11. Introduction

Below, you can find the privacy- and cookie statement of TMS Certification Course BV, a private limited liability company incorporated under the laws of the Netherlands and registered with the Commercial Register of the Chamber of Commerce under number 91790573, having its registered office at Burgemeester Cortenstraat 160, 6226 GX Maastricht, the Netherlands (hereinafter: “TMS”).

TMS is the controller for the processing and storage of your personal data related to live, in-person clinical TMS certification courses. If you have any questions about the contents of the privacy statement, you can contact TMS via info@tmscourse.eu or info@brainstimulation-academy.com . In this privacy statement, we explain what personal data TMS processes and for what purposes across our online registration platform accessible via https://brainstimulation-academy.com  (including web traffic redirected from www.tmscourse.eu). We recommend that you read this privacy statement carefully.

2. Personal Data

TMS processes personal data on a daily basis. In doing so, TMS acts in accordance with the General Data Protection Regulation (GDPR). TMS respects the privacy of the persons about whom it receives information and handles that information in strict confidence.

TMS processes different types of personal data for different purposes. The personal data and purposes involved are explained below:

• Implementation of the agreement – service provision: TMS processes personal data for the implementation of the agreement. In order to provide the live, in-person TMS course, issue accredited CME certificates, manage facility logistics, and contact the participants, we need your name and, if applicable, your company name, VAT number, address, postal code and place, e-mail address, telephone number, payment details, and information about which brain stimulation equipment you are currently using or intending to use. These data allow us to process your request, contact you, provide our services, and keep you informed of the process. If it is necessary for our service provision, we disclose your personal data to third parties.
• Third party instructors and consultants: TMS also processes personal data of third-party instructors and consultants, which it engages for the provision of its services. Information regarding the processing of personal data of these instructors and consultants is included in a separate agreement with these parties.
• Data processing on the basis of permission: If your personal data are processed on the basis of your permission, you will be entitled to withdraw that permission at any time. Any withdrawal of your permission will not prejudice previous processing on the basis of that permission.
• Social media: TMS can be found on several social media, such as Facebook, LinkedIn, and X. We can use your personal data when you use functions on these websites and/or apps, such as a LinkedIn like or share. If you use such a function, we can obtain your personal data via our social media.

3. Recipients

We do not share your personal details with companies, organisations and individuals outside TMS, except in one of the following circumstances:

• Implementation of an agreement: Issuing your personal data to third-party organisations is permitted if this is necessary to fulfil our contractual obligations, for example in order to provide our services. In that respect, we use:
  • SiteGround: Hosts our website infrastructure on which you register for the TMS course ;
  • Flexible Checkout Fields Pro: Used to process TMS system and clinical hardware information;
  • Stripe: Used for the processing of online payments ;
  • Brevo & WP Mail SMTP: Used for transactional e-mail communication ;
  • Google Workspace / Google Sheets: Used for managing individual course information and administrative records;
  • Zapier: Used for bidirectional communication between the various applications.
•  
• With your permission: We can transfer your data to other parties if you grant us permission to do so. That permission applies only if it is clear what you are granting your permission for and what the consequences are.
• For external processing: We issue personal details to our partners so that they can process data for us on the basis of our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures. Our partners include our IT suppliers and the CRM system administrator.
• For legal reasons: We share personal data if we believe that disclosure of the data is necessary in order to comply with applicable legislation, statutory procedures or requests from government bodies.
• Statutory obligation: If a statutory obligation requires us to do so, we will issue your personal data. For instance, the police may request data from us in the context of a fraud investigation. Another example includes taxes. On the basis of Section 47 of the Dutch State Taxes Act (Algemene wet inzake rijksbelastingen), the tax inspector may request all data that are needed to levy taxes.

TMS imposes conditions on the recipients of your personal data to ensure that these data are handled confidentially and are secured.

4. Retention Period

We do not retain your personal data for longer than necessary, unless we have a statutory obligation to retain your personal data for a longer period. Our basic principle is that we retain your personal data only for as long as that is necessary in order to deliver our services, issue replacement CME training certificates upon request, or comply with Dutch statutory tax retention rules (7 years). We will subsequently remove your personal data in so far as possible.

5. Transfer of Personal Data Outside the EU

TMS may transfer your personal data from the Netherlands to a foreign country. Countries within the European Economic Area (EEA) have a personal data protection level that is similar to the Netherlands. We may transfer your personal data with due observance of the general requirements of privacy legislation. We will transfer your personal data outside the EEA only if an appropriate level of protection exists, e.g. on behalf of adequacy decisions of the European Commission or by means of standard contractual clauses (SCCs) approved by the European Commission.

6. Cookies

TMS is responsible for the optimal performance of its registration platform via https://brainstimulation-academy.com . To ensure that the website functions properly, TMS uses technology that involves processing personal data, such as cookies. A cookie is a small text file that is stored on the visitor’s device when the website is first visited. Cookies are intended to collect information about a person, the website or statistics. Some cookies are also intended to improve user experiences of the website.

Types of cookies

We make a distinction between functional and non-functional cookies:

• Functional & Security Cookies: Functional cookies are necessary for the efficient operation of the website and process personal data only for the purpose for which these data are completed.
• Fraud Prevention and Detection (Stripe): Cookies and similar technologies that we deploy through our site help us learn things about computers and web browsers used to access the Services. This information helps us monitor for and detect potentially harmful or illegal use of our Services. For example, in order to process payment transactions for our Users, it is necessary for Stripe to collect information about the transaction. To help secure these transactions and minimize fraud, we collect additional information through the use of cookies and other technologies in helping to identify bad actors and prevent them from making fraudulent transactions.
• Security Cookies: Deployed to protect user data from unauthorized access.
• Analytics Cookies (Google Analytics / SiteKit): Used to measure website traffic and popular course registration pages (collecting anonymized IP addresses and browser types).

(Note: TMS does NOT deploy third-party advertising or marketing tracking pixels).

Blocking and removing cookies

If you do not wish our website to store cookies on your device, you can indicate this in the cookie notice that appears when you first visit our website. If you have previously accepted our cookies, this notice will no longer appear and you will have to remove the cookies yourself (if desired). You can also opt to block the use of cookies via your browser settings.

7. Your Rights

You have a number of statutory rights with respect to your personal data: access, correction or addition, data deletion, limitation of processing, transfer of digital data and the right of objection. We explain these rights below:

• Right of access, correction or addition and data deletion: Upon your request, we will inform you in writing whether we are processing your personal data. If you have received details about the processing of your personal data, you can request us to correct inaccuracies or to make additions to incomplete information. We will motivate our response. If we make corrections, you will receive a supplementary statement from us. That statement will also be sent to any recipients of your incorrect or incomplete data.
• You can request us to delete your personal data in our systems in one or more of the following cases:
  • the personal data are no longer necessary for the purposes for which we processed them;
  • you withdraw your permission for processing or further processing and no other basis for processing exists;
  • you lodge a motivated objection, and there are no urgent reasons for not respecting your objection;
  • the personal data have been wrongfully processed by us;
  • we have to delete your personal data on the basis of a statutory obligation;
  • we have collected your data by means of mobile telephony or Internet services.
•  
• In the event that you request us to access, correct or supplement or delete your personal data, we have to check your identity. This is for example possible via verification of your account or two-factor authentication. Only if there is no other way, we will request you to identify yourself by means of an identity card or passport. In that event, you can blackline the information on your identity card that is not relevant for us. You can also access the personal data we process via your personal account.
• Limitation of processing: If you have notified us of an inaccuracy or incompleteness in your personal data, you can request us to limit the processing for as long as we are dealing with your request.
• Transfer of digital data: If you have provided us with personal data in a structured, customary digital file format, you will be entitled to request a copy of these data from us or request that your data be transferred directly to another service provider.
• Objection: You may lodge an objection at all times against the processing of personal data relating to you. We will cease processing your data following the receipt of your objection, unless we can put forward urgent justifiable reasons that outweigh your interests, rights and liberties.
• Exercising rights: If you wish to exercise one or more of the rights summarised above, you can contact us via info@tmscourse.eu or info@brainstimulation-academy.com . TMS will take a decision regarding your request within four weeks, unless we inform you within that period that we need a bit more time.

8. Liability

Despite the care and attention paid to the management of this website, it’s possible that the site contains incorrect information. TMS cannot be held liable for technical or editorial errors that occur in this website, nor for any consequential damage resulting from the use or the temporary unavailability of this website or the links to the website of third parties.

9. Complaints

If you have a complaint about the use of your personal data, we refer you to the complaints procedure at the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This body is authorised to examine your complaint.

10. Any Questions?

If you have any questions, send them in an e-mail to: info@tmscourse.eu or info@brainstimulation-academy.com .

This privacy statement is in accordance with the EU General Data Protection Regulation (GDPR). We reserve the right to update this privacy statement periodically. The latest version will be published on this page.

Updated August 2026