Privacy Policy

Last Updated: March 12, 2026

1. Introduction & Controller Identity

This Privacy Policy explains how RE B.V. (“RE”, “we”, “our”, or “us”) collects, uses, and protects personal data when you visit our website, submit a form, register interest in an educational event, or otherwise interact with us. We provide educational business lectures, executive seminars, and learning programs throughout the Netherlands. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

Data Controller: RE B.V., Van Beekstraat 2, 1121 NN Landsmeer, Netherlands. Contact email: [email protected]. Our activities do not require the appointment of a Data Protection Officer under GDPR; however, you can reach us at the email address above for any privacy-related questions.

This Privacy Policy applies to all website visitors and individuals communicating with RE in connection with our educational events and services. It should be read alongside our Cookie Policy and Terms.

2. Personal Data We Collect

We collect only the data that is necessary for the purposes described in this Policy:

Identity and contact data: full name, email address, telephone number, and organisation details where provided.
Form content: free‑text messages, event interest selections, preferred date windows, and practical notes such as group size or accessibility needs.
Technical data: IP address, browser type and settings, device and operating system information, language preference, and approximate location derived from IP.
Usage data: pages viewed, time on page, navigation paths, referring pages, and on‑site interactions (e.g., clicks on navigation items or buttons).
Cookies and identifiers: essential cookies for site functionality and, with consent, analytics and marketing identifiers. See Section 4 and our Cookie Policy for details.
Conversion data: information indicating that a visit or form submission followed an advertisement or campaign tag, where consent for marketing cookies has been given.

We do not intentionally collect special category data (such as health information, political opinions, religious beliefs), financial account details, or government identifiers through the website.

3. Why We Process Personal Data & Legal Basis

We process personal data for the following purposes and under the following legal bases (GDPR Article 6):

Responding to enquiries and managing event registrations: to take steps at your request prior to entering into an agreement and, where applicable, to perform our agreement (Art. 6(1)(b)).
Sending requested information about events and schedules: consent at the moment you submit the form and ask us to contact you (Art. 6(1)(a)). You may withdraw consent at any time.
Analytics and performance measurement: only with your consent to analytics cookies (Art. 6(1)(a)).
Marketing and remarketing: only with your consent to marketing cookies (Art. 6(1)(a)).
Security and fraud prevention: our legitimate interests in protecting the website and our users (Art. 6(1)(f)).
Legal and tax compliance: to comply with legal obligations, including record-keeping (Art. 6(1)(c)).

Automated decision‑making (Art. 22 GDPR): We do not engage in automated decision‑making or profiling that produces legal or similarly significant effects on individuals.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our website and, subject to your consent, to measure performance and support advertising. Our Cookie Policy provides full details. In summary, we use three categories:

Essential cookies: required for core functionality, security, and consent storage. These operate without consent.
Analytics cookies (consent): used to collect aggregated statistics on site usage. Typical examples include Google Analytics 4 identifiers like “_ga” (2 years) and “_ga_XXXXXXXXXX” (2 years). IP addresses are anonymised in analytics tools where supported.
Marketing cookies (consent): used for remarketing, conversion attribution, and audience measurement (for example, Google Ads “_gcl_au” (90 days) or Meta “_fbp” and “_fbc” (90 days)).

Beyond cookies, some providers use tags or server‑to‑server tools that process limited device or event data. We activate analytics or marketing technologies only after you grant consent via our cookie banner or preferences panel. You can change your choices at any time via “Manage cookie preferences” in the footer. For complete details, see our Cookie Policy.

5. Consent Management (EEA/UK)

Users in the European Economic Area and the United Kingdom receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies are set only after you give informed, freely given consent. Your selection is stored in a “cookie_consent” cookie for up to 12 months. You may withdraw consent at any time via our cookie preferences link or by clearing cookies in your browser. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

6. Sharing With Service and Advertising Partners

We share personal data with carefully selected service providers for the purposes described in this Policy. These include:

Analytics and advertising partners (e.g., Google Analytics 4, Google Ads, and Meta) to measure aggregated performance and, with consent, to run remarketing or conversion measurement.
Security and hosting providers (e.g., content delivery, firewall, and uptime monitoring) to protect our website and ensure reliability.
Professional advisers (accountants, legal counsel) where necessary for compliance and corporate governance.

We do not sell personal data. We require service providers to process data only on our documented instructions and not to use it for their own independent commercial purposes.

