Privacy statement

This text is a translation of the Dutch original. In the event of any difference or dispute over interpretation, the Dutch text prevails.

Last updated: 13 October 2026

The Saz Academy gives saz and bağlama lessons in Amsterdam. In this statement you can read which personal data we use, why, with whom we share them and what rights you have.

Who is responsible for your data?

The sole proprietorship (eenmanszaak) The Saz Academy is the controller for the personal data that we use for trial lesson requests, music lessons and the student administration.

The Saz Academy, Dutch Chamber of Commerce (KvK) no. 74356100, Ouwerdingenpad 3, 1069 AJ Amsterdam. For questions about privacy, e-mail info@thesazacademy.com.

Which data do we collect?

When you request a trial lesson we ask for, among other things, your first name and surname, date of birth, e-mail address, telephone number, address, postcode, town or city of residence and instrument preference. We also ask whether the student is a minor and, if that applies, for details of a parent or carer and information about the Stadspas.

In the case of a follow-up registration we may in addition process lesson scheduling, attendance, contact notes and administrative data.

We need the fields marked with an asterisk in the form in order to deal with your request. Without those data we cannot schedule a trial lesson or lesson.

What do we use these data for?

We use your data to contact you about your request, to schedule a trial lesson, to organise music lessons, to keep the student administration and, where relevant, to handle invoices or an application to the Jeugdfonds.

We do so on the basis of the following legal bases from the AVG (the General Data Protection Regulation, GDPR) (Article 6, paragraph 1):

Contract (point b): answering and carrying out trial lesson and lesson requests, scheduling lessons and performing the lesson agreement.
Legal obligation (point c): the tax records.
Legitimate interest (point f): necessary security of the website, handling complaints and preventing misuse, after a balancing of interests.
Consent (point a): optional newsletters, non-essential cookies and promotional use of images. We ask for that consent separately.

A mandatory tick box in a request does not automatically mean that consent is the correct legal basis for all processing operations.

We do not take decisions based solely on automated processing and we do not create profiles of visitors or students.

Children and parents

In the case of requests for students who are minors we may also process contact details of parents or carers, so that arrangements and communication take place in an appropriate manner. Access to children’s data is restricted to persons who need them for their work.

Newsletter and images

For newsletters and for promotional use of photographs or videos we ask for separate consent where necessary. Requesting a trial lesson is not dependent on consent for marketing or the use of images.

For newsletters we keep a record in the administration of, among other things, whether and when you gave consent, where it comes from and whether you have unsubscribed.

You can withdraw your consent for the future via info@thesazacademy.com. Withdrawal does not have retroactive effect on what was lawfully done earlier; we cannot always fully retrieve material that has already been distributed or shared by others.

With whom do we share data?

We do not sell data. We share data only with parties that we need for our services, and limit this to what is necessary:

STRATO (established in Germany): hosting of the website and sending and receiving of e-mail, including the e-mail from the website forms.
Supabase (American company): parts of the student administration. The data are held on servers in the European Union (Ireland).
Cloudflare (American company): protection of forms against misuse with Cloudflare Turnstile.
Google: only when you click on a YouTube video (see “Cookies and similar technologies”).
Teachers of The Saz Academy: the data needed to give lessons and make arrangements.
Jeugdfonds and the municipality (Stadspas): only when you yourself make use of these and in so far as necessary for the application and accountability.

The website runs on WordPress with the form program Contact Form 7, on the servers of our hosting provider.

Transfers outside the European Economic Area

Supabase, Cloudflare and Google are American companies or form part of one. When their services are used, data such as your IP address may be processed outside the European Economic Area. If you would like to know which safeguards apply to a particular supplier, e-mail info@thesazacademy.com.

How long do we keep data?

We do not keep personal data for longer than is necessary for the purpose, and we take statutory retention obligations into account. We apply the following periods as a maximum:

Trial lesson requests with no follow-up: no later than six months after the last substantive contact.
Lesson enrolments that were not proceeded with: no later than twelve months after the last substantive contact.
Student and lesson data: during the agreement and thereafter in principle for no more than two years, unless earlier deletion is possible or longer retention is necessary for a specific claim or a statutory duty.
Tax records: generally seven years, with the statutory exceptions.
Newsletter: sending stops upon unsubscribing. We keep only the necessary proof of consent and unsubscribing, for as long as that is necessary.
Images and recorded consents: we review these periodically and, upon withdrawal, stop future use for which consent is required.
Data for Jeugdfonds and Stadspas: no longer than necessary for the application and accountability.

Deletion does not take place automatically, but manually on the basis of these periods.

Your rights

You can ask us for:

access to your data;
rectification or erasure of your data;
restriction of processing;
transfer of your data, where that applies.

You can also object to a processing operation and withdraw consent that you have given at any time. E-mail your request to info@thesazacademy.com. We respond within one month. To prevent misuse we may ask you to show that the request comes from you.

If you do not agree with how we handle your data, we would like to hear from you. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens(the Dutch Data Protection Authority).

Cookies and similar technologies

On this website we do not place cookies for statistics, advertising or tracking visitors, and we do not load visitor statistics. That is why you do not see a cookie notice. This was checked on 13 October 2026 with a technical scan in a clean browser.

What we do use:

Protection of forms. Our registration forms are protected with Cloudflare Turnstile, to counter misuse by automated programs. For that purpose Cloudflare processes technical data from your browser and your IP address and stores a technical value in your browser’s storage. This is necessary for the security of the website (legitimate interest).
Fonts. The fonts are hosted on our own website; your browser does not fetch them from Google.
YouTube videos. You first see a preview image that comes from our own website. Only when you click on a video does your browser connect to YouTube (Google), via YouTube’s privacy-friendly embedding. After that, Google’s privacy policy applies.
Maps and other websites. We do not embed maps. Links to, among others, Google Maps, WhatsApp, Instagram and YouTube open only when you click on them; after that, the privacy policy of that service applies.

If in the future we wish to use cookies or similar technologies for which consent is required, we will ask for it in advance and you will be able to refuse just as easily as accept.

Security

The website uses an encrypted connection (https). Access to the student administration is restricted to persons who need it for their work.

Changes

We may amend this statement, for example if our way of working or the technology of the website changes. The date at the top shows when the text was last updated.