Last updated: 4 November 2026.
Who we are
AI Business School NL is a trade name of Blue Star Ventures B.V., registered with the Dutch Chamber of Commerce (KvK) under number 99679833, at Sparrendaal 50, 3452 LJ Vleuten, Netherlands. Blue Star Ventures B.V. is the controller for the personal data described here. We have not appointed a data protection officer.
Questions or requests: advisory@ai-business.school.
What we collect, why, and on what basis
| What | Why | Legal basis | How long |
|---|---|---|---|
| Emails to advisory@ai-business.school and phone calls: your name, contact details and what you ask | To answer you and, if you ask, send a quote | Steps you ask for before a contract, or our legitimate interest in answering questions (Art 6(1)(b) and (f)) | 24 months after our last contact |
| Course bookings: name, email, company, billing address, VAT number, number of participants, the office city for a course at your office, whether you book as a business or a private person, your request to start within 14 days, and for bank transfers the payment reference | To deliver the course and invoice it | Contract (Art 6(1)(b)); tax records (Art 6(1)(c)) | Booking data 24 months; invoices and the records behind them 7 years, as Dutch tax law requires |
| Bank transfers: the account holder’s name, IBAN, amount and reference as they arrive in our bank account | To match your payment to your booking and keep the accounts | Contract (Art 6(1)(b)); tax records (Art 6(1)(c)) | 7 years, as Dutch tax law requires |
| Attendance records: name, organisation, course, date | To give you and your employer a record for the AI literacy file | Contract, or our client’s legitimate interest in its training records (Art 6(1)(b) and (f)) | 5 years |
| WhatsApp messages | To answer you | Steps before a contract, or our legitimate interest in answering questions (Art 6(1)(b) and (f)) | Deleted from our account 12 months after the last message |
| Abuse prevention: a one-way coded version of your IP address, never the address itself; a bot check by Cloudflare Turnstile | To stop spam and attacks on the booking form | Legitimate interest in a secure site (Art 6(1)(f)) | 30 days |
| Site statistics without cookies (Cloudflare Web Analytics, our only statistics tool) | To count visits and see which pages work | Legitimate interest (Art 6(1)(f)) | Aggregated; no profile of you |
You do not have to give us your data. Without a name and contact details we cannot answer a request or confirm a booking, and without billing details we cannot issue the invoice the law requires.
Encrypted backups of the booking database are kept for 90 days. Data we delete leaves the backups within 90 days.
We do not use your data for automated decisions about you, and we do not sell it.
The AI training self-assessment
The AI training self-assessment runs in your browser. Your answers stay there: we do not store them, and the self-assessment sets no cookies and uses no browser storage. The organisation name you can add in the last step never leaves your browser. The report you download or print is made in your browser too.
To show open days, your browser asks our server for the dates of the courses in your plan. Each request names 1 course, 1 format and 1 month, and none of your answers, so together the requests show which courses are in your plan. Our own code keeps no record of these requests and does not code or store your IP address for them. Cloudflare, which hosts the site, receives each request with your IP address, as it does for every page you open, and counts requests per IP address to stop floods of requests.
The result link carries your answers in the part after “#”. Browsers do not send that part to a server, and our page removes it from the address bar as soon as the page opens, before the site statistics run.
Who receives your data
- Cloudflare hosts the site and stores form and booking data in a database located in the EU.
- Our bank processes the transfers you make to us.
- WhatsApp (Meta) processes the chats you start with us.
These companies process data for us under agreements that bind them to our instructions, or, for WhatsApp and our bank, under their own terms as independent providers. Cloudflare and WhatsApp (Meta) may process data outside the European Economic Area. Where they do, they rely on the EU-US Data Privacy Framework or on standard contractual clauses.
Your rights
You can ask us to show, correct or delete your data, to limit its use, to transfer it, or to stop using it for our legitimate interests. You can withdraw consent at any time; this does not affect what we did before. Send your request to advisory@ai-business.school. We reply within 1 month.
If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
Changes
We update this notice when what we do changes, and show the date at the top. Your rights are set out in the GDPR.