Privacy Policy
At The Liberators B.V. (TL), we take a radical approach to organizational change, by empowering people within organizations to drive change themselves. We provide professional services — including training, classes, workshops, and events — to help teams improve where it matters most.
To be able to offer our services to organizations and individuals, we need to process some personal data. We firmly believe in the principles of the GDPR, so we purposefully collect and store as little personal data as we can and only for as long as needed. This privacy statement provides information about the data we collect, why we collect it, on what basis, how we further handle your data, and how you can exercise your rights.
Personal Data We Collect
TL collects and processes personal data from (corporate) customers and the individuals who take part in our services. We receive this data directly from the data subject. We collect the following data:
Class and workshop registrations: When you register for a paid class or workshop, we ask for your email address, name, address, payment information, and — where relevant — details about your company. We use this to inform you about the course you registered for and to send your invoice. Before and after the course, we send one or two emails about your upcoming course, or with additional materials afterwards.
Event registrations: When you sign up for one of our events on EventBrite, we ask for your email address so we can send you information about the event and materials afterwards.
Newsletter sign-ups: If you sign up for one of our newsletters, we ask for your email address and use it to send you a personalized newsletter. When you unsubscribe, your personal data is removed.
Payment and billing details: For our paid services, we collect payment details and a billing address so we can process your order and send your invoice.
Correspondence: If you email us or message us through other platforms, we may keep a history of those messages to track conversations.
We Collect This Data for the Following Purposes
To provide our services: We process your contact details to register you for classes, workshops, and events, to communicate with you about them, and to send materials before and after.
To process orders and payments: We process contact details, billing addresses, and payment details of customers who purchase our paid services, including to validate the payment method and issue invoices.
To send our newsletter(s): If you sign up for our newsletters, we use your email address to send you the ones you signed up for. You can always unsubscribe, and when you do, your personal data is removed. We won't send you marketing emails unless you specifically opt in to receive them.
Beyond the purposes described above, we don't use your personal data for any purpose other than what you provided it for. We don't sell your personal data or trade it with others for commercial purposes.
Legal Bases
TL may only process personal data if it has a lawful basis for doing so. We process the above personal data on the basis of the following legal grounds:
Performance of a contract: We process your personal data where this is necessary to deliver the services you have registered or contracted for — for example, to enrol you in a class, communicate with you about it, and send your invoice.
Legal obligation: We process personal data where we have a legal obligation to do so. For example, we store personal data as part of our financial records to comply with our obligations under tax and accounting laws.
Legitimate interests: We may also process your personal data where this is necessary for a legitimate interest pursued by our customers or by us — for example, to communicate with participants and other representatives of our customers, and to keep contact details of (business) customers for future contact.
Consent: Where we rely on your consent — for example, to send you marketing emails — you can withdraw that consent at any time.
Storage and Data Processors
We don't sell or provide your personal data to third parties. However, we do use suppliers to help us deliver our services — for example, TransIP for hosting, MailGun for newsletter sending, and EventBrite for event registrations — with whom we have appropriate agreements and who only process personal data on our behalf. Our processors are bound by a duty of confidentiality and handle your personal data securely.
We store personal data within the European Economic Area (EEA). No transfer of your personal data takes place to countries outside the EEA. Should we transfer personal data outside the EEA in the future, we will ensure we do so in accordance with the GDPR and take appropriate measures to ensure the data is properly protected.
How We Keep Personal Data Safe
We make sure we properly secure your personal data across all our systems, using various technical and organizational measures.
- The little personal data we collect, we store with strong encryption in secure databases and on secure servers accessible only with logins, augmented wherever possible with two-factor authentication (2FA). Email addresses are stored with a row-level salt and strong AES-based encryption where possible.
- Through access control, we ensure only authorized TL accounts have access to the systems containing your personal data. The users of these accounts are employees who necessarily need this access to carry out their work. Data held on third-party platforms is stored according to that platform's security protocols.
- If we determine that unauthorized third parties have compromised your personal data, we will inform the authorities within 72 hours of discovery.
How Long We Keep Your Data
In line with our aim to store as little personal data as possible, we keep personal data only for as long as needed for the purpose it was collected. When you unsubscribe from a newsletter, your data is removed. We retain invoices in our accounting software for up to 7 years to comply with tax laws; these invoices may contain your name and billing address.
Rights
If we process your personal data for the purposes described in this policy, you have a number of rights under the GDPR. You have the right to access your personal data on request, to amend it if necessary, or to have it erased. You can also object if you disagree with the processing, and you may ask TL to restrict the processing of your personal data.
Requests can be sent to the (email) address described below. In order to process your request, TL will verify your identity — for example, by asking a number of identifying questions.
If you have a complaint about how we process your personal data, we would like to hear from you. You can also, at any time, file a complaint with the Dutch Data Protection Authority about TL's processing of personal data at autoriteitpersoonsgegevens.nl.
Cookies
We only use functional cookies. We don't use analytical cookies to track your behaviour on a website or across websites.
Contact Details
If you have any questions about this privacy statement, our mission, or our services, please contact info@theliberators.com. Our postal address is Parelmoervlinder 8, 3544 DH Utrecht. If you want to exercise your rights, you can also reach us in these ways.
Changes
TL may amend this privacy statement. We will announce such a change on our website. Earlier versions of this privacy statement can be found on our website. If we want to substantially change the purposes of processing and the processing is based on your consent, we will ask for your consent for those new purposes first. We reserve the right to change this policy as circumstances change, as our services are updated, or when required to do so by law.