so please do not hesitate to reach out to us first.
11. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe a child has provided us with personal data without proper consent, please contact us and we will promptly delete it.
12. Marketing Communications
We only send marketing emails with your consent, obtained at the point of subscription or registration. Every marketing email contains an unsubscribe link, and you may also withdraw consent by contacting us at [email protected]. Transactional and service-related communications about your enrollment or coaching are not marketing and will continue as necessary to provide the service.
13. Automated Decision-Making and Profiling
Geldwijs does not make decisions based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
14. External Websites
Our website and course materials may reference other organizations or tools for educational purposes. This Privacy Policy does not apply to third-party websites, and we encourage you to review their privacy practices before providing any personal data to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or services. The current version is always published on this page with the date of the last update noted at the top. If the changes are significant, we will notify you by email or through a notice on our website before they take effect.
16. Contact Us
For any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact:
- Geldwijs
- Coolsingel 42, 3011 AD Rotterdam, the Netherlands
- Email: [email protected]
- Phone: +31 30 249 53 81