1. Introduction

Below, you can find the privacy- and cookie statement of Academy of Brain Stimulation BV, a private limited liability company incorporated under the laws of the Netherlands and registered with the Commercial Register of the Chamber of Commerce under number 91750032, having its registered office at Burgemeester Cortenstraat 160, 6226 GX Maastricht, the Netherlands (hereinafter: “ABS”).

ABS is the controller for the processing and storage of your personal data. If you have any questions about the contents of the privacy statement, you can contact ABS via info@brainstimulation-academy.com . In this privacy statement, we explain what personal data ABS processes and for what purposes across our online platform accessible via https://brainstimulation-academy.com . We recommend that you read this privacy statement carefully.

2. Personal Data

ABS processes personal data on a daily basis. In doing so, ABS acts in accordance with the General Data Protection Regulation (GDPR). ABS respects the privacy of the persons about whom it receives information and handles that information in strict confidence.

ABS processes different types of personal data for different purposes. The personal data and purposes involved are explained below:

• Implementation of the agreement – service provision: ABS processes personal data for the implementation of the agreement. In order to provide our services, make our e-learnings, online courses, and re-accreditation programs available in your account, manage membership subscriptions, deliver hands-on workshops, process clinic licensing packages, and handle consultation requests for the Excellence Program, we need your name and, if applicable, your company name, VAT number, address, postal code and place, e-mail address, telephone number, payment details, selected training center location, and information about which brain stimulation equipment you are currently using or intending to use. These data allow us to process your request, contact you, provide our services, and keep you informed of the process. If it is necessary for our service provision, we disclose your personal data to third parties.
• Third party instructors and consultants: ABS also processes personal data of third-party instructors and consultants, which it engages for the provision of its services. Information regarding the processing of personal data of these instructors and consultants is included in a separate agreement with these parties.
• Data processing on the basis of permission: If your personal data are processed on the basis of your permission, you will be entitled to withdraw that permission at any time. Any withdrawal of your permission will not prejudice previous processing on the basis of that permission.
• Contact form: You can contact us using the contact form on the website https://brainstimulation-academy.com/contact/ . In order to provide you with the best possible answer, we ask you to enter your name, e-mail address, telephone number, location, preferred hardware, and your message for us.
• Social media: ABS can be found on several social media, such as Facebook, LinkedIn, X, and Instagram. We can use your personal data when you use functions on these websites and/or apps, such as a LinkedIn or Facebook like or share. If you use such a function, we can obtain your personal data via our social media.

(Note: ABS does not operate an active marketing newsletter or deploy newsletter opt-ins).

3. Recipients

We do not share your personal details with companies, organisations and individuals outside ABS, except in one of the following circumstances:

• Implementation of an agreement: Issuing your personal data to third-party organisations is permitted if this is necessary to fulfil our contractual obligations, for example in order to provide our services. In that respect, we use:
  • SiteGround: Web hosting and cloud server infrastructure ;
  • Brevo & WP Mail SMTP: Transactional email delivery and booking notifications ;
  • Stripe & WooCommerce: Online payment processing and recurring subscription management ;
  • WPForms: Contact forms and consultation inquiry processing ;
  • Recognized Partner Training Centers: Participant details (name, email, preferred date ranges) are shared with designated local partner centers (e.g., in Netherlands, Germany, UK, Kenya, South Africa, India, Ecuador, UAE, Greece) strictly to coordinate hands-on workshop scheduling.
•  
• With your permission: We can transfer your data to other parties if you grant us permission to do so. That permission applies only if it is clear what you are granting your permission for and what the consequences are.
• For external processing: We issue personal details to our partners so that they can process data for us on the basis of our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures. Our partners include our IT suppliers and system administrators.
• For legal reasons: We share personal data if we believe that disclosure of the data is necessary in order to comply with applicable legislation, statutory procedures or requests from government bodies.
• Statutory obligation: If a statutory obligation requires us to do so, we will issue your personal data. For instance, the police may request data from us in the context of a fraud investigation. Another example includes taxes. On the basis of Section 47 of the Dutch State Taxes Act (Algemene wet inzake rijksbelastingen), the tax inspector may request all data that are needed to levy taxes.

ABS imposes conditions on the recipients of your personal data to ensure that these data are handled confidentially and are secured.

4. Retention Period

We do not retain your personal data for longer than necessary, unless we have a statutory obligation to retain your personal data for a longer period. Our basic principle is that we retain your personal data only for as long as that is necessary in order to deliver our services (such as active account access) or to satisfy statutory Dutch fiscal tax retention requirements (7 years). We will subsequently remove your personal data in so far as possible.

