Privacy Policy

1. Introduction & Controller Identity

FERI Beheer B.V. operates an independent educational platform focused on planning, shooting, and directing studio interview and discussion formats. This Privacy Policy describes what data we collect, why we process it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR).

Data Controller (GDPR terminology): FERI Beheer B.V., De Koppel 11, 5674 NW Nuenen, Netherlands.

Contact email for privacy questions: [email protected].

Our platform is educational only. We do not provide production services, equipment rental, talent booking, or career placement. Nevertheless, we still treat privacy and data minimisation as operational requirements: we collect only what we need to respond, run the site reliably, and understand basic site usage when you consent.

2. Personal Data We Collect

We collect personal data in a few predictable places: when you send us a message, when your browser loads pages, and when cookies are set. The categories below describe what that includes in practical terms.

• Identity and contact details: name (if provided), email address, and telephone number (if you include it in your message).
• Form content: the message text you submit, which may include production context such as camera counts, lens choices, lighting constraints, run-of-show structure, or questions about coverage.
• Technical data: IP address, browser type and version, device/operating system, language settings, approximate location derived from IP (city/region level), and time zone.
• Usage data: pages visited, time spent on pages, referrer/landing page, link clicks, and navigation paths. This category is collected only when analytics cookies are enabled.
• Cookies and identifiers: essential cookies required for session continuity and consent storage, and optional analytics/marketing identifiers where you consent (described in Section 4).
• Conversion events: events such as a form submission completion, used to measure whether site navigation and course information are understandable. Marketing measurement occurs only with consent.

We do not intentionally collect special-category data (for example, health information, religious beliefs, political opinions), financial account details, payment card numbers, or government identification numbers through our contact forms. Please do not include such information in messages.

3. Why We Process Personal Data & Legal Basis (GDPR Article 6)

Under GDPR, every processing activity needs a legal basis. We use the following legal bases depending on what you do on the site and which cookie choices you make.

3.1 Contact form and email enquiries

Purpose: to answer course questions, provide practical guidance on course fit (foundation, intermediate, advanced), and clarify the learning format (assignments, scene breakdowns, planning tasks).

• Legal basis: Article 6(1)(b) (steps prior to entering into a contract) where you request course information.
• Legal basis: Article 6(1)(a) (consent) where you explicitly consent to being contacted via the form checkbox.

3.2 Analytics (optional)

Purpose: to understand which pages help learners, where navigation is confusing, and which topics are most commonly read (for example, multi-camera coverage logic versus run-of-show preparation). We use this data to improve the educational material and reduce ambiguity.

• Legal basis: Article 6(1)(a) (consent). Analytics cookies only activate after you opt in.

3.3 Marketing and remarketing (optional)

Purpose: to measure advertising performance and, where applicable, build audiences (remarketing and lookalike audiences) based on site interaction. This is limited to what the advertising platforms provide, and only runs after you opt in.

• Legal basis: Article 6(1)(a) (consent).

3.4 Security, abuse prevention, and site reliability

Purpose: to keep the site available and secure, prevent spam submissions, investigate suspicious traffic patterns, and defend against automated abuse.

• Legal basis: Article 6(1)(f) (legitimate interests), balanced against your rights and expectations.

3.5 Legal compliance

Purpose: to comply with legal obligations (for example, tax and accounting requirements if applicable) and to respond to lawful requests by authorities.

• Legal basis: Article 6(1)(c) (legal obligation).

3.6 Automated decision-making (GDPR Article 22)

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4. Cookies & Tracking

Cookies are small text files stored on your device. Some are essential for basic site functions; others are optional and are used for analytics and marketing measurement. We also refer to similar technologies such as pixel tags and server-side event measurement when enabled.

4.1 Essential cookies (always active)

These cookies are necessary to operate the site and store your privacy choices. They do not require consent under EU cookie rules because they are strictly necessary.

• _site_session: supports session continuity and basic site reliability.
• cookie_consent: stores your cookie preference selection so we can apply it on future visits.

Retention: session to 12 months depending on the cookie. The consent record stored on your device is typically kept for 12 months.

4.2 Analytics cookies (consent required)

When you opt in to analytics cookies, we may use Google Analytics 4 (GA4) with IP anonymisation features where available. Analytics helps us understand aggregate patterns such as which course descriptions are most read, whether learners find the “How Learning Works” page before contacting us, and which sections lead to clarification questions.

• Example cookies: _ga and _ga_XXXXXXXXXX.
• Typical retention: up to 2 years for GA4 identifiers, with reporting retention commonly set to 14 months.

4.3 Marketing cookies (consent required)

When you opt in to marketing cookies, we may enable measurement tools such as Google Ads conversion tracking and the Meta Pixel (and related server-side measurement). These tools help measure whether ads lead to meaningful actions such as reading the course outlines or sending a course question.

• Example cookies: _gcl_au, _fbp, and _fbc.
• Typical retention: 90 days for marketing identifiers.

4.4 Pixel tags and server-side measurement

When marketing or analytics is enabled, tracking may include pixel tags in the browser and may also include server-side measurement (for example, via Google Tag Manager server-side or Meta Conversion API) to improve event accuracy. Where used, identifiers may include cookie IDs and, in some configurations, hashed identifiers. Any such processing is contingent on your consent choices.

For full detail on cookie names and purposes, see our Cookie Policy.

5. Consent (EEA/UK)

Users in the European Economic Area (EEA) and the United Kingdom receive a consent notice. Analytics and marketing cookies activate only after explicit, informed, freely given consent (GDPR Article 6(1)(a)). Your consent choice is recorded in the cookie_consent cookie and is stored for up to 12 months.

You can withdraw or change consent at any time by clicking “Manage cookie preferences” in the footer, or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing that occurred before you withdrew consent.

6. Sharing With Advertising & Service Partners

We use service providers to operate the site and, where you consent, to measure and improve content reach. We share only what is necessary for the stated purposes and we do not sell personal data.

• Google LLC (Google Analytics 4, Google Ads, Google Tag Manager / remarketing where enabled): cookie identifiers, usage data, and conversion events. Privacy policy: https://policies.google.com/privacy
• Meta Platforms, Inc. (Meta Pixel, Custom/Lookalike Audiences, Conversion API where enabled): page views, conversion events, audience membership signals, and (in some configurations) hashed identifiers. Privacy policy: https://www.facebook.com/privacy/policy
• Cloudflare (CDN and security services): IP-based threat detection and performance optimisation. Privacy policy: https://www.cloudflare.com/privacypolicy/

We do not permit these providers to use site data for their own independent commercial purposes beyond providing services to us, subject to their contractual terms and platform policies.

7. International Transfers

Some of our service providers process data in countries outside the EEA/UK, including the United States. Where this occurs, transfers are protected using recognised safeguards such as the EU–US Data Privacy Framework (since July 2023) and, where applicable, the UK Extension to the Data Privacy Framework. We may also rely on Standard Contractual Clauses (EU 2021/914) as a fallback safeguard, and the UK International Data Transfer Agreement (IDTA) where relevant.

We evaluate transfers based on provider documentation, contractual protections, and technical measures appropriate to the data type.

8. Data Retention

We keep data only as long as necessary for the purpose it was collected for, then delete or anonymise it, unless we are required to keep it longer by law.

• Contact submissions: typically up to 2 years from the last interaction, to preserve context for follow-up questions and to improve lesson clarity.
• Email correspondence: for the duration of the relationship, then typically 1 year.
• Analytics: reporting retention commonly set to 14 months (where analytics is enabled by consent).
• Marketing cookies: retained according to cookie lifetimes (commonly 90 days) where marketing is enabled by consent.
• Server logs: typically 90 days for security and troubleshooting.
• Cookie consent record (audit context): we may keep a record of consent choices for up to 3 years for compliance verification. The local cookie itself is typically stored for up to 12 months.
• Legal and tax: where applicable, we retain records as required by Dutch and EU law (often 6–10 years for certain documents).

9. Your Rights (GDPR & UK GDPR)

If GDPR applies to you, you have the following rights, subject to conditions and exemptions:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent at any time (Article 7(3))
• Right to lodge a complaint with a supervisory authority (Article 77)

To exercise your rights, email us at [email protected]. We typically respond within 30 days. For complex requests, the period may be extended by up to 60 additional days, as permitted by GDPR.

If you are in the Netherlands, you can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Reference directory for EU supervisory authorities: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

10. Children

This site is not directed at individuals under 16. We do not knowingly collect personal data from minors. If we learn that we have collected data from a child under 16 without appropriate consent, we will delete it promptly.

11. Do Not Track

This website does not respond to “Do Not Track” (DNT) browser signals. Third-party providers may have their own DNT handling.

12. Data Deletion Requests

You can request deletion of your personal data by emailing [email protected] with the subject line “Data Deletion Request”. We may ask for limited information to verify identity and locate the data. We aim to complete deletion within 30 days of identity verification, except where retention is required by law.

13. Business Transfers

If FERI Beheer B.V. is involved in a merger, acquisition, asset sale, financing, reorganisation, insolvency, or similar transaction, personal data may be transferred to a successor entity. If such a transfer materially changes how personal data is used, we will provide notice on the website.

14. California (CCPA/CPRA)

If you are a California resident and the California Consumer Privacy Act (as amended by the CPRA) applies, the following disclosures may apply to you.

Categories of personal information disclosed in the past 12 months may include:

• Identifiers: name, email address, IP address, cookie IDs (shared with service providers and, with consent, advertising partners).
• Internet/network activity: pages viewed and interactions (with consent, shared with analytics and advertising providers).
• Inferences: interests or preferences inferred from browsing behaviour (with consent, used for advertising audiences).

We do not sell personal information as defined by CCPA. We may share information for cross-context behavioural advertising when you enable marketing cookies. You can opt out by using our cookie preferences panel in the footer.

California rights may include the right to know, delete, correct, and opt out of sale/sharing, and the right to non-discrimination. To submit a request, email [email protected] with the subject “California Privacy Request”. We will verify your request as required by law. Authorised agents must provide proof of authorisation.

15. Virginia (VCDPA)

If you are a Virginia resident and the Virginia Consumer Data Protection Act (VCDPA) applies, you may have rights to access, correct, delete, obtain a copy of your data, and opt out of targeted advertising.

To submit a request, email [email protected] with the subject “Virginia Privacy Request”.

Appeals: if we decline a request, you can appeal by emailing us with the subject “Appeal of Refusal — Privacy Request”. We respond to appeals within 60 days where required. If unresolved, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, service providers, or legal requirements. If changes are material, we will post a notice on the homepage at least 14 days before the change takes effect. The “Last Updated” date at the top will be revised whenever we make updates.

18. Contact

For privacy-related questions, requests, or concerns, contact:

• Legal entity: FERI Beheer B.V.
• Address: De Koppel 11, 5674 NW Nuenen, Netherlands
• Email: [email protected]
• Phone: +31 40 211 7846