Privacy Policy

Made on April 20th 2018 / in effect on April 20th 2018

© Pencils & Stories

1 Definitions

1.1 Pencils & Stories: Henrike Dijkstra

1.2 Student: you

1.3 The course: the “Your Comic Journey” course

2 Information about Pencils & Stories

2.1. Address:

Pencils & Stories; Henrike Dijkstra

Europaplein 555

3526 WK Utrecht

The Netherlands

Email: [email protected]

Telephone: 00316 2466 7982

2.2 Legal information:

Pencils & Stories has been registered in the Dutch Chamber of Commerce (Kamer van Koophandel) under number: 30245029

Pencils & Stories is VAT registered and operates under VAT number: NL147009443B01

3 Your Privacy

3.1 Your privacy is important to me. I will only gather information from you that is necessary to provide you with the services related to the “Your Comic Journey” course. I will never sell your data or give it to third parties for commercial purposes.

3.2 If a new version of this privacy policy is released, it will replace all previous versions.

3.3 This privacy policy explains how Pencils & Stories processes your data, what rights you have and what to do if you have a request related to your data.

4 Which data is stored and processed?

3.1 Pencils & Stories gathers data to comply with (inter)national tax laws and to be able to provide you with the services related to the course.

3.2 Pencils & Stories asks you for:

• Your name, your company name and your address and VAT number (if applicable); this is needed for send you an invoice. And since I need to comply with tax laws, it’s important to know if students reside in the EU or outside the EU and if they own a registered company.
  • This data needs to be stored and needs to be kept for the next 7 years (counting from the year 2018) by Dutch law, in case the Dutch Tax Authorities need to review my business administration.
  • After this time the data will be safely destroyed.
• Your payment information, bank number and/or creditcard information; this is necessary to process your payment.
  • Payment will be handled through Stripe https://stripe.com/us/privacy and Quaderno. https://quaderno.io/privacy/ These are third party (payment) processors that I need in order to receive payments from you and to make sure I compy with local tax laws. I have ensured these companies are GDPR compliant and I have signed a data processing agreement with them. The information they gather (as described above) will only be used to process your payment to me.
  • Pencils & Stories uses Zapier https://zapier.com/privacy/ for enrolling you into the course. I have also signed a data processing agreement with them. Pencils & Stories only shares information with third parties like these that is required for the service they are offering and contractually binds these providers to keep any information I share with them as confidential and to be used only for particular purposes.
  • By buying the course you explicitly consent to, and authorize me to sub-contract these third parties this manner.
• Your email address; I will use your email address for keeping in touch with you about the course. I will not add you to my email list, as you need to give consent for this. I might ask you for this consent later, but you always have the right to refuse.
  • I will keep your email address for as long as you make use of the service of the course through Thinkific.

3.3 To be able to provide you with the course content, materials etc. I make use of the platform “Thinkific” which has it’s own data policy here: https://www.thinkific.com/resources/privacy-policy/

3.4 At the end of the year I will hand over my administration to my bookkeeper. I will ensure this person uses safe systems and is GDPR compliant.

3.5 I store my administration safely on my computer. I have signed data processing agreements with any third parties and I use strong and different passwords to all the services and devices I use. Where possible, I make use of fingerprint technology or two-factor authentication. It’s impossible to say a data breach will never occur, but where I can, I will use all safety measures possible. In case of a data breach I am obliged to contact the Dutch Data Protection Authority. They will determine my next actions and, if necessary, I will contact you.

5 Your rights

As a resident of the EU and/or as a customer of Pencils & Stories, you have the following rights:

5.1 Right to information

The student can ask what data is being processed and why.

5.2 Right to access

The student can ask to view their information and request a copy of the personal data.

5.3 Right to rectification

The student can ask for the personal data to be modified if they believe the data is not up to date or accurate.

5.4 Right to withdraw consent

The student can withdraw their previously given consent for processing of their personal data for the purpose of the course. If Pencils & Stories is bound by law to keep storing certain information I will inform you of this.

5.5 Right to be forgotten / right to erasure

The student can ask for the deletion of their data. This is usually the case when a customer relationship has ended. However, I have to comply with the Dutch laws, which might mean I need to keep certain data for 7 years, counting from the year 2018.

5.6 Right for data portability

The student can ask me to transfer their personal data. I can provide you your data, or you might ask me to transfer it to another controller. (If reasonable) In that case, the data must be provided in a machine-readable electronic format.

5.7 All these requests can be made by contacting me through [email protected] or through letter, to:

Pencils & Stories

Europaplein 555

3526 WK Utrecht

The Netherlands

Please include the best way for me to respond to your request (email, letter etc.)

5.8 Complaints about how Pencils & Stories handles data can be made at the Dutch Data Protection Authority: https://autoriteitpersoonsgegevens.nl/en