This Privacy Policy explains how Brickfield Systems B.V. ("we", "us", "our") collects, uses, stores, and protects personal data when you use our website and training services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), known in the Netherlands as the Algemene Verordening Gegevensbescherming (AVG).
1. Data Controller
The data controller responsible for your personal data is:
Brickfield Systems B.V.
Herengracht 420
1017 BZ Amsterdam
Netherlands
KvK (Chamber of Commerce): 82941753
BTW-nummer (VAT): NL862491738B01
Email: info@brickfieldsystems.nl
Phone: +31 20 794 3168
2. What We Collect
We may collect the following categories of personal data:
- Identity data: Full name, job title, company name.
- Contact data: Email address, phone number, business address.
- Account data: Login credentials and training platform preferences.
- Usage data: Course progress, completion status, quiz scores, and lab activity.
- Technical data: IP address, browser type and version, operating system, time zone, and device information collected automatically when you visit our website.
- Communication data: Records of correspondence when you contact us by email, phone, or through our website forms.
- Payment data: Billing address and invoice details. We do not store credit card numbers directly; payment processing is handled by third-party providers.
3. Legal Basis for Processing
We process your personal data on one or more of the following legal bases under Article 6 of the GDPR/AVG:
- Contract performance: Processing is necessary to deliver the training services you have signed up for, including account creation, course access, and certificate issuance.
- Legitimate interest: We process certain data to improve our services, analyse usage patterns, and ensure the security of our platform. We carry out a balancing test to ensure our interests do not override your rights.
- Consent: Where required, such as for marketing communications or non-essential cookies, we collect your explicit consent before processing. You may withdraw consent at any time.
- Legal obligation: We may process data to comply with applicable Dutch and EU laws, including tax and accounting obligations.
4. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your training account and deliver course content.
- To process free trial signups and communicate your access details.
- To issue invoices and manage payment records.
- To send service-related notifications, such as course updates or trial reminders (e.g., a reminder email on day 12 of a free trial).
- To respond to your enquiries and provide support.
- To analyse site usage and improve our training materials and platform.
- To comply with legal and regulatory requirements.
5. Third-Party Services
We may share your data with the following categories of third parties, solely for the purposes described in this policy:
- Hosting providers: Our website and training platform are hosted on cloud infrastructure located within the European Economic Area (EEA).
- Payment processors: We use third-party payment processors to handle invoicing and payment collection. These processors operate under their own privacy policies and are contractually obligated to protect your data.
- Analytics providers: We may use analytics tools to understand how our site is used. Where possible, we anonymise or pseudonymise data before processing.
- Email service providers: We use email services to deliver transactional messages and, where you have consented, marketing communications.
We do not sell your personal data to any third party.
6. Cookies
Our website uses cookies to distinguish you from other users, analyse traffic, and remember your preferences. We use the following types of cookies:
- Strictly necessary cookies: Required for the website to function. These do not require consent.
- Analytics cookies: Used to collect anonymous information about how visitors use our site. These are only placed after you provide consent.
- Preference cookies: Used to remember settings such as cookie consent choice.
You can manage your cookie preferences through our cookie consent banner or through your browser settings. Blocking certain cookies may affect the functionality of our website.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Account and training data: Retained for the duration of your active account, plus 12 months after your last activity, unless you request earlier deletion.
- Invoice and payment records: Retained for 7 years in accordance with Dutch fiscal record-keeping requirements (Algemene Wet inzake Rijksbelastingen).
- Communication records: Retained for up to 24 months after the last interaction.
- Cookie data: Analytics cookies expire after 12 months. Preference cookies expire after 6 months.
After the retention period, data is securely deleted or anonymised.
8. Your Rights
Under the GDPR/AVG (Articles 15–22), you have the following rights regarding your personal data:
- Right of access (Article 15): You may request a copy of the personal data we hold about you.
- Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
- Right to erasure (Article 17): You may request deletion of your data where there is no legitimate reason for us to continue processing it.
- Right to restriction (Article 18): You may request that we restrict the processing of your data in certain circumstances.
- Right to data portability (Article 20): You may request that we transfer your data to another controller in a structured, commonly used, machine-readable format.
- Right to object (Article 21): You may object to processing based on legitimate interest or for direct marketing purposes.
- Right not to be subject to automated decision-making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
If you believe that we have not handled your data in accordance with the GDPR/AVG, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can reach them at autoriteitpersoonsgegevens.nl.
9. International Transfers
We primarily store and process your data within the European Economic Area (EEA). Where it is necessary to transfer your data outside the EEA — for example, to a sub-processor located in another jurisdiction — we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision under Article 45 of the GDPR. We assess each transfer to ensure your data receives a level of protection equivalent to that guaranteed within the EEA.
10. How to Exercise Your Rights
To exercise any of your rights under the GDPR/AVG, or to ask questions about how we process your data, please contact us:
Email: info@brickfieldsystems.nl
Phone: +31 20 794 3168
Post: Brickfield Systems B.V., Herengracht 420, 1017 BZ Amsterdam, Netherlands
We will respond to your request within 30 days. If your request is complex or if we receive a large number of requests, we may extend this period by up to two additional months, in which case we will notify you of the extension and the reasons for it.
We may ask you to verify your identity before processing your request to ensure the security of your personal data.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS), access controls, regular security assessments, and staff training on data protection obligations. While we take all reasonable steps to protect your data, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website and services after changes are posted constitutes your acknowledgement of the updated policy.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
Brickfield Systems B.V.
Herengracht 420
1017 BZ Amsterdam
Netherlands
Email: info@brickfieldsystems.nl
Phone: +31 20 794 3168