Last updated 10 September 2026
Privacy & cookies
This notice explains which personal data Paradox Academy BV processes when you visit this website or use the contact form, why that happens, and which rights you have.
1. Who is responsible
Paradox Academy BV is the controller of the personal data described in this notice. That means we decide why and how that data is used.
All privacy questions and requests go through the contact form. That is the channel we monitor; we do not publish a separate privacy email address or postal address. Please state clearly that your question is about privacy, and we will handle it as such.
2. What we process and why
We collect as little as possible. In practice there are three flows:
Contact form
- Data
- First name, last name, email address, mobile number (optional), and the content of your message.
- Purpose
- To answer your question and, where appropriate, to follow up with you.
- Legal basis
- Carrying out your request and our legitimate interest in being able to answer enquiries (art. 6(1)(b) and 6(1)(f) GDPR).
Server logs
- Data
- IP address, browser type, requested page, and timestamp, recorded by our hosting provider.
- Purpose
- Keeping the website available, secure, and free of errors.
- Legal basis
- Legitimate interest in a working and secure website (art. 6(1)(f) GDPR).
Spam protection
- Data
- Your IP address and a few browser signals are assessed by Cloudflare Turnstile at the moment you submit the contact form.
- Purpose
- Preventing the form from being abused by bots.
- Legal basis
- Legitimate interest in protection against abuse (art. 6(1)(f) GDPR).
3. Cookies and browser storage
This website uses no analytics, advertising, or tracking cookies. That is why there is no cookie banner: nothing requiring your consent is stored on your device unless you ask for it by playing a video.
| Name | Purpose | Lifetime | Consent |
|---|---|---|---|
| NEXT_LOCALE | Remembers whether you are viewing the Dutch or the English version of the site. | 1 year | Not required (functional) |
| Cloudflare Turnstile | Checks that you are not a bot when you submit the contact form. Turnstile sets no advertising cookies and does not follow you across other websites. | Duration of the check | Not required (strictly necessary) |
| YouTube | Videos load only after you click play yourself. Google may then set cookies and browser storage. As long as you do not click, nothing is loaded from Google. | Determined by Google | Only if you click play |
You can always delete or block cookies through your browser settings. Blocking the functional cookie only means your language choice is not remembered.
4. Service providers and transfers
We do not sell your data and we do not share it for marketing purposes. To run the site we do rely on these parties:
| Name | Role | Processing |
|---|---|---|
| Vercel | Hosting of the website and the server logs. | EU and US |
| Contentful | Content management system for blogs, images, and documents. | EU |
| Cloudflare | Spam protection for the contact form (Turnstile). | EU and US |
| Combell | Mail server that delivers the messages from the contact form. | Belgium |
| Google / YouTube | Video playback, only after you have clicked play. | EU and US |
Where data is processed outside the European Economic Area, this happens under the European Commission's standard contractual clauses or an equivalent safeguard.
5. How long we keep data
We keep messages from the contact form for as long as needed to handle your question and allow any follow-up, and no longer than two years after that. Server logs are automatically erased by our hosting provider within a few weeks. You can ask us to delete your message sooner at any time.
6. Your rights
Under the GDPR you have the following rights:
- Access to the data we process about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data.
- Restriction of processing.
- Objection to processing based on legitimate interest.
- Portability of the data you provided yourself.
Use the contact form to exercise any of these rights. We respond within one month. We may ask for extra information so we can be sure the request comes from you.
If you are unhappy with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels). If you live in another member state, you can turn to the supervisory authority of your own country.
7. Security
The website is served over HTTPS only, and messages from the contact form travel to our mailbox over an encrypted connection. We never ask for payment details, passwords, or sensitive data on this site, so please do not include them in a message.
8. Changes
When the website changes, we update this notice. The date at the top shows when the text was last reviewed.