The privacy statement

Introduction
This privacy and cookie statement (“Statement”) describes the collection of personal data of her clients, prospects, students, alumni, (website) visitors, and other contacts by the SUE| Behavioural Design and SUE | Behavioural Design Academy (hereafter SUE). We do this to service the contacts mentioned above as best as possible and to reach our goals. In this Statement, we explain why and in which way we use your data. All personal data is processed under the provisions of the AVG (Algemene Verordening Persoonsgegevens)/GDPR (General Data Protection Regulation). This Statement is drafted in English as we have Dutch as international contacts.

Should you have any questions regarding our Statement, you can contact [email protected].

 

Who are we?
We are a training institution specialising in behavioural psychology and design. This  Statement concerns all personal data we process – including the personal data we collect in partnerships with third parties (for instance, when working on larger-scale events). SUE is responsible for processing your data. Our contact details are:

‘s-Gravenhekje 1a
1011 TG Amsterdam, the Netherlands
E-mail: [email protected]

Telephone number: +31 (20) – 223 46 26
Website: https://suebehaviouraldesign.com

 

SUE processes your data for the following purposes:

1.1 Legislative obligations
A small part of our data processing is obligated by law. This mainly concerns personal data needed to meet our tax obligations.

1.2 Student/alumni administration and service provision
In our student administration, we keep an overview of prospects, students, and alumni to perform or deliver requested services to you. For example, when you decide to request a service, we will use the personal data you provide for communication purposes.

1.3 Agreements
In addition, we process personal data for the general purpose of concluding business agreements and to perform our obligations under these agreements.

1.4 Evaluate and improve our products and services
We can use your personal data to operate better, improve, and maintain our services and website. For example, we may use them to send our students or alumni information, updates, schedules, practical information, additional training, etc.

1.5 Prevent or detect criminal offences and legal obligations
We may also use the personal data to prevent fraud, abuse, illegal uses, and violations of our terms & conditions and to comply with court orders, governmental requests, or applicable law.

1.6 Communication
You can reach us via different channels: by phone, by post, by email, LinkedIn, and Facebook. We also process personal data to make this possible.

1.7 Newsletters and mailings
You can subscribe to several newsletters. Sometimes, these are personalized; sometimes, they aren’t. If you don’t want to receive these emails anymore, you can unsubscribe in the footer of every email.

1.8 Privacy Guarantee
To be able to get audited, we process personal data.

1.9 Acquisition (Marketing)
SUE makes acquisitions for new students, sponsors, partners, trainers, speakers and new employees. We also process contact details and areas of interest to keep in touch with everyone. For SUE campaigns (and SUE related campaigns such as our training and events) we also process personal data. Such as IP address, cookie ID, social ID and/or surf behaviour. We do this to show suitable advertisements in the right places. We also use targeting and differentiation for SUE and SUE-related campaigns on social media. On these platforms, personalized ads could be shown.

1.10 Improvement SUE service
To improve our level of service, we also collect personal data. For instance, clicking behaviour on our website, so we see which articles interest people the most or open rates of our newsletters and emails to see which emails are preferred.

 

SUE processes this type of personal data
SUE only processes personal data that is an identified or identifiable person, also known as the data subject. Personal data includes information such as their:

• Name
• Financial address/card number for invoice
• Job relative information: Function, function description
• E-mail address
• Phone number
• Medical information: Only for breakfast/lunch: food allergy

SUE doesn’t process any personal data that is based on:

• Racial or ethnic origin;
• Sexual orientation;
• Political opinions;
• Religious or philosophical beliefs;
• Trade-union membership;
• Genetic, biometric or health data;
• Personal data related to criminal convictions and offences.

 

Rights of those involved
Under the AVG/GDPR, data subjects have certain rights. We promise to comply with these rights. Please let us know if you have questions, tips, or remarks.

