Privacy Notice

1. Scope and Controller Details

This Privacy Notice explains how Teachtorch B.V. (“Teachtorch”, “we”, “us”, or “our”), a private limited company established in the Netherlands, collects and uses personal data in the context of our business-to-business (B2B) activities.

Teachtorch B.V. acts as the Data Controller for the personal data described in this Notice:

• Company Name: Teachtorch B.V.
• Registered Address: Jakob Niewegpad 2, 3812 GW Amersfoort, The Netherlands
• General Enquiries: support@teachtorch.com
• Privacy & Data Protection Contact: privacy@teachtorch.com

Our website and services are intended exclusively for professional use by businesses and educational institutions. We do not offer services directly to consumers, nor do we knowingly collect personal data from individuals under 16 years of age.

---

2. Personal Data We Collect and How We Use It

Because we operate strictly on a B2B basis, we collect only minimal personal data necessary to establish and maintain commercial relationships:

• B2B Contact Information: Name, business email address, work telephone number, job title, and employer/organisation name.
• Account and Support Enquiries: Commercial communications, account credentials for customer administrators, billing details, and customer support requests.

We process this data under the following legal bases pursuant to Article 6 of the General Data Protection Regulation (EU GDPR):

1. Performance of a Contract (Art. 6(1)(b) GDPR): To deliver our SaaS products, manage client accounts, provide technical support, and process subscription invoices.
2. Legitimate Interests (Art. 6(1)(f) GDPR): To communicate with business representatives, manage corporate relationships, and secure our software operations.
3. Legal Obligations (Art. 6(1)(c) GDPR): To satisfy statutory tax, accounting, and financial reporting duties under Dutch law.

---

3. Cookies and Tracking Technologies

Our web application relies on essential operational cookies and session tokens required to authenticate users, maintain secure log-in sessions, and ensure network security. These essential technologies do not require prior user consent.

We measure website traffic using Notifuse Web Analytics, which is cookieless by design and does not store any identifier on your device. For marketing campaigns or any other non-essential tracking technologies, cookies would only be deployed strictly upon prior explicit user consent via a website cookie banner.

For full details regarding the categories of cookies we deploy and how to manage your preferences, please consult our standalone Cookie Policy.

---

4. Data Sharing and International Transfers

We do not sell, rent, or trade personal data. We share business contact information only with trusted service providers (data processors) acting under strict contractual data protection obligations (such as cloud hosting, billing, and communication tools).

Where personal data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards are established in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses (SCCs) approved by the European Commission or EU Adequacy Decisions.

---

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the business purposes for which it was collected, or as mandated by Dutch statutory requirements (such as retaining financial and invoicing records for up to 7 years under Dutch tax law).

---

6. Your Data Subject Rights

Under the GDPR and the Dutch GDPR Implementation Act (UAVG), you hold the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request details and a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17 GDPR): Request deletion of your personal data where legal conditions permit.
• Right to Restriction & Objection (Art. 18 & 21 GDPR): Request restriction of processing or object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent for marketing or cookies at any time without affecting prior lawfulness.

To exercise any of these rights, please contact us at privacy@teachtorch.com.

Supervisory Authority Contact

You have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens
PO Box 93374, 2509 AJ DEN HAAG, The Netherlands
Telephone: (+31) - (0)70 - 888 85 00
Website: https://autoriteitpersoonsgegevens.nl/