Privacy policy

Who is responsible

Rijmaatje operates this website and handles requests about data processed within the platform. The responsible organisation and privacy contact are listed below.

Responsible organisation

Athena Solutions

Address

Zomerkade 19, 1273 SR Huizen

Registration number

42034766

Privacy contact

[email protected]

What we use your data for

You can search, save and compare driving schools without an account. For contact and trial-lesson or information enquiries, we process the name, contact details, subject or lesson preferences, message and permission you provide for the described handling. New-school registrations contain business and profile information, lesson offers, prices, any instructor details and a separate private contact. Claims and corrections are assessed before changing a profile; private contact details and internal notes are not part of the public profile. For a review, we keep your private name and email address separate from your chosen public name, text, scores and any experience details. Optional review photos stay private until you consent to photo publication and an operator has assessed publication. Operators record handling statuses, necessary relationship/CRM notes and choices not to be contacted. Form, browser and session references and limited security records protect these features. Those references may still relate to a person even without a name or message content. We use data to handle what you request; security and abuse assessment serve the legitimate interest of keeping the service safe. Permission for the described sharing or publication is not marketing consent. The directory also uses public profile and source information, with source references where available.

Who receives your data

Contact messages go to Rijmaatje. A school enquiry is intended only for Rijmaatje and the named authorised school; the form and receipt explain whether Rijmaatje still needs to forward it. Receipt does not prove email delivery or a booked lesson. Only authorised operators and, following a separate grant, the authorised school can access what is needed for handling. Approved profile and review information may become public. Withdrawing a school profile or review stops the linked review photos from being served by the public photo feature; withdrawal does not itself erase private content. Proxhost is used for hosting and email. Information about service providers, their roles and any transfers outside the EEA is listed below.

Rijmaatje uses Proxhost for hosting and email. These services support website storage and security and communication with Rijmaatje. Data needed for these services and technical access, security and email records may be processed for this purpose.

How long we keep data

We keep data no longer than needed for its purpose. The retention periods or applicable criteria for each category are listed below. Closing, cancelling or withdrawing does not automatically erase message content. An expired cookie, code or session limits access and does not prove that all associated records have already been deleted. Active review, intake and CRM content can be erased through a targeted action; historical source archives, email copies and backups require separate retention assessment. There is no general automatic deletion of all submissions after a fixed number of months.

We keep personal data no longer than necessary for the purpose for which it was collected, unless a legal retention duty requires longer. We keep contact messages and school enquiries for as long as needed to handle them and specific follow-up questions or complaints. We keep school registrations, claims, corrections and account information while the relationship or handling remains active, and afterwards only as needed for follow-up, security or a legal obligation. Reviews and public profile information remain available while relevant and lawful, or until an erasure request that must be honoured has been carried out. We keep security and error records for as short a period as needed for their specific purpose. Historical source data, email copies and backups remain private and are retained only as needed for recovery, handling, security or a legal obligation. We also assess these copies when handling an erasure request.

Your information and rights

Contact the privacy contact to request access, correction, erasure or restriction, and portability or objection where the GDPR provides that right. You can withdraw consent without affecting earlier lawful processing. We handle these requests through the privacy contact and, where there is reasonable doubt, ask only for information needed to verify your identity safely. Normally you receive information about the action taken within one month; if a permitted extension is needed, we explain it within that month. Erasing active content and assessing necessary archive or backup records are separate actions. You can complain to the Dutch Data Protection Authority. Information you give directly to a driving school also falls under that school’s responsibility.