Privacy statement
We process as little data as possible on this website. Here you can read which data that is, what it is used for, how long it is kept and which rights you have.
Who is responsible?
WSKO, Zuidweg 91, 2671 MP Naaldwijk, telephone +31 174 280 446, is responsible for the data processed through this website. Melange Design builds and maintains the website on behalf of WSKO and only processes the data following WSKO's instructions.
Do you have a question about your data? Email contact@schoolstartwestland.nl.
Which data do we process, and why?
Registering at a school. This does not happen on this website, but in the Onderwijs Transparant parent portal. The terms of that portal apply to the data you enter there.
Email reminder. If you sign up for the reminder, we keep your email address, your language choice and the date of birth of your child or children. We never keep a child's name. We only use this to remind you at the right moments to register. The legal basis is your consent, which you confirm by email. You can withdraw that consent at any time.
Sending log and abuse prevention. For every reminder sent, we record which email was sent and when. To limit abuse of the form, we briefly keep an encrypted (hashed) IP address.
School and WSKO staff. For an account we keep a username, email address, name and role. If someone reports a change to a school page, we keep the name, role and text of that report. This is needed to keep the school pages up to date.
Security and faults. Our server records the IP address, the time, the requested page and the browser type, and we log security events such as a blocked login attempt. We do this to keep the website safe and to trace faults.
School map. When you open the map of schools, your browser connects to OpenStreetMap to show the map. OpenStreetMap then sees your IP address. We do not receive any data from this.
Fonts and explainer video. The website loads its fonts from Google Fonts, and the preview image of the explainer video comes from YouTube. Google then sees your IP address. The video itself is only loaded when you click play. YouTube (Google) then places its own cookies.
How long do we keep data?
Reminder, not confirmed: 48 hours, then automatically deleted.
Reminder, confirmed: until 3 months after the end of your child's registration period. More than one child? Then each child's date of birth is deleted 3 months after that child's own registration period, and your email address 3 months after that of your youngest child. After that the website deletes everything automatically. You can also delete your data yourself at any time via the link in every email.
Sending log and IP check: the sending log disappears at the latest the night after your registration is deleted. We keep the IP check for at most 2 hours.
Staff reports: 6 months after the report has been handled.
Logs and backups: the mail log 14 days, the server logs about 2 months and the backups 1 month. We keep staff accounts for as long as the account is needed.
Who do we share data with?
We do not sell data and do not use it for advertising. We do use parties that help us run the website:
Hetzner Online GmbH: hosting of the server, the database and the backups, in Helsinki (Finland), so within the European Economic Area.
Resend, Inc.: delivering our emails, in the United States, with the safeguards required by European privacy law.
Microsoft Ireland Operations Ltd.: the mailbox that receives your replies to our emails, within the European Economic Area.
Anthropic, PBC: an AI service that helps handle reports from staff, in the United States. No data of parents or children is ever included.
Your rights
You have the right to access, correct and delete your data, to restrict processing, to object and to data portability. You can view and delete your reminder yourself via the link in every email. For other requests, email contact@schoolstartwestland.nl. We respond within one month.
Do you disagree with how we handle your data? Please contact us first. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.
Cookies
You can read which cookies this website uses in our cookie statement.