GDPR: your rights

Last updated: 12 October 2026.

This translation is provided for information only. Only the Dutch version is binding.

On this page we explain which rights you have under the General Data Protection Regulation (GDPR) and how you exercise them with us. The GDPR applies to everyone whose personal data we process: visitors, learners, clients, coaches, trainers and contact persons of organisations. Which data we process and why, you can read in our privacy statement.

Your rights in brief

Right of access
You may know whether we process data about you and receive a copy of it, together with information about the purpose, recipients, retention period and source.
Right to rectification
Is your data inaccurate or incomplete? Then we have it corrected.
Right to erasure ("right to be forgotten")
You may ask us to erase your data, for example if we no longer need it, if you withdraw your consent or if you object. We may keep data that we are legally required to keep, such as invoices, or that we need for a legal claim.
Right to restriction
In certain cases, for example if you contest the accuracy, you may ask us to temporarily restrict the processing.
Right to data portability
Data that you gave us yourself and that we process on the basis of consent or a contract, you receive in a structured, commonly used and machine-readable format. You may also have it transmitted to another controller, in so far as this is technically feasible.
Right to object
If we process your data on the basis of our legitimate interest, you may object on grounds relating to your particular situation. For direct marketing you can always object, without giving a reason, and it stops immediately.
Right to withdraw your consent
If we process data on the basis of your consent, you may withdraw it at any time. This is as easy as giving it, and does not affect the processing carried out before the withdrawal.
No automated decision-making
We do not take decisions about you based solely on automated processing, including profiling, which produce legal effects or similarly significant effects.

How to exercise your rights

Send us your request at info@financialwellbeingacademy.com. State clearly which right you wish to exercise and, if possible, which data it concerns.
We verify your identity. We do this to prevent someone else from requesting your data. For that purpose we may ask you for additional information. We do not ask you for a copy of your identity card, unless it is really necessary. In that case you may black out everything that is not needed, such as your photo and national register number.
We reply within one month of receiving your request. If your request is complex or there are many requests, we may extend that period by two months. In that case we let you know why within the first month.
It is free of charge. If a request is manifestly unfounded or excessive, for example because it is repetitive, we may charge a reasonable fee or refuse the request. We will then give our reasons.

Things you can arrange yourself right away

Clearing your answers and progress: use the "Clear my answers" button in a tool, or clear your browser's local storage.
Logging out: via "Log out" in the menu at the top, you leave your account on this device.
Changing your choice about cookies and local storage: via the page cookies and local storage.
Unsubscribing from mailings: via the link at the bottom of every message.

What happens to your data if you ask for erasure?

We erase your data from our systems and ask our processors to do the same. Data that we are legally required to keep, such as invoices and accounting records, we keep for that period and do not use for other purposes. Data in backups disappears according to the normal backup schedule. What is stored only locally on your own device, we cannot erase: you clear that yourself.

For organisations and employers

For programmes for organisations, the employer receives reporting at group level only, without individual data. Employees can exercise their rights directly with us. If we process personal data of employees on behalf of the organisation, we make arrangements about this in a data processing agreement.

For coaches and trainers

If you work as a coach or trainer with our materials or via our environment, your own obligations as a controller apply to your own client data. For the data we process about you (such as your training, access and contact details), you can exercise your rights with us as described above.

How we comply with the GDPR

Data minimisation: we only ask for what we need. Your tools and worksheets work on your own device by default.
Privacy by design: the choice to store or send data is yours.
Security: encrypted connections, restricted access and carefully chosen processors.
Record of processing activities: we keep a record of our processing activities.
Data breaches: we have a procedure to quickly detect, contain and report breaches to the Data Protection Authority, within 72 hours, and to you when the risk is high.

Lodging a complaint

Have we not been able to resolve the matter together, or are you not satisfied with how we handle your data? Then you can lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (Gegevensbeschermingsautoriteit)
Drukpersstraat 35, 1000 Brussels
contact@apd-gba.be
www.gegevensbeschermingsautoriteit.be

You can also bring a claim before the competent court. In addition, you can always contact us first at info@financialwellbeingacademy.com. We are happy to talk it through with you.