privacy STATEMENT

PRIVACY STATEMENT – SCHOUTEN COMPANY

General information

Since 1980, Schouten Company has been a leading training and consultancy firm in the field of personal and organizational development.
In the course of its activities, the company processes personal data in accordance with the General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (UAVG), the Telecommunications Act, and other applicable laws and regulations.

Schouten Company also complies with the professional code of the Netherlands Institute of Psychologists (NIP) and adheres to the guidelines of the Accreditation Organisation of the Netherlands and Flanders (NVAO) for accredited higher education. Additionally, Schouten Company is certified by the Dutch Council for Training and Education (NRTO).

Data controller

The data controller for this personal data is Schouten Company B.V., based in Zaltbommel (“Schouten Company”). Each subsidiary is individually responsible for the data it processes for its operations. For more information, please refer to the privacy statement on the subsidiary’s respective website.

What personal data is collected, for what purposes, and on what legal grounds?

Schouten Company generally collects the following data from participants:

• Name, given names, initials, title, gender, date of birth, address, postal code, city of residence, phone number, and email address.

Additionally, when necessary, the following data may be collected from third parties:

• Citizen Service Number (BSN), other contact details as per contract, and bank account information.

For website visits, the following data may be collected:

• Browser type and version, operating system, IP address, server request time, user ID, and browsing behaviour on the website.

The data is processed under the performance of a contract for the following purposes:

• Managing registrations and participation in training, education, coaching, personal assessments, and scans (e.g., leadership training or internal company projects);

• Responding to information requests;

• Carrying out business operations;

• Providing access to online learning platforms;

• Publishing participant information via the website or learning portal;

• Calculating, recording, and collecting service fees, including outsourcing debt collection;

• Meeting tax authority requirements;

• Paying invoices for services received.

The data is also processed under legal obligation for:

• Meeting accreditation and certification requirements when applicable. If another law mandates it, nationality and place of birth may also be processed;

• Complying with NVAO accreditation criteria for higher education, specifically collecting CVs and copies of prior education diplomas.

Data is processed under legitimate interest for:

• Conducting statistical analyses to improve services and gather internal business insights;

• Placing essential and analytical cookies to ensure proper website functionality;

• Gathering food allergy information for catered events;

• Storing data on progress, organization, and outcomes of learning programs.

With consent, data may be processed for marketing purposes, such as:

• Sending information via web forms;

• Placing analytical and marketing cookies on our website;

• Contacting you to answer questions, provide information about our services, or invite you for a meeting;

• Keeping you informed about our activities based on your interests.

Data retention

Schouten Company retains personal data only as long as necessary for the stated purposes. In line with Dutch fiscal regulations, data is stored for a maximum of 7 years after the final training or coaching session, or shorter if legally required.

After the retention period, your data will be deleted unless we request your consent for continued communication. Upon your request, we will promptly delete your data.

Security

Schouten Company has implemented necessary technical and organizational measures to safeguard your data against unauthorized access, disclosure, alteration, or deletion, as well as against fire, theft, and similar risks.

Schouten Company holds ISO 27001 certification, demonstrating compliance with the highest standards of information security.

Data sharing with third parties

Schouten Company shares data with third parties only if required by law or under a data processing agreement, and only on explicit instruction from Schouten Company.

As a rule, personal data is not transferred outside the European Economic Area (EEA). If such transfer is necessary, it occurs only under an adequacy decision or another legal safeguard, such as binding corporate rules or EU model clauses.

Cookies and third-party websites

Schouten Company operates its own website at schoutencompany.com and uses cookies. Details can be found in our separate cookie policy.

Our website contains links and social media plugins from third parties. Schouten Company is not responsible for how these parties handle your data. We recommend reviewing their privacy statements.

Your rights and contact information

Under the AVG, you have the right to access, rectify, delete, restrict processing, and transfer your data. You may also object to processing in certain cases. For more information, visit the Dutch Data Protection Authority (AP) at www.autoriteitpersoonsgegevens.nl.

If you have questions or concerns about your privacy, please contact our Privacy Officer free of charge:

• By mail: Schouten Company B.V., Attn. Privacy Officer, Van Heemstraweg West 5, 5301 PA Zaltbommel
• By email: privacy.officer@sn.nl
• By phone: +31 (0)418-688651

We will verify your identity internally. If verification is incomplete, we will contact you. In any case, Schouten Company will respond within 30 days.

You can also file a complaint with the Dutch Data Protection Authority via their website.

Changes

Schouten Company may update this privacy statement at any time. The latest version is available on our website: https://www.schoutencompany.com/en/home/.

Last updated: April 2025