Privacy Policy

Privacy & Cookie Statement 

26 March 2024

Introduction The Delphine Design Program (hereinafter: 'DDP' or 'we') is a company providing online courses to individual designers and design lovers from all disciplines. We process data from our members, relations, prospects, and website visitors to carry out our services as effectively as possible. We do this in accordance with the Dutch General Data Protection Regulation (GDPR) / privacy legislation.

In this privacy statement, you can read about what the DDP does with your personal data. Here, you can find information about what personal data we collect from you, how we use it, and how long we keep it. You can also learn about your rights regarding your personal data and how to exercise those rights. At the bottom, you will find our cookie statement and our contact information. DDP may update this statement, for example, in response to changes in legislation or changes in DDP's internal privacy policy. By using this website and/or by purchasing our services or products, you agree to our privacy policy. If you have any questions, please contact us at [email protected] or +31 (0)6-42 82 99 78.

1. Whose personal data do we process? DDP processes the personal data of its members who are affiliated as individuals or as employees/contacts with a design agency or organization. DDP is deeply connected with the design sector and maintains contacts with various organizations and individuals, such as lobbying and collaboration, organizing events and training, and sponsorship. We also recruit new members, employees, partners, and relations and gladly inform individuals who have expressed interest in DDP and the design profession. And, of course, we work with various suppliers and service providers.

2. What personal data do we process? From our members, we may process the following personal data:

• Ordinary data: name, address, place of residence (visiting/billing/correspondence address), telephone number, email address, gender, date of birth and death, website address and social media accounts, company name, position, VAT number, bank account number and payment details, login details, education(s) received and graduation year or start year of design practice, diploma, design disciplines and specializations, employer(s)/work relationship, type of products, fee discounts, participation or purchase data (event, training, product, etc.), financial data (bank account number, credit card number), and other personal data actively provided to us, for example, by creating a profile on this website, in correspondence, and by telephone.
• Special data: if you upload a (portrait) photo of yourself or others on our website or when BNO uses photos of events, we also process your special and/or sensitive personal data, namely data about your 'race'. From our relations, partners, prospects, stakeholder/lobby contacts, interested parties, and suppliers, we may process the following personal data:
• Ordinary data: first and last name, address, place of residence (visiting/billing/correspondence address), telephone number, email address, gender, website address, company name, VAT number, bank account number and payment details, participation or purchase data (events, training, product, etc.), financial data (bank account number, credit card number), and other personal data actively provided in correspondence, by telephone, or for example by creating a profile on this website or sending a resume. From website visitors, we only process an email address if you sign up for the newsletter. We do not collect identifiable data about your visit (see also our cookie statement). If you make a purchase, we consider you as a relation (see above).

3. Why do we process this personal data? We process data for various purposes: Membership administration and services to members and relations Recruitment Newsletter Suppliers Automated decision-making

4. Legal bases and retention periods. DDP processes the personal data of members based on the membership agreement and the law. We may retain your data during your membership and up to 10 years thereafter. We must retain your financial data for 7 years, and we retain other data because experience shows that former members may reapply for membership within that period. After 10 years, we delete your data. However, it may be that your personal data still appear in important documents of DDP that we (have) keep for the archival of the history of BNO. Persons who purchase services or products from us or deliver to us also enter into an agreement with us. For the performance of this agreement, we may process personal data. We retain this data for up to 2 years after the service or product has been purchased or delivered. We can keep financial data for a maximum of 7 years. We process data from prospects, stakeholder/lobby contacts, and interested parties based on written consent or legitimate interest. Think of giving a business card or linking via LinkedIn or another network. We retain your personal data as long as you are seen as a prospect, stakeholder/lobby contact, and/or interested party. We retain data from applicants for a maximum of 1 month, unless we have permission to keep them longer. In that case, we keep them for a maximum of 1 year. Everyone who receives one or more newsletters from us has signed up via the website with your name and email. We retain this data until you unsubscribe and for a maximum of 3 months thereafter. To the extent that we process data for which there is no agreement or consent, we do so because we have a legitimate interest, namely promoting and strengthening the design profession, including informing, building networks, and providing our services. The law may prescribe a different period. If so, BNO will comply with the prescribed statutory retention period.

5. Sharing personal data with third parties. We do not sell your data to third parties and only provide it to third parties when necessary for the performance of our agreement with you or to comply with a legal obligation. We work, among other things, with a (member) administration system in the cloud, hosting parties for our website and email servers, a PSP (payment service provider), a printer/scanner connected to our network, a research agency for the branch monitor, an external accountant, and Dropbox and Google Drive. We conclude processing agreements with parties processing your data on our behalf. DDP remains responsible for these processing operations. With other parties, such as the accountant, we make good agreements about confidentiality and security.

6. Security. We take the necessary organizational and technical measures to secure your data as much as possible. For example, we use usernames and passwords and different levels of authorization for our databases and hardware. The number of devices on which your data can be accessed is limited to only the necessary devices. We have a clean desk policy at the office and close rooms and cabinets when necessary. We make agreements with the parties that provide and maintain our IT systems about technical security and make secure backups. Your visit to the website is secured with an SSL certificate and signed with DNSSEC signing. This means that your connection is private and better protected.

7. Your rights. As a data subject, you have several rights. You have the right to access the personal data we process about you. If the data we process about you is