1. Data Controller
The data controller for your personal data is:
Finance Xplained BV
Company Registration: BE 0867 414 283
Address: Graaf van Hoornlaan 5, 9620 Zottegem, Belgium
Email: Learn@FinanceXplained.com
Telephone: +32 496 43 94 00
2. What Personal Data Do We Collect?
We collect and process the following personal data when you register for a course, newsletter or contact us:
- Identification data: first name, last name, job title
- Contact details: email address, phone number, postal address
- Company details: company name, VAT number, address
- Financial data: invoicing details (no credit card data is stored)
- Course data: selected courses, attendance, course materials
- Feedback and evaluations: your opinions about the course and our services
- Technical data: IP address, browser type, pages visited (via Google Analytics)
3. Why Do We Process Your Data?
We process your personal data for the following purposes:
- Performance of contract: process registration, organize courses, invoicing, communication about your course
- Legal obligation: accounting and tax obligations (retention of invoices for 7 years)
- Legitimate interest: improving our services, quality control, internal analysis, securing our systems
- Consent: sending newsletters, use of your testimonial in marketing, market research
4. Legal Basis for Processing
We process your personal data based on:
- Article 6(1)(b) GDPR: Performance of contract (course registration and delivery)
- Article 6(1)(c) GDPR: Legal obligation (accounting legislation, VAT administration)
- Article 6(1)(f) GDPR: Legitimate interest (quality improvement, security)
- Article 6(1)(a) GDPR: Your explicit consent (newsletter, marketing, testimonials)
You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. How Long Do We Retain Your Data?
We do not retain your personal data longer than necessary for the purposes for which they are processed:
- Course registrations and invoicing: 7 years (statutory accounting retention obligation)
- Newsletter subscriptions: until you unsubscribe or 3 years after last interaction
- Marketing consent: 3 years after last contact, unless you withdraw consent earlier
- Contact requests: 2 years after completion
- Google Analytics data: 26 months (automatically deleted)
After these periods expire, your data will be permanently deleted or anonymized.
6. With Whom Do We Share Your Data?
We only share your personal data when necessary:
Processors (service providers acting on our behalf):
- Google Analytics: Website analysis (anonymized, see section 7 for cookies)
- Email provider: For sending newsletters and course communications
- Accounting firm: For financial administration
- Hosting provider: For database storage
Legal obligation:
- Government agencies: When legally required (e.g. tax administration, court order)
- Accountants and auditors: For statutory audits
We NEVER sell your personal data to third parties for marketing purposes.
All processors are contractually obliged to protect your data in accordance with GDPR and may only use your data for the purposes we have determined.
7. Cookies and Tracking
Google Analytics
We use Google Analytics to analyze website usage and improve our website. Google Analytics places cookies and collects information such as:
- Which pages you visit
- How long you stay on our website
- Through which website you reached us
- Which links you click
This data is processed anonymously. We have entered into a processor agreement with Google and have chosen the following privacy-friendly settings:
- IP addresses are anonymized (last octet removed)
- Data sharing with Google is disabled
- We do not use other Google services in combination with Google Analytics cookies
Managing Cookies
You can block or delete cookies via your browser settings. Note: if you disable cookies, certain functionalities of the website may be limited.
Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
Types of Cookies
- Functional cookies: Necessary for website operation (session cookies)
- Analytical cookies: Google Analytics for website statistics
We do NOT use marketing cookies or tracking cookies for advertising purposes.
8. International Data Transfers
Google Analytics may transfer personal data to servers outside the European Economic Area (EEA), including the United States.
These transfers are protected by:
- EU-US Data Privacy Framework
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Appropriate technical and organizational security measures
For more information: Google Privacy Policy
9. Your Rights under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You can request which personal data we hold about you
- Right to rectification (Art. 16 GDPR): You can request correction of incorrect or incomplete data
- Right to erasure / ‘Right to be forgotten’ (Art. 17 GDPR): You can request deletion of your data (unless statutory retention obligation)
- Right to restriction of processing (Art. 18 GDPR): You can request temporary restriction of processing
- Right to data portability (Art. 20 GDPR): You can request your data in a structured format
- Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest
- Right to withdraw consent (Art. 7 GDPR): You can withdraw your consent for newsletter or marketing at any time
How to Exercise Your Rights?
To exercise your rights, you can contact us via:
- Email: Learn@FinanceXplained.com
- Telephone: +32 496 43 94 00
- Post: Finance Xplained BV, Graaf van Hoornlaan 5, 9620 Zottegem, Belgium
We will respond to your request within 1 month. In complex cases, we may extend this period by a maximum of 2 months, of which we will inform you.
Identification: To prevent abuse, we may ask you to prove your identity before we process your request.
10. Filing a Complaint with Supervisory Authority
If you believe we are not processing your personal data correctly, you can always contact us. You also have the right to file a complaint with the Belgian supervisory authority:
Data Protection Authority (DPA)
Drukpersstraat 35, 1000 Brussels, Belgium
Telephone: +32 2 274 48 00
Email: contact@apd-gba.be
Website: www.dataprotectionauthority.be
11. Security of Your Data
We take the security of your personal data very seriously and have taken appropriate technical and organizational measures to protect your data against:
- Unauthorized access
- Loss or destruction
- Unlawful processing
- Unintended alteration
Our Security Measures:
- Access control: Only authorized personnel have access to personal data
- Encryption: Sensitive data is encrypted in storage
- SSL/TLS: Secure connection for data transfer via our website
- Regular backups: To prevent data loss
- Staff training: All our staff are aware of privacy procedures
- Processor agreements: All external processors are contractually obliged to security
Note: Internet email is never completely secure. By using email, you agree to send information at your own risk. We recommend not sending confidential information (such as passwords or financial data) via unencrypted email.
Data Breaches
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours and inform the Data Protection Authority, in accordance with Art. 33-34 GDPR.
12. Automated Decision-Making and Profiling
We do NOT use automated decision-making or profiling that has legal effects for you or similarly significantly affects you.
13. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external websites. We recommend reading the privacy policy of these websites before providing personal data.
14. Minors
Our services are aimed at professional business clients and not at persons under 16 years of age. We do not knowingly collect personal data from minors. If you suspect we have accidentally collected data from a minor, please contact us.
15. Changes to This Privacy Policy
We reserve the right to amend this privacy policy from time to time, for example due to changes in legislation, our services or new technologies.
The most current version is always available on this page. We will make significant changes known via:
- Email to registered users
- A notice on our website
We recommend that you consult this privacy policy regularly to stay informed of any changes.
Last update: May 2026
Version: 2.0
16. Contact and Questions
If you have questions about this privacy policy, our privacy practices, or if you want to exercise your rights, you can contact us:
Finance Xplained BV
Privacy contact: Learn@FinanceXplained.com
Telephone: +32 496 43 94 00
Address: Graaf van Hoornlaan 5, 9620 Zottegem, Belgium
We aim to respond to all questions and requests within 1 month.
17. Applicable Law and Disputes
Belgian law applies to this privacy policy. Any disputes arising from or related to this privacy policy shall be submitted to the competent courts of the judicial district of East Flanders, Oudenaarde division.
Acceptance of This Privacy Policy
When booking a course with FinanceXplained, you will be asked to accept our "Terms and Conditions". By accepting these, you also confirm that you have read this Privacy Policy and agree to the processing of your personal data as described herein.
For the complete terms and conditions, click here.