7. International Data Transfers

Some providers may process data in countries outside the EEA, including the United States. Where data is transferred internationally, we rely on appropriate safeguards such as participation in the EU‑US Data Privacy Framework, the UK Extension to the DPF, the Swiss‑US DPF, and where necessary, Standard Contractual Clauses (EU 2021/914) or the UK International Data Transfer Agreement. These mechanisms aim to ensure a level of protection essentially equivalent to GDPR standards.

8. Data Retention

We retain personal data only for as long as needed to fulfil the purposes for which it was collected or to satisfy legal, accounting, or reporting requirements. Typical retention periods are:

Contact and enquiry records: 2 years from the last interaction, unless a longer period is required by law.
Analytics data: up to 14 months in analytics tools, where configurable.
Marketing cookies and identifiers: per cookie lifetime (see Cookie Policy).
Email correspondence related to events: duration of the relationship plus 1 year.
Server logs: approximately 90 days for security and troubleshooting.
Cookie consent record: up to 3 years for audit purposes.

9. Your Rights Under GDPR

Subject to conditions and exemptions in the GDPR and Dutch law, you have the following rights over your personal data:

Right of access: obtain a copy of your personal data and related information.
Right to rectification: correct inaccurate or incomplete data.
Right to erasure: request deletion in certain circumstances.
Right to restriction: limit processing in specific cases.
Right to data portability: receive data in a structured, commonly used, machine‑readable format and transmit it to another controller where technically feasible.
Right to object: object to processing based on legitimate interests and to direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint: with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

To exercise your rights, contact us at [email protected]. We will respond within one month of receiving your verified request, extendable by up to two further months for complex or numerous requests. If we cannot meet your request, we will explain why and outline your options to challenge the decision.

10. Children’s Data

Our website and educational events are intended for adults and students in professional contexts. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us without appropriate consent, please contact us and we will delete such data promptly.

11. Do Not Track

Some browsers offer a “Do Not Track” (DNT) setting. Our website does not respond to DNT signals. Cookie preferences can be managed directly through our on‑site cookie banner and preferences panel, which provide clear control over analytics and marketing cookies.

12. Access, Correction, and Data Deletion Requests

You may request access to the personal data we hold about you, ask us to correct inaccurate information, or request deletion where applicable. To submit a request, email [email protected] with “Data Request” in the subject line and provide sufficient information to verify your identity. We may ask for additional details necessary to confirm your identity before acting on your request. We will complete verified requests within applicable legal timeframes.

13. Business Transfers

If RE B.V. engages in a merger, acquisition, corporate reorganisation, asset sale, financing, or insolvency event, personal data may be transferred to a successor or affiliate as part of that transaction in accordance with applicable law. If we make material changes to how personal data is used following such a transfer, we will provide a clear notice on our website.

14. California Privacy Notice (CCPA/CPRA)

Although RE B.V. is established in the Netherlands, visitors from California may have rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA. Over the past 12 months, we may have collected and disclosed the following categories of personal information to service providers for business purposes: identifiers (e.g., name, email address, IP address, device identifiers); internet or network activity (e.g., pages visited, interactions); and inferences (e.g., approximate interests from page categories) for advertising on a consented basis. We do not sell personal information as defined by CCPA. We may “share” personal information for cross‑context behavioural advertising only after you have consented to marketing cookies.

Subject to exceptions, California residents can request to know, delete, or correct personal information; and opt out of sale or sharing. To exercise rights or submit an authorised agent request, email [email protected] with the subject “California Privacy Request”. We will verify requests using information you provide and data in our records. We will not discriminate against you for exercising a privacy right.

15. Virginia (VCDPA) Notice

If you reside in Virginia, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), including rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling that produces legal or similarly significant effects. To exercise your rights, contact [email protected] with the subject “Virginia Privacy Request”. If we deny your request, you may appeal by emailing us with the subject “Appeal of Refusal — Privacy Request”.

16. Nevada Notice

We do not sell personal information as defined under Nevada law. Nevada residents may submit a verified request to opt out of the sale of covered information by emailing [email protected] with the subject “Nevada Do Not Sell Request”.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Material changes will be announced via a notice on our homepage at least 14 days before taking effect. The “Last Updated” date at the top of this page will be revised accordingly. We encourage you to review this Policy periodically to stay informed about our data practices.

18. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us using the details below:

RE B.V.
Van Beekstraat 2, 1121 NN Landsmeer, Netherlands
Email: [email protected]

Supervisory Authority in the Netherlands: Autoriteit Persoonsgegevens. You also have the right to lodge a complaint with the authority in the EU country of your habitual residence or place of work.