Privacy Statement Highway Academy

1. Introduction

In this privacy statement, we – https://highway-academy.nl – explain how we collect, use, and protect personal data when you visit our website or use our services.

2. Personal data we process

We only process data that you provide yourself or that is necessary for the execution of driving lessons:

• First and last name
• Address and contact details (email, phone number)
• Date of birth and – if relevant – BSN for CBR registrations
• Payment and invoice details
• Preferences (e.g., desired car or lesson times)

3. Purpose & legal basis of processing

1. Execution of agreement: planning and providing driving lessons, requesting exams with the CBR.
2. Legal obligation: administration and tax law.
3. Legitimate interest: improving our services and website.
4. Consent: sending (optional) newsletters or discount emails. You can always unsubscribe.

4. Retention periods

Data will not be kept longer than strictly necessary:

• Invoice and payment data: 7 years (tax retention obligation).
• Student/lesson file: 2 years after completion of the last exam or lesson.
• Mailing opt-ins: until you unsubscribe.

5. Sharing data with third parties

We do not sell your data to third parties. Data is only shared when necessary for the lesson agreement or due to a legal obligation, for example:

• CBR for theory and practical exams.
• Accounting office and payment service providers for bookkeeping.
• Authorities if legally required (e.g., Tax Office).

We sign data processing agreements with processors to ensure your privacy is protected.

6. Security

We take appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, and unwanted disclosure. Think of encrypted connections (HTTPS), access based on authorization, and regular backups.

7. Your rights

You have the right to:

• Access your personal data;
• Correct or delete data;
• Restrict or object to processing;
• Data portability;
• Withdraw given consent.

Requests can be sent to info@highwayacademy.nl . We respond within 30 days.

Not satisfied? You can file a complaint with the Dutch Data Protection Authority.

8. Changes to this statement

We may adjust this document from time to time. The most recent version is always on our website. In case of major changes, we inform you by email or when booking a new service.

9. Contact