Privacy policy
last updated 2026-10-30
Who is responsible
Controller: Jeroen van der Meij. Contact for privacy requests: info@whonixcourse.eu. Full operator identity, address and phone are on the contact page.
What we collect and why
| data | purpose | legal basis (GDPR) | kept for |
|---|---|---|---|
| Application: name, email, background, your message | Answering your application and telling you when enrolment opens | Steps at your request before a contract, art. 6(1)(b) | 12 months, or until you ask us to delete it |
| Account: email, hashed password, lesson progress | Providing your account | Contract, art. 6(1)(b) | Until you delete your account |
| Password recovery request: a hashed one-time token linked to your account | Letting you choose a new password | Contract, art. 6(1)(b) | Up to about 1 hour |
| Emails you send us | Answering you | Legitimate interest, art. 6(1)(f) | As long as the conversation needs, up to 24 months |
| Server logs: IP address, time, requested page | Keeping the site secure and running | Legitimate interest, art. 6(1)(f) | Up to 14 days |
| Analytics and advertising data, via Google cookies | Measuring visits and which ads lead to applications | Your consent, art. 6(1)(a) | See the cookie policy |
If you buy the course, we also keep the invoice records that Dutch tax law requires, normally for seven years.
We don't sell your data. We don't use automated decision-making that has legal or similar effects on you.
Who receives it
- Our hosting provider, which stores the website and its database on our behalf.
- Our email provider, for messages between us.
- Google Ireland Limited, for Google Analytics and Google Ads, only if you accept those cookies. Google may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
You can ask for access to your data, and to have it corrected, deleted, restricted, or handed over in a portable format. You can object to processing based on legitimate interest. You can withdraw consent at any time through "cookie settings" in the footer. Write to info@whonixcourse.eu and we will answer within one month.
You may also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.
Security
Passwords are stored as salted hashes, and connections to the site use HTTPS. No system is perfectly secure. Please don't send us sensitive details about yourself or your work through the application form.
Changes
If this policy changes, the new version and its date appear on this page.