Privacy Statement

1. Introduction

Your privacy is important to us. Learned B.V. (“Learned”, “we”) is committed to the careful handling of personal data. In this privacy statement we explain what personal data we process through our website (www.learned.io), for what purposes and how we secure it. Learned hereby acts in accordance with the General Data Protection Regulation (GDPR). This statement relates solely to the use of our website and marketing activities. The processing of personal data within the Learned platform is covered by the processor agreement between Learned and its customers.

2. Who is responsible for processing your data?

Learned B.V.
Chamber of Commerce number: 73218957
E-mail: privacy@learned.io
Website: www.learned.io

3. Personal data we process.

We collect personal data when you:
● fill out a form on our website (such as a demo or contact form);
● sign up for our newsletter or a webinar;
● download content, such as e-guides, videos or tools;
● contact us by email or phone.

The personal data we may process in the process are:
● name and contact information (e-mail, phone number, organisation);
● job title and company name;
● communication content (e.g. message or question);
● technical data about your website visit (such as IP address, browser type, time of day,
click behaviour – only via cookies, see section 7).

You are never required to provide this information, but without it we may not be able to provide you with the service or information requested.

4. Purposes and bases.

We process your personal data only for the following purposes:

5. Retention periods

We keep personal data no longer than necessary for the purpose for which it was collected:
● Contact requests and demos: up to 12 months after the last contact moment.
● Newsletter or marketing subscriptions: until you unsubscribe.
● Anonymised web statistics: are stored indefinitely, without traceability to individuals.

6. Disclosure to third parties

We share personal data only with parties who process data on our behalf and only when necessary for our services.
For the website, we use sub-processors such as:

● Hosting & infrastructure: Google Cloud (EU), WordPress & Kinsta
● Marketing & CRM: HubSpot
● Analytics & website optimisation: PostHog & Google Analytics
● Advertising platforms: LinkedIn Ads, Google Ads & Facebook

Measures have been agreed with Google which establish processing rights and veprlichtingen in accordance with the GDPR. These measures are regulated in Google’s Data Processing Amendment.

Processor agreements that meet the requirements of the GDPR are in place with the other parties.

Learned does not provide personal data to third parties for their own commercial purposes.

7. Cookies and web analytics

Our website uses cookies and similar techniques. With these, we improve the operation of our site and analyse usage.

We distinguish:

● Functional cookies – necessary for the operation of the website. We use Kinsta, WordPress, and Hubspot here to make our website work.
● Analytical cookies – help us understand how visitors use our website . We use PostHog, Google Analytics, and Nelio A/B.
● Advertising cookies – are set only with your permission to show personalised ads.

You can manage or disable cookies at any time through your browser settings.
More information can be found in our separate Cookie Statement.

8. Security

Learned takes appropriate technical and organisational measures to protect personal data from loss or unlawful processing. Our hosting environment meets strict security standards and Learned is ISO 27001- certified. Only authorised employees have access to personal data and only when it is necessary.

9. Your rights

You have the following rights under the GDPR:

● Right to access – you can request to see what data we process about you.
● Right to rectification – you can have incorrect data corrected.
● Right to deletion – you can request deletion of your personal data.
● Right to restriction – you can request that processing be restricted temporarily.
● Right to object – you can object to processing based on legitimate interest.
● Right to data portability – you can ask to transfer your data to a third party.
● Right to withdraw consent – where processing is based on consent .

If you wish to exercise these rights, please email privacy@learned.io.
To prevent abuse, we may ask for additional information to verify your identity. We will respond to your request within 30 days. If the request is complex, the response time may be extended by two months.

10. Complaints

Are you dissatisfied with the way we handle your data? Please contact us at privacy@learned.io.

If you believe we are not handling your complaint appropriately, you may file a complaint with the Personal Data Authority at www.autoriteitpersoonsgegevens.nl.

11. Applications

Through your application we receive your personal data. Name, address, date of birth and phone number, CV and cover letter. Furthermore, by submitting your application you give us permission to conduct an online screening as part of the application process (i.e. LinkedIn etc.).

Learned stores your personal information in a secure database for a period of 4 weeks after completing the application process, with consent for 12 months. We do not pass on your information to third parties for commercial purposes. Only third parties who help us find new colleagues sometimes need access to (parts of) your data. We ensure that these third parties handle your information with care and comply with all rules.

12. Changes

Learned reserves the right to change this privacy statement. The most current version is always available at https://www.learned.io/en/privacy.