Privacy statement

Who we are

We are responsible for processing personal data on islamitischelessen.nl. Questions? Email info@islamitischelessen.nl.

Visitors

• You don't need an account. We don't use analytics, adverts or tracking cookies.
• The place you last chose is stored only in your own browser (localStorage), so the map opens there next time. That data never reaches us; you can clear it in your browser settings.
• For ‘Recommended for you’, your browser (localStorage) remembers what kind of lessons you viewed and searched for: subject, audience, language, level, organisation and place. That profile never reaches us; clear it or turn it off with one tap at the recommendations.
• On the homepage your browser asks for permission to use your location. We use it only inside your browser, to sort lessons by distance; it isn't sent to us. If you click through to all lessons, your location is rounded (to about 100 metres) and put in the search link; we don't store it.
• On a lesson page that is far from you, we show how far it is by car. For that your browser sends your location, rounded (to about 1 km), to our server, which asks the FOSSGIS OpenStreetMap route planner for the route. Your IP address isn't passed on and we don't store your location.
• Your choice of language is kept in a necessary cookie (“taal”) in your browser, so the site stays in that language.
• For every email we send (login links, reports, new-lesson emails) we keep the address, the type of message, the subject and the time for 180 days, so we can trace delivery problems. We don't keep the content.
• The maps come from OpenStreetMap. Your browser fetches the map tiles from there, so OpenStreetMap sees your IP address and the area you're viewing.
• We count anonymously how often people search on the site and in the app, how often lessons and organisations are viewed, and how often examples and recommendations are used. We keep only the numbers: no cookies, no IP addresses, no device IDs and not what you searched for. The numbers stay on our own server and are deleted after a little over a year.
• Our server keeps technical log files (including IP address, time and page requested) so that we can investigate faults and abuse. These are overwritten automatically.

The iPhone app

• The app works without an account. What you do in the app stays on your phone: your saved lessons and reminders, your alerts for new lessons and who you follow, the place you chose, your language, and what kind of lessons you viewed and searched for (for ‘Recommended for you’). The app also keeps the list of lessons on your phone, so it works without a connection. None of this reaches us; delete the app and it's gone.
• The app uses your