Privacy Statement — EmbeddedCoach.nl

In my practice as an organizational coach, I work with personal and sometimes sensitive information. I attach great importance to the protection of your privacy and the security of your personal data. In this statement, I explain how I handle your data, in accordance with the General Data Protection Regulation (GDPR).

1. Who am I?

The website www.embeddedcoach.nl is owned and managed by EmbeddedCoach.nl. I am the data controller for the processing of personal data as set out in this privacy statement.

Company name: Embedded Coach
Based in: Blaricum, The Netherlands
Chamber of Commerce number: 42093087
Dutch VAT number: BTW NL005494467B82
Email address: info@embeddedcoach.nl

2. What data do I process?

When you use my services, visit my website, or contact me, I may process the following data:

First and last name
Contact details (email address and telephone number)
Company name and position
Invoice and payment details (for business assignments)
Substantive information and reflections from coaching sessions (exclusively for the purpose of carrying out the coaching process)
3. Purpose and legal basis for data processing
I process this data exclusively on the basis of legal grounds (performance of the contract, legal obligation, or consent) for the following purposes:

To contact you and to be able to carry out the agreed services (coaching/advice).

For the financial and administrative handling of the assignment.

To comply with legal obligations (such as the tax retention obligation for tax returns).

Confidentiality: Everything discussed in an individual coaching session is subject to my strict duty of confidentiality. This substantive information is never shared with third parties (such as an employer or HR professional), unless explicit and written permission has been given in advance by the Coachee themselves. 4. Retention Period
I do not retain your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected:

Administrative and tax data: I retain this for 7 years in accordance with the statutory tax retention obligation of the Tax and Customs Administration.

Substantive coaching notes: These are retained for a maximum of 2 years after the completion of a program (with a view to potential follow-up sessions) and are then permanently and securely destroyed.

5. Sharing with Third Parties
I never sell or rent your data to third parties. I only share data with external parties if this is strictly necessary for the execution of our agreement (such as a certified accounting program for invoicing) or to comply with a legal obligation. With companies that process your data on my behalf (such as the web hosting provider or software suppliers), I conclude a data processing agreement to guarantee the same level of security and confidentiality.

6. Cookies and Website Visits
My website uses functional and analytical cookies that do not infringe on your privacy. These are necessary for the technical operation of the website and your ease of use. Embedded content: Articles on this site may contain embedded content (e.g., videos). This content behaves exactly as if you were visiting the source’s website itself; they may collect data about you in accordance with their own privacy policy.

Comments: If visitors optionally leave comments on the site, we collect the data shown in the comment form, the IP address, and the browser user agent string to support spam detection.

7. Your rights
You have the right to access, correct, or have your personal data deleted. Additionally, you have the right to withdraw any consent for data processing or to object to the processing.

You can send a request for access, correction, deletion, or data transfer to info@embeddedcoach.nl. I will respond to your request as soon as possible, but in any case within four weeks.
Should you have a complaint about the way I handle your data, I would naturally like to hear about that first. You also have the legal right to file a complaint with the national supervisory authority, the Dutch Data Protection Authority.

8. Security
I take the protection of your data seriously and take appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. The website uses, among other things, a reliable SSL certificate (recognizable by ‘https’ in the address bar) to ensure that your data is transmitted securely.