• Information and right to access your data: You can always request information on which data we process about you and why we process these data.
• Rectification: Do you think we have incorrect data about you? Or do you want your data updated? Let us know, and we will update the data right away.
• Removal: You can always request the removal of your data.
• Limitation: If you feel we process your data wrongly or illegally, you can always limit the processing of your data.
• Objection: You can always object to the processing of your data. If your objection is against marketing, we’ll stop your data usage as soon as possible.
• Transmission of data: Under the AVG/GDPR, you have a new right to have your data transmitted. If you want to exercise this right, please get in touch with us.

Next, to this, you can also always:

• Withdrawal of consent: for instance, for subscribing to emails. If you want to limit any other consent form, please get in touch with us.
• File a complaint with the authorized supervisory authority: In the Netherlands, this is the Autoriteit Persoonsgegevens (AP). If you have any complaints or comments about our privacy practices, we would appreciate it if you contacted us first. Together, we can try to find and remove the source of your complaint.

You will not be opposed if you exercise your privacy rights. You can send your request to [email protected]. Be as clear and precise as possible in your email. In any case, a state which rights you want to exercise and on what grounds. In general, we will answer your request within one month after we receive it. If we need more time, we will inform you within one month after receipt of your request that we need a maximum of two more months. We will notify you whether we can fulfil your request within this period. We will let you know the ground(s) if we cannot fulfil your request.

 

Retention of your data

• We will not retain your data longer than necessary or for any purposes other than those for which they are initially collected.
• When we process your data based on the preparation or the performance of an agreement with you, we will store your data for up to one year after our last agreement with you has been fulfilled.
• When we process your data based on a legal obligation or based on a legitimate interest, we will store your data for the period determined by the law.
• In case of a dispute or a legal claim, we will process your data only for that purpose.

 

Lawfulness of the processing of personal data
The processing of your data is based on the following grounds:

• your consent;
• the preparation or performance of an agreement with you;
• compliance with legal obligations;
• our legitimate interests.

When we process personal data based on your consent, you can always revoke it. We may have a legitimate interest in processing your data, namely direct marketing, calamities, legal procedures, camera surveillance, acquisition, relation management, and recruitment. We can be legally or contractually obliged to process your data. The processing of your data can also be necessary to enter into a contract with you. In these cases, we can only continue our relationship with you when you provide us with the needed personal data.

 

Third parties
We sometimes use service providers ourselves. These include our payment providers, shipping providers, information technology providers, mailing or messaging companies, and marketing companies.

• These selected parties may process your data only to the extent necessary to perform such functions on our behalf and subject to our instructions.
• We may disclose your data to outside individuals and/or companies who help us offer you the products and services we offer and create, operate, and maintain the website. We provide these companies only with the information they need to perform their services.
• We have procedures to ensure that these processors, service providers and third-party companies value your privacy.
• We can be obliged to share your data with third parties in case of legal obligations.
• In all other cases, we will not share your data with third parties without your consent.

 

Social Media
Our website uses social media buttons to refer to Facebook, LinkedIn, Instagram and X. These buttons can be used to gain information about SUE or to promote or share information about us on social media. We are not responsible for the privacy statements of Facebook, LinkedIn, Instagram and X since we do not have any influence on the way these social media buttons function. By using a social media button, these parties will place a ‘social media cookie’ to recognize you when you use the button. The privacy policies of these social media providers change regularly. You can access the privacy policies of Facebook, LinkedIn, Twitter, Instagram and Twitter on their websites.

 

Links
On the SUE websites, you can find links to other organizations’ websites. SUE is not responsible for the way it processes personal data. To learn more about this, you can read the privacy statements of these specific organizations.

 

Automated decision-making and profiling
SUE does not process personal data in a way that automated decision-making and profiling are stated as defined in the AVG (Algemene Verordening Persoonsgegevens) /GDPR (General Data Protection Regulation).

 

Statement changes
We reserve the right to change our Statement at any time. Our Statement was updated/supplemented on 11 July 2024.