Privacy Policy

This Privacy Policy explains which personal data DILO-ONLINE collects, why this data is used and how it is handled with care.

1. Who is responsible for your personal data?

DILO-ONLINE is the data controller responsible for the personal data processed as described in this Privacy Policy.

Business name: DILO-ONLINE
Chamber of Commerce (KvK) number: 42016288
Address: Haya van Someren-Downerpad 40, 3207 DK Spijkenisse, the Netherlands
Email address: info@dilo-online.nl

If you have any questions about this Privacy Policy or about the processing of your personal data, please contact us by email.

2. What personal data do we process?

DILO-ONLINE only processes personal data that is necessary to respond to enquiries, organise and provide lessons, maintain administrative records and process payments.

Depending on your contact with us and the services you use, we may process the following data:

Contact details: name, email address, telephone number or WhatsApp number and, where necessary, address details.
Information about your lesson preferences: your current level of Spanish, learning goals, preference for private or group lessons, preference for online or in-person lessons and your availability.
Lesson information: scheduling, attendance, progress, agreements made, notes regarding the learning process and teaching materials used.
Administrative and invoicing information: name, address details, invoice details, agreed lesson price and information about payment status.
Payment information: information required to send a payment request and information visible when receiving and verifying a payment.
Communication data: messages and correspondence via the contact form, email and WhatsApp.
Additional information: information that you voluntarily provide in a message, during an introductory meeting or during lessons.

When you visit the website, DILO-ONLINE also processes limited technical and statistical information about the use of the website, such as pages visited, the date and time of the visit, the referring page, browser type, operating system and device type.

For website analytics, DILO-ONLINE uses Burst Statistics in cookieless mode. No analytics cookies are placed and visitors are not tracked across different days.

3. What do we use personal data for?

DILO-ONLINE uses personal data only for clear and necessary purposes. Personal data is processed on the basis of a valid legal basis under the General Data Protection Regulation (GDPR).

Responding to enquiries and scheduling an introductory meeting: to respond to your message, discuss your requirements and arrange a free introductory meeting. The legal basis for this processing is taking steps at your request prior to potentially entering into a contract.
Organising and providing Spanish lessons: to schedule lessons, provide teaching materials, record agreements and support your learning process and progress. The legal basis for this processing is the performance of a contract.
Communication: to stay in contact by email or WhatsApp regarding enquiries, lessons, scheduling, changes and other practical matters. The legal basis for this processing is taking preparatory steps or performing a contract.
Administration, invoicing and payments: to prepare invoices, send payment requests, verify payments and maintain business records. The legal bases for this processing are the performance of a contract and compliance with statutory administrative and tax obligations.
Handling questions, complaints or disputes: to verify agreements made and properly address questions or complaints. The legal basis for this processing is DILO-ONLINE’s legitimate interest in properly providing its services and managing its business operations.
Website analytics: DILO-ONLINE uses Burst Statistics to gain insight into website usage, popular pages and the number of contact enquiries submitted. The legal basis for this processing is DILO-ONLINE’s legitimate interest in managing, securing and improving the website. Burst Statistics is configured in privacy-friendly cookieless mode. No analytics cookies or persistent fingerprints are used, and visitors are not tracked across different days or sessions. Statistical data is stored locally within DILO-ONLINE’s WordPress environment.

4. How long do we retain personal data?

DILO-ONLINE does not retain personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Enquiries without further follow-up: data relating to individuals who request information but do not become students is deleted no later than 6 months after the last contact.
Lesson and learning support data: information about lessons, level, learning goals, progress, attendance and agreements made is deleted no later than 1 year after the lessons have ended.
Communication: messages sent via the contact form, email or WhatsApp are retained for the period applicable to the purpose of the communication: a maximum of 6 months for enquiries without further follow-up and a maximum of 1 year after lessons have ended for students.
Administrative and invoicing data: invoices and other information forming part of the tax administration are retained for 7 years, as required by law.
Website data and statistics: a maximum of 24 months.

Where data is still required to deal with an outstanding question, complaint or dispute, it may be retained for longer. In such cases, DILO-ONLINE will not retain the data for longer than necessary.

5. Who do we share personal data with and where is it stored?

DILO-ONLINE does not sell personal data. Data is only shared with or stored by service providers where this is necessary for the website, administration, communication, lessons or payments.

Webempresa: for website hosting and the storage of data submitted through the website, including contact form submissions.
Moneybird: for customer administration, invoicing and bookkeeping.
ING: for sending payment requests and receiving and verifying payments.
Google: Gmail is used for email communication and Google Meet for providing online lessons.
WhatsApp Business: for direct communication regarding enquiries, scheduling and lessons when you choose to use WhatsApp.
Notion: for organising lessons and keeping necessary notes regarding scheduling, level, learning goals and progress.
Own computer: certain data and lesson notes may be stored locally on a secure computer.

For website analytics, DILO-ONLINE uses Burst Statistics. Statistical data is stored locally in the WordPress database hosted by Webempresa and is not used for advertising or creating user profiles. The sharing of anonymous usage data with Burst Statistics is disabled.

Where a service provider processes personal data on behalf of DILO-ONLINE, appropriate arrangements regarding the protection and processing of that data are made where necessary. Some service providers also process data under their own legal responsibility and privacy policies.

DILO-ONLINE may also disclose personal data where required by law or when requested to do so by a competent public authority.

6. Transfers of personal data outside the EEA

DILO-ONLINE uses various online service providers. Some of these service providers may process or store personal data outside the European Economic Area (EEA).

Where personal data is processed outside the EEA, this will only take place where a valid international data transfer mechanism is in place. This may include, for example, an adequacy decision by the European Commission or the use of approved Standard Contractual Clauses and, where necessary, additional safeguards.

More information about international data transfers and the safeguards used can be found in the privacy policies of the relevant service providers.

7. How do we protect personal data?

DILO-ONLINE takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse or unwanted disclosure.

The security measures used include, among other things:

access to personal data is limited to the owner of DILO-ONLINE;
the computer and online accounts are protected with personal passwords;
separate, strong passwords are used for different services and are managed with a password manager;
the operating system and software used are regularly updated;
the computer uses Windows’ built-in security features;

8. What privacy rights do you have?

You have various rights regarding your personal data. Depending on the circumstances and the legal basis for the processing, you may ask DILO-ONLINE to:

Access: inform you which personal data relating to you is being processed and provide you with a copy of that data;
Rectification: correct inaccurate or incomplete personal data;
Erasure: delete your personal data where DILO-ONLINE no longer needs it or where another valid reason for deletion applies;
Restriction: temporarily restrict the use of your personal data;
Data portability: receive personal data that you have provided yourself in a structured and digital format, where this right applies;
Object: object to processing based on a legitimate interest.

You can submit a request by email to info@dilo-online.nl. Please clearly indicate which right you wish to exercise. DILO-ONLINE may request additional information to verify your identity and to prevent personal data from being disclosed to the wrong person. DILO-ONLINE will generally respond to your request within one month. Where a request is complex or several requests are submitted at the same time, this period may be extended in accordance with the GDPR. You will be informed of any such extension within the first month. If you are not satisfied with the way DILO-ONLINE handles your personal data or your request, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. What cookies does this website use?

The DILO-ONLINE website currently uses only one necessary cookie to ensure that the website functions properly and to remember visitors’ cookie preferences.

The moove_gdpr_popup cookie is placed after you make a choice via the cookie banner. This cookie stores your preference for 7 days and is not used for analytics, advertising or user profiling.

DILO-ONLINE does not use analytics cookies or marketing cookies.

For privacy-friendly website statistics, DILO-ONLINE uses Burst Statistics in cookieless mode. This analytics tool does not place analytics cookies. Statistical data is processed and stored locally in the WordPress database.

If Google Analytics, embedded videos or other external services are added in the future, they will only be activated in accordance with the applicable consent requirements. The cookie banner, Cookie Policy and this Privacy Policy will then be updated accordingly.

You can view and change your preferences through the cookie settings on the website.

10. Automated decision-making

DILO-ONLINE does not make decisions about individuals that are based solely on automated processing and that produce legal effects or otherwise significantly affect those individuals.

Enquiries, lesson recommendations, scheduling, communication and other decisions regarding the services provided are personally reviewed and handled.

11. Changes to this Privacy Policy

DILO-ONLINE may update this Privacy Policy when its services, website, systems used or applicable laws and regulations change.

The most recent version will always be published on this page. Where a change has significant consequences for the way personal data is processed, DILO-ONLINE will inform the individuals concerned where this is reasonably possible and necessary.

Last updated: 14 August 2026