5. Transfer of Personal Data Outside the EU

ABS may transfer your personal data from the Netherlands to a foreign country. Countries within the European Economic Area (EEA) have a personal data protection level that is similar to the Netherlands. We may transfer your personal data with due observance of the general requirements of privacy legislation. When coordinating workshop bookings with international partner training centers (e.g., in Kenya, South Africa, India, Ecuador, UAE) or utilizing global cloud infrastructure (Stripe, Google), ABS transfers personal data outside the EEA only if an appropriate level of protection exists. For this purpose, ABS relies on standard contractual clauses (SCCs) approved by the European Commission.

6. Cookies

ABS is responsible for the optimal performance of its website https://brainstimulation-academy.com . To ensure that the website functions properly, ABS uses technology that involves processing personal data, such as cookies. A cookie is a small text file that is stored on the visitor’s device when the website is first visited. Cookies are intended to collect information about a person, the website or statistics. Some cookies are also intended to improve user experiences of the website.

Types of cookies

We make a distinction between functional and non-functional cookies:

• Functional Cookies: Functional cookies are necessary for the efficient operation of the website and process personal data only for the purpose for which these data are completed (such as maintaining account login sessions, platform navigation, and WooCommerce shopping cart functionality). We always place functional cookies, regardless whether you give your permission. Otherwise, the website cannot function well.
• Security & Payment Cookies (Stripe): Deployed during checkout transactions to identify bad actors, protect user data, and prevent fraudulent payment transactions.
• Analytics Cookies (Google Analytics / SiteKit): We use analytics cookies to collect statistics about the use of the website by visitors. Analytics cookies show us which parts of the website need improving and, for instance, allow us to measure the popularity of certain pages (collecting anonymized IP addresses, browser types, and device information). By measuring website use, the site can be improved to benefit visitors.

(Note: ABS does NOT deploy third-party advertising or marketing tracking pixels).

Blocking and removing cookies

If you do not wish our website to store cookies on your device, you can indicate this in the cookie notice that appears when you first visit our website. If you have previously accepted our cookies, this notice will no longer appear and you will have to remove the cookies yourself (if desired). You can also opt to block the use of cookies via your browser settings.

7. Your Rights

You have a number of statutory rights with respect to your personal data: access, correction or addition, data deletion, limitation of processing, transfer of digital data and the right of objection. We explain these rights below:

• Right of access, correction or addition and data deletion: Upon your request, we will inform you in writing whether we are processing your personal data. If you have received details about the processing of your personal data, you can request us to correct inaccuracies or to make additions to incomplete information. We will motivate our response. If we make corrections, you will receive a supplementary statement from us. That statement will also be sent to any recipients of your incorrect or incomplete data.
• You can request us to delete your personal data in our systems in one or more of the following cases:
  • the personal data are no longer necessary for the purposes for which we processed them;
  • you withdraw your permission for processing or further processing and no other basis for processing exists;
  • you lodge a motivated objection, and there are no urgent reasons for not respecting your objection;
  • the personal data have been wrongfully processed by us;
  • we have to delete your personal data on the basis of a statutory obligation;
  • we have collected your data by means of mobile telephony or Internet services.
•  
• In the event that you request us to access, correct or supplement or delete your personal data, we have to check your identity. This is for example possible via verification of your account or two-factor authentication. Only if there is no other way, we will request you to identify yourself by means of an identity card or passport. In that event, you can blackline the information on your identity card that is not relevant for us. You can also access the personal data we process via your personal account.
• Limitation of processing: If you have notified us of an inaccuracy or incompleteness in your personal data, you can request us to limit the processing for as long as we are dealing with your request.
• Transfer of digital data: If you have provided us with personal data in a structured, customary digital file format, you will be entitled to request a copy of these data from us or request that your data be transferred directly to another service provider.
• Objection: You may lodge an objection at all times against the processing of personal data relating to you. We will cease processing your data following the receipt of your objection, unless we can put forward urgent justifiable reasons that outweigh your interests, rights and liberties.
• Exercising rights: If you wish to exercise one or more of the rights summarised above, you can contact us via info@brainstimulation-academy.com . ABS will take a decision regarding your request within four weeks, unless we inform you within that period that we need a bit more time.

8. Liability

Despite the care and attention paid to the management of this website, it’s possible that the site contains incorrect information. ABS cannot be held liable for technical or editorial errors that occur in this website, nor for any consequential damage resulting from the use or the temporary unavailability of this website or the links to the website of third parties.

9. Complaints

If you have a complaint about the use of your personal data, we refer you to the complaints procedure at the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This body is authorised to examine your complaint.

10. Any Questions?

If you have any questions, send them in an e-mail to: info@brainstimulation-academy.com .

This privacy statement is in accordance with the EU General Data Protection Regulation (GDPR). We reserve the right to update this privacy statement periodically. The latest version will be published on this page.

Updated August 2026