Privacy & terms
Information about personal data and the terms for our services.
Updated on 13 October 2026
info@nassau420.nl
Privacy policy
1. Who we are
Nassau420 B.V. is responsible for the processing of personal data described here through Nassau420 and DUNDA and when handling enquiries. For questions or requests, contact info@nassau420.nl.
2. Data we process
We process information you enter or share with us, such as your name, organisation, email address, telephone number, enquiry and requested training, location or dates. We also process correspondence, proposal and agreement details, newsletter preferences and limited technical data needed to operate and secure the website.
3. Why we use data
We use your data to contact you, handle enquiries, prepare proposals and fulfil agreements. The legal basis is taking steps at your request or performing a contract. We may rely on legitimate interests for relationship management and security, balancing those interests against yours. We meet legal obligations for administration. We send newsletters after you actively subscribe; each newsletter includes an unsubscribe option. We do not sell personal data or make solely automated decisions with legal or similarly significant effects.
4. Website, cookies and external media
Our website uses services for hosting, security, statistics and managing cookie preferences. Language choices and temporary enquiry details may be stored on your device to make the website work. Where required, we ask for consent to non-essential cookies or tracking. You can change your choice in the cookie settings. External media, such as YouTube videos, may receive data when loaded; the provider’s privacy policy also applies.
5. Who receives data
Only staff and service providers who need data for their work receive access. This includes hosting and security, customer management, email, statistics and administrative support. Information necessary to fulfil an enquiry may be shared with the relevant service provider or location. We make appropriate arrangements with processors. We share data with competent authorities where required by law.
6. Processing outside the EEA
Service providers may process personal data outside the European Economic Area. Where necessary, transfers must rely on an adequacy decision, standard contractual clauses or another valid transfer basis with appropriate safeguards.
7. Retention
We retain data for as long as needed for its purpose. For enquiries and customer records, we consider how the enquiry is handled and the duration of the relationship. Newsletter data is retained until you unsubscribe; minimal suppression data may be needed to respect your choice. Statutory retention periods apply to administration. Security data is kept for as long as reasonably needed for security and incident investigation.
8. Photographs and videos
We request separate, specific consent before publishing identifiable people for promotional purposes. Taking part in training or accepting general terms does not constitute consent to publication. Consent can be withdrawn through info@nassau420.nl. We then stop future use on that basis and remove material from channels we control where reasonably possible. Withdrawal does not make earlier lawful use unlawful. Printed material already distributed and copies held by third parties cannot always be recalled.
9. Security and your rights
We take technical and organisational measures appropriate to the risks. Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing and withdraw consent. Send your request to info@nassau420.nl. We may ask for additional information to verify your identity and generally respond within one month. You can also complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.
10. Changes
We may update this policy when our services or processing change. The current version and update date appear on this page.
General terms and conditions
The general terms for our services are in the Dutch document below. Specific arrangements in a proposal or agreement continue to apply. The privacy policy separately explains how we process personal data.