Privacy · Privacy Policy
Privacy Policy
This policy describes what personal data is processed when you use the nl-learn.nl website, on what legal basis, to whom it is transferred, and what rights the user has. This document has been prepared in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).
Last updated: 12 September 2026
1. Data Controller
The data controller, as defined in Article 4(7) of the GDPR, is the individual owner of the nl-learn.nl website. The website is operated in a personal capacity and is not the activity of a legal entity.
For inquiries regarding the processing of personal data, including the exercise of the rights listed in section 7, please use the feedback form. Your message will be sent directly to the website owner. To receive a response, you must provide your email address in the corresponding field of the form.
2. Principles of Processing
The website does not require registration, does not create user accounts, and does not provide paid services. Personal data is not used for profiling and is not subject to automated decision-making as defined in Article 22 of the GDPR.
Processing is limited to the purposes listed in sections 3–5. Data is not sold or transferred to third parties for advertising purposes.
3. Website Visit Statistics
The website uses Google Analytics 4 — a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Purpose of processing: to determine the popularity of individual sections of the website and to improve learning materials.
Categories of data: IP address, addresses of viewed pages, date and time of access, device type, browser and its language settings, referral source.
Legal basis: consent of the data subject — Article 6(1)(a) GDPR, as well as Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet) regarding the placement of cookies.
Before consent is obtained, the service operates in limited consent mode (Google Consent Mode): cookies are not placed, identifiers are not assigned, and session data is not transmitted. Refusal of consent does not affect the availability or functionality of the website.
Storage period: event data is stored by Google for no longer than 14 months from the date of collection, after which it is automatically deleted.
Withdrawal of consent: consent can be withdrawn at any time using the methods specified in the 'Withdrawal of Consent' section. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
4. Inquiries via the Feedback Form
Purpose of processing: to review error reports and suggestions, and to send a response.
Categories of data: subject of the inquiry, message text, attached images and video recordings, the address of the page from which the inquiry was sent, device type and browser window size, and the email address if provided by the user. When reporting an error directly from an exercise, the exercise number and text, the correct answer, and the user's chosen answer are additionally transmitted.
Providing an email address is voluntary. Without it, the inquiry will be reviewed, but it will not be possible to send a response.
Legal basis: consent of the data subject — Article 6(1)(a) GDPR, expressed by submitting the form.
Delivery method: inquiries are transmitted to the website owner via the messaging service Telegram. A separate database is not maintained on the website's side; the inquiry text and attached files are stored on Telegram Messenger Inc.'s servers.
Storage period: until the inquiry is reviewed and correspondence is completed, but no longer than necessary for the stated purposes. An inquiry is deleted before the specified period upon user request.
Users are advised not to include information unrelated to the subject of the inquiry, including third-party data, in the message text or attached images.
5. Technical Operation of the Website
Server logs. Website hosting is provided by Vercel Inc. Each time the website is accessed, the IP address, date and time of access, requested address, and server response code are automatically recorded in the logs. The legal basis is legitimate interest as defined in Article 6(1)(f) GDPR, consisting of ensuring the website's operability and security. The storage period is determined by the hosting service provider.
Fonts are hosted on the website's own server and loaded with it; no requests are made to third-party font services.
6. Cookies and Browser Data
The cookies listed in the first row are only placed after consent is received. Local storage and browser cache entries are not cookies, are not transmitted to the server, and are only accessible to the user's browser; their use is necessary for the site to function and does not require consent.
Learning progress is stored only in the user's browser. The site does not receive this data, so if site data is cleared or you switch to another device, your progress will restart.
Affiliate Links. Some links on the site are affiliate links (for example, to Preply via the Impact affiliate network and to italki); they are marked as such. The site does not transmit any user data through these links and does not host partner scripts on its pages. After clicking, the user is directed to the partner's site, which may set its own cookies and process data according to its own privacy policy. If the user pays for a service, the site will receive a commission; the price for the user does not change because of this.
| Name | Type | Purpose | Storage Period |
|---|---|---|---|
| _ga, _ga_* | cookie, analytical | distinguishing visitors in Google Analytics statistics | up to 2 years |
| nl-consent | local storage | saving the user's consent decision | until site data is cleared |
| nl-leren:locale | local storage | selected site language | until site data is cleared |
| nl-leren.progress.v1 | local storage | learning progress: unlocked lessons and exercise results | until site data is cleared |
| nl-leren.days.v1 | local storage | study days for the 'streak' counter, no more than 60 dates | until site data is cleared |
| nl-learn-* | local storage | interface state: selected tab, collapsed blocks, hidden prompt to install the app | until site data is cleared |
| pages-*, assets-*, media-* | browser cache (Cache Storage) | copies of opened pages, styling, and covers for offline site functionality | until the site is updated or site data is cleared |
7. Data Recipients and Transfers Outside the EEA
Personal data is not transferred to other parties, except where such transfer is explicitly provided for by law.
| Recipient | Categories of Data | Basis for Transfer |
|---|---|---|
| Google Ireland Limited (Analytics) | IP address, page view and device information | consent; transfer to the USA based on the adequacy decision of the EU–US Data Privacy Framework |
| Telegram Messenger Inc. | content of communication and attached files | consent; transfer outside the EEA based on Article 49(1)(a) GDPR |
| Vercel Inc. | IP address, page address, request service data | legitimate interest; adequacy decision of the EU–US Data Privacy Framework |
8. Data Subject Rights
In accordance with Articles 15–21 of the GDPR, the user has the right to request:
- access to personal data and obtaining a copy thereof (Article 15);
- rectification of inaccurate data (Article 16);
- erasure of data (Article 17);
- restriction of processing (Article 18);
- data portability to another controller (Article 20);
- objection to processing carried out on the basis of legitimate interest (Article 21).
9. Withdrawal of Consent
Consent to data processing for statistical purposes can be withdrawn at any time. To do this, please use the form at the bottom of this page or delete the website data using your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal, and it does not restrict access to the website's materials.
10. Contacting the Supervisory Authority
Users have the right to lodge a complaint with a supervisory authority for personal data protection. The competent authority for the website's location is the Autoriteit Persoonsgegevens (Netherlands, autoriteitpersoonsgegevens.nl). Users also have the right to contact a supervisory authority in their usual place of residence.
11. Policy Changes
This policy may be amended if new features or services are introduced on the website. The current version will be published on this page with the date indicated. If changes affect the scope of data processed or the purposes of processing, consent will be requested again.
Change your analytics choice