Privacy Policy

1. Who we are

Sude Nexus is a Netherlands-based Erasmus+ training organisation. We provide professional development courses and mobility services for education professionals across Europe. Our website is at sudenexus.nl.

For the purposes of GDPR and Dutch data protection law, Sude Nexus is the data controller for the personal data collected through this website.

2. What this policy covers

This policy explains what personal data we collect when you use this website, how we use it, who we share it with, how long we keep it and what your rights are. We have written it in plain language because we believe you have the right to understand clearly how your data is handled.

3. What data we collect and why

3.1 When you request a course programme PDF

We collect your first name, last name and email address. We use this to send you the PDF you requested. The legal basis is contractual necessity: you have requested a document and we need your contact details to deliver it. We keep this data for up to three years from the date of the request, unless you ask us to delete it sooner.

3.2 When you opt into our newsletter (optional)

We collect your first name, last name and email address, along with the date and time you gave consent and which form you used. We use this to send you occasional updates about new courses, upcoming dates and Erasmus+ news. The legal basis is consent. You can withdraw consent at any time by clicking the unsubscribe link in any newsletter email or by emailing info@sudenexus.com. We keep this data until you unsubscribe or ask us to delete it.

3.3 When you invite us to contact you directly (optional)

We collect your first name, last name and email address, along with the course you requested, the date and time and the fact that you ticked the direct contact checkbox. We use this to follow up with you personally about the course or similar programmes. The legal basis is consent. You can withdraw consent at any time by emailing info@sudenexus.com. We keep this data for up to three years from the date of consent.

3.4 When you use the general contact form

We collect your first name, last name, email address, institution name, country, institution type, Erasmus+ status, areas of interest, any course or destination preferences you share, your message and any other information you choose to provide. We use this to respond to your enquiry. The legal basis is legitimate interests. We keep it for up to three years from the date of the enquiry.

3.5 Website analytics

We may collect anonymised data about how visitors use the website, including pages visited, time spent on pages, referring websites and general geographic location at country or region level. We do not collect data that identifies individual visitors through analytics. The legal basis is legitimate interests, subject to your cookie consent preferences.

3.6 Cookies

We use cookies on this website. A cookie is a small text file stored on your device when you visit a website. We use the following types:

• Essential cookies: These are necessary for the website to function. They allow the contact and PDF request forms to work. These cannot be turned off.
• Analytics cookies: These help us understand how visitors use the site. You can choose whether to allow these when you first visit the site.

You can manage your cookie preferences through the cookie settings banner that appears when you first visit sudenexus.nl. You can also update your preferences at any time using the Cookie Settings link in the footer, or delete cookies from your browser at any time.

4. Who we share your data with

We do not sell your personal data to anyone. We do not share it with third parties for marketing purposes.

We use a small number of trusted service providers to operate this website and handle the data it collects. These providers act as data processors under our instruction and are bound by data processing agreements. They include:

• Our form processing service: [INSERT FORM SERVICE NAME, e.g. Formspree]. Your form submissions pass through their servers. They process this data solely to deliver it to us.
• Our email service: [INSERT EMAIL PLATFORM NAME]. We use this to send PDFs, newsletter emails and automated responses.

If we ever need to share your data with any other organisation we will update this policy and, where required by law, seek your consent first.

5. Your rights

Under GDPR you have the following rights in relation to your personal data:

• The right to access: You can ask us what personal data we hold about you.
• The right to rectification: You can ask us to correct inaccurate personal data.
• The right to erasure: You can ask us to delete your personal data. We will do so within 30 days.
• The right to restrict processing: You can ask us to stop processing your personal data in certain circumstances.
• The right to data portability: You can ask us to provide your personal data in a portable format.
• The right to object: You can object to processing based on legitimate interests.
• The right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at info@sudenexus.com. We will respond within 30 days.

6. How to complain

If you have a complaint about how we handle your personal data, please contact us first at info@sudenexus.com. If you are not satisfied with our response, you have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

7. Changes to this policy

We may update this privacy policy from time to time. We will note the date of the last update at the top of the page. If we make significant changes we will notify users who have opted into our newsletter.

8. Contact

For any questions about this privacy policy or how we handle your personal data, contact us at:
Email: info@sudenexus.com
[INSERT REGISTERED COMPANY NAME]
[INSERT ADDRESS]
The Netherlands