Home · Privacy Statement
Legal

Privacy Statement

What we do with your data, why we are allowed to, how long we keep it and what you can change about that.

Translation, not yet reviewed by a lawyerThis page is a translation of the Dutch original. The Dutch version is the binding text: if the two differ, the Dutch wording prevails. This translation has not yet been checked by a lawyer or a native speaker. You can read the Dutch original via the language switch at the top of this page.

1. Who we are

BLS-group B.V., trading as Football Brain Coaching, established at Nieuwehaven 52, 3011 VT Rotterdam, the Netherlands, Chamber of Commerce 80991440, VAT NL861880018B02. Contact: info@footballbraincoaching.com. We are the controller for the processing described in this statement.

2. Which personal data we process

  • Account and contact data: name, e-mail address, login credentials.
  • Order and payment data: the Course purchased, amount, payment status, order and invoice data. Payment runs through Mollie; we do not receive full card details.
  • Learning and progress data: progress, test and exam results, certificate data.
  • Practical assignment: your written reflection and your video submission. A video may contain the image and voice of yourself and of third parties, possibly including underage players.
  • Technical data: IP address, device and browser information, log data, for security and operation.
  • Record of your agreement: when you place your order we record the moment you agreed to the terms and to immediate access, which version of those texts you saw at the time, in which language, and from which IP address. We need this to be able to demonstrate later what exactly you agreed to. The same applies to the consent declaration for the practical video.
  • Communication: messages you send us.

3. Purposes and legal bases (GDPR article 6)

PurposeLegal basis
Performing the Agreement: access, learning environment, testing, certificate, support Performance of a contract (article 6(1)(b))
Payment and administration or invoicing Legal obligation (c) and performance of a contract (b)
Assessment of the practical video: storing, viewing, assessing Consent (a); for the image of minors: consent of the parents or guardians
Security, abuse prevention, improvement of the Platform Legitimate interest (f)
Recording your agreement to the terms and to immediate access, so that we can demonstrate it Legal obligation (c) and legitimate interest (f)
Newsletter or marketing, where applicable Consent (a), withdrawable by e-mail

We use video submissions solely for the assessment, not for marketing, unless you give separate and explicit consent for that.

4. Processors and recipients

We engage service providers who process data on our behalf (processors), under data processing agreements.

Helveron builds, hosts and maintains the Platform for us and is therefore our processor. Helveron processes your data solely on our instructions and does not use it for its own purposes. Helveron engages the parties below on our behalf and has a data processing agreement with each of them:

  • Supabase: hosting, database, authentication and storage of account and learning data. The primary storage is located in Zurich, Switzerland.
  • Cloudflare: hosting and CDN (Cloudflare Pages) and DNS.
  • Bunny.net (Bunny Stream): video hosting of the course videos and practical videos, with EU storage and limited, secured access.
  • Resend: sending transactional e-mail, such as confirmations, welcome messages and notifications.

Mollie is not a processor but an independent recipient. Your payment is handled by Mollie. As a licensed payment service provider, Mollie determines for itself which data are needed for the payment, for fraud checks and for the legal obligations that come with it. For that processing Mollie is an independent controller, not our processor. From Mollie we receive the outcome of the payment and the details we need for our administration, not full card details. What Mollie itself does with your data is governed by Mollie's own privacy statement.

We do not provide your data to other third parties, unless this is necessary for the service or required by law.

5. Transfers outside the EEA

Your account and learning data are held in our database at Supabase, with the primary storage located in Zurich, Switzerland. Switzerland lies outside the EEA, but the European Commission has adopted an adequacy decision for Switzerland. The level of protection is therefore considered equivalent to that within the EU, so no additional safeguards are required for that transfer.

In addition, some of our service providers are established outside the EEA, for example in the United States. For such transfers we ensure appropriate safeguards, such as the standard contractual clauses of the European Commission.

6. Retention periods

  • Account and learning data: as long as your account is active and 12 months thereafter, unless a longer period is needed.
  • Payment and invoice data: 7 years, because of the Dutch statutory tax retention obligation.
  • Practical videos: 6 months after the final assessment of your practical assignment, unless you withdraw your consent earlier. In that case we delete the video sooner.
  • Test and exam results and your written reflection: 5 years after completion of the Course.
  • Certificate data (name, course, date, verification code): for as long as the Certificate needs to remain verifiable, at least 10 years. Verifiability is part of the value of the Certificate.
  • Log data: 12 months.

7. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent at any time. Withdrawal applies to the future. Requests can be sent to info@footballbraincoaching.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Minors

The Course is aimed at coaches, so at adults. Underage players may appear in practical videos. Processing their image requires consent from their parents or guardians; see the Practical video consent statement. We do not process more footage of minors than necessary.

9. Security

We take appropriate technical and organisational measures, including row level security, encryption of data in transit, and limited access for administrators.

10. Cookies

The Platform uses cookies and similar techniques. See the separate Cookie Statement.

11. Changes

We may amend this privacy statement. The current version is published on the Platform.

Version 0.5 · 19-09-2026