Privacy Policy

Dienstverlening Leonardus (Movatile), Dadelgaarde 18, 2723 BK Zoetermeer, Nederland, Chamber of Commerce 42145386, is the controller for data of movatile.com visitors and organisations with an account. For the data of an organisation’s viewers/members, that organisation is the controller and we are the processor.

What we process and why

Organisation accounts: name, email, organisation name, billing data (via Mollie; we never see bank details), credentials (passwords hashed with bcrypt). Basis: performance of the contract.

Viewers/members: name, email, viewing profile, watch progress and watch statistics, quiz results and certificates, processed on behalf of the organisation so it knows who watched what. Basis: the organisation’s contract with its members or its legitimate interest.

Website and organisation-site visitors: we count visits without cookies, using a daily, non-reversible hash of IP address and browser that becomes unusable after 24 hours. We do not store IP addresses. Basis: legitimate interest.

Server and security logs: IP address, time and requested page, kept for at most 30 days to fight abuse.

Cookies

Only functional cookies: a session cookie, a cookie for your chosen viewing profile and, for ”watch free”, a counter of videos watched. No advertising or tracking cookies. See the cookie policy.

Recipients and processors

We use Bunny.net (CDN and video storage, EU servers), Mollie (payments, Netherlands), Trans-iX (hosting and email, Netherlands) and our own servers in the Netherlands. We do not sell data or share it with advertisers. Data does not leave the EEA, except for video delivery through CDN nodes outside the EU when a viewer is located there.

Retention

Account data: while the account exists plus 30 days. Invoices: 7 years (tax law). Watch statistics: while the organisation has an account. Visit statistics: 26 months, aggregated. Logs: 30 days.

Security

Encrypted connections (TLS), hashed passwords, video delivered only via signed, time-limited links, server access restricted to administrators with keys.

Your rights

You have the right to access, rectify, erase, restrict, port and object. If you are a member of an organisation, contact that organisation first; we will assist. Email privacy@movatile.com; we respond within 30 days. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this policy; the date above shows the latest version.