Privacy statement
Last updated on 9 October 2026. We handle your data with care, in line with the General Data Protection Regulation (GDPR).
1. What data we collect
That depends on the form. Consultants give their name, email, LinkedIn profile, area of expertise, level of AI knowledge, CV and motivation. Students also give their school or program and expected graduation date, and their interests. Employers give their company name, email, location, industry, type of work, the experience level they want, the certificate they want and a description of what needs to be done. Employers can also upload a job description or project brief. For a course advice request we ask for your name, email, your interest and your question, and optionally your company. Do not put sensitive information, such as your health or your national ID number, in your CV or motivation.
2. Why we use that data
We use it to review your application, to match profiles with employer requests, to contact you, to send you a payment link and to help you sign up for an exam. That is necessary to prepare and carry out an agreement with you (Article 6(1)(b) GDPR). We also use a limited amount of data to keep the website secure, for example to block too many login attempts. We have a legitimate interest in that (Article 6(1)(f) GDPR).
3. Webinars
If you want to reserve a spot for a webinar, we only ask for your email address. If no webinar is scheduled yet, you can leave your email address to hear as soon as there is a date. We only use the address to inform you about webinars (Article 6(1)(a) GDPR, your consent). We keep it until the webinar has taken place or, on the list for new webinars, until we have emailed you or until you ask us to delete it. Send us a message if you want to be removed sooner.
4. How long we keep data
We keep a rejected application for 6 months. We keep an active profile for as long as you use it. If you have not used your profile for 24 months, we delete it. We keep employer requests for up to 12 months after the last contact. We keep payment records for 7 years, because the law requires it. You can also ask us at any time to delete your data sooner.
5. Who we share data with
Our website and database are hosted by our hosting provider, Hostinger. What you fill in on a form is sent by email (with any attachment) to our contact address. That email lands in our mailbox, which is also hosted by Hostinger. If there is a match, we show your profile to the employer it fits. If we help you sign up for a Claude exam, Anthropic, PBC receives the data needed for that. What you give to Anthropic yourself is handled by Anthropic. We have not chosen a payment provider yet. Once we have, we will list it here. We load the site’s fonts from Google Fonts, which means Google receives your IP address.
6. Cookies
We only use functional cookies. If you use a form, Google also sets a cookie to protect against spam. Which cookies these are, and what for, is described in our cookie policy.
7. Protecting the forms
To prevent spam and abuse, we protect the sign-up forms with Google reCAPTCHA. As soon as you start filling in a form, we load the Google service. Google then receives your IP address and data about your browser and about how you use the page (for example your mouse movements), and uses that to judge whether you are a human. We only get a score back. We do this on the basis of our legitimate interest in preventing abuse of our website (Article 6(1)(f) GDPR). Google sets a cookie on your device for this, see our cookie policy. Google is an American company, see also the heading Data outside the EU. What Google does with that data is described in the Google privacy policy.
8. Data outside the EU
Anthropic and Google are American companies. As a result, data such as your IP address at Google Fonts, or what you pass on to Anthropic, may end up outside the European Union.
9. Your rights
You may see your data, have it corrected, have it deleted, have the processing restricted and have your data transferred. You may object to the use of your data. Contact us to exercise your rights. We reply within a month. If you disagree with our answer, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the supervisory authority in your own country.