Privacy Policy

Fire Safety Academy is a trading name of Brandpreventie Academy B.V. This policy explains how we handle personal data when you visit fire-safety.academy, request information, register for a course or use our wiki.

1. Who we are

Brandpreventie Academy B.V., trading as Fire Safety Academy
Ratelaar 39e, 3434 EW Nieuwegein, the Netherlands
Chamber of Commerce (KvK): 66573351
Email: info@bpacademy.nl
Phone: +31 85 303 52 00

We are the controller for the personal data described in this policy.

2. Whose data we process

We process data of website visitors, people who request a brochure or contact us, course participants and the organisations that register them, and users of our wiki.

3. What we process and why

Brochure requests and contact

When you use the brochure form or the contact form, we receive your name and email address, and anything you include in your message. The form entries are stored on our website and sent to us by email. We use this to send the brochure or answer your question, and may follow up once about the course you showed interest in. Legal basis: your request and our legitimate interest in responding to it.

Course registration

Name, organisation, email address, phone number, address and billing details and, where relevant, dietary requirements or accessibility needs that you share with us. We use this to handle your registration, invoice you or your employer, organise the course and issue your certificate of completion. Legal basis: performance of the agreement. Dietary and accessibility information is only used to arrange catering and access, and only with your consent.

Spam protection for our forms

Our forms are protected against spam with Google reCAPTCHA, a service of Google Ireland Limited. To distinguish people from automated programs, reCAPTCHA is loaded on the pages of our website. It collects technical data such as your IP address, browser and device information and how you interact with the page, and it places a cookie (_GRECAPTCHA). This data is sent to Google and may be processed outside the European Economic Area. Legal basis: our legitimate interest in protecting our forms against spam and abuse. Google’s privacy policy applies: policies.google.com/privacy.

Website statistics

We count visits to our website with Burst Statistics. Burst runs on our own web server and the data is not shared with others. It uses a cookie of our own (burst_uid) to recognise repeat visits. Legal basis: our legitimate interest in understanding how our website is used.

Only if you accept statistics cookies in the cookie banner, we also use Google Analytics 4, a service of Google Ireland Limited, on the website and the wiki. It counts page views of public pages; it is not used for logged-in users or for search results. Page addresses are sent without search terms or other parameters, and Google signals and ad personalisation are switched off. Google may process this data in the United States; Google LLC is certified under the EU–U.S. Data Privacy Framework. Legal basis: your consent, which you can withdraw at any time.

Wiki

Wiki accounts are created by us for our authors; visitors cannot create an account. If you have an account and edit the wiki, we store your username, email address and edit history. Our servers also log IP addresses for security. Legal basis: our legitimate interest in running and protecting the wiki.

Hosting, email and server logs

Our website, wiki and email are hosted by TransIP in the Netherlands. The web server records technical data, including IP addresses, in log files for security and troubleshooting. Our website also keeps a log of broken links and redirects, including IP addresses, for 7 days. Legal basis: our legitimate interest in running a secure website.

Cookies

We use functional cookies that the site needs to work, such as the cookie that stores your choice in the cookie banner and, when you log in, session cookies. Burst Statistics and Google reCAPTCHA place the cookies described above. Google Analytics cookies (_ga) are only placed after you consent to statistics cookies through the cookie banner. We do not use marketing cookies. You can change your choice at any time through “Cookie settings” in the footer of the website and the wiki.

4. Who we share data with

We do not sell personal data. We share it only where needed:

• with service providers that host our website, send our email and support our administration, under a data processing agreement;
• with Google, for spam protection and, only with your consent, website statistics, as described in section 3;
• for courses held outside the Netherlands, with the training venue and local partners, limited to what is needed for access, catering and organisation;
• with authorities where the law requires it.

5. International transfers

Some of our courses take place outside the European Economic Area, for example in the United Arab Emirates. If participant data has to be shared with a venue or partner there, we limit it to what is necessary and use appropriate safeguards, such as the European Commission’s standard contractual clauses, where required.

6. How long we keep data

• Brochure requests and contact messages: up to 2 years after the last contact.
• Registration and participant data: up to 2 years after the course, so we can confirm your participation or reissue a certificate.
• Invoices and financial records: 7 years, as required by Dutch tax law.
• Wiki account data: as long as the account exists. Edit history stays part of the wiki’s version history.
• Website statistics: Burst Statistics data stays on our own server until we delete it. Google Analytics keeps statistics for the retention period set in Google Analytics, at most 14 months.
• Log of broken links and redirects: 7 days. Server log files are kept by our hosting provider for a limited period for security.
• Your choice in the cookie banner: 1 year, after which we ask again.

7. Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access.

8. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to withdraw consent at any time, and to receive your data in a portable format. Email info@bpacademy.nl and we will respond within one month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Changes

We may update this policy. The date at the top shows when it was last changed.