Privacy Policy

NTAI’s legal representative is Antonio Valle Amodeo. You can contact NTAI by email at antonio@ntai.nl or by post at the following address: Langegracht 70, 2312 NV Leiden, the Netherlands.

Access to the platform is provided only under an agreement with an organization. For personal data used to provide and administer that organization’s learning environment, the organization is generally the data controller and NTAI acts as its data processor under the applicable agreement and data processing terms. The organization decides who receives access and the purposes for which the platform is used.

NTAI acts as an independent controller for limited processing that it determines itself, such as handling website or business enquiries, protecting the service, administering supplier relationships, and meeting its own legal obligations. The precise roles always follow the circumstances and the agreement with the organization.

NTAI does not offer public or self-service registration. Individuals cannot create or purchase an account independently. An account is provisioned, approved, or requested by an organization that has an agreement with NTAI.

The organization may provide or approve identity and work-related information, determine the appropriate access level, and ask NTAI to update, suspend, or remove access. Authorized users must use the account assigned to them and keep their sign-in details confidential.

The information processed depends on how you interact with NTAI and on the configuration agreed with your organization.

We receive data from the contracting organization, from authorized users when they use the platform or contact us, and automatically from the systems needed to deliver and secure the service.

Platform data is processed to provide organization-managed access, deliver learning content, save progress, produce the reporting agreed with the organization, send transactional and service-related emails such as account confirmations, password-reset messages, and account or security notifications, provide support, maintain security, prevent misuse, and improve reliability. The organization determines the appropriate GDPR legal basis for processing for which it is the controller.

Where NTAI acts as controller, processing is based as appropriate on our legitimate interests in operating and protecting the service and responding to enquiries, compliance with legal obligations, or consent where we specifically request it. We do not sell personal data or use learning data for third-party advertising.

The public website does not use advertising or marketing cookies. Vercel Web Analytics provides anonymous, aggregated usage statistics without placing analytics cookies.

For authorized platform users, Supabase uses strictly necessary authentication cookies to maintain a secure session. NTAI may also use short-lived browser storage for interface functions, such as preserving language preferences or scroll position. Disabling essential storage may prevent the platform from working correctly.

Authorized administrators at your organization may receive participation, progress, completion, or aggregated reporting where this is included in the organization’s agreement and configuration. Your organization determines how that information is used within its own policies and legal obligations.

NTAI uses selected providers to operate the service, including Supabase for authentication and platform data, Vercel for hosting and privacy-focused analytics, and Resend for sending transactional and service-related emails. When Resend is used, it may process the recipient’s email address, message content, and email delivery data. Providers receive only the access needed for their services and are subject to appropriate contractual and security requirements.

Although NTAI is offered only in Europe, a provider may process data outside the European Economic Area. Where that involves an international transfer, NTAI uses a lawful transfer mechanism such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

Organization-managed platform data is retained for the period set by the agreement, the organization’s documented instructions, and any necessary backup or security cycle. Access data may be retained for a limited period after access ends where needed for security, dispute resolution, or legal obligations. Data is then deleted or anonymized unless a longer period is required by law.

NTAI applies appropriate technical and organizational measures designed to protect personal data, including access controls, secure authentication, restricted provider access, and service monitoring. No online service can guarantee absolute security, and organizations and authorized users must also protect their credentials and devices.

Subject to the conditions in the GDPR, you may have rights to information, access, correction, deletion, restriction, data portability, and objection, and to withdraw consent where consent is the basis for processing. NTAI does not use platform data to make solely automated decisions that produce legal or similarly significant effects for authorized users.

For organization-managed learning and access data, contact your organization first because it is generally the controller and can identify you within its environment. NTAI supports the organization in responding to verified requests. For processing where NTAI is the controller, email antonio@ntai.nl. We may ask for information needed to verify your identity.

You may also lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands or the data protection authority in your EU or EEA country. Exercising a right is subject to the scope and exceptions provided by applicable law.

We may update this policy when the platform, our processing, suppliers, or legal requirements change. Material changes will be communicated through the website or the contracting organization where appropriate. The date above shows the latest revision.

For privacy, legal, or general questions, contact Antonio Valle Amodeo at antonio@ntai.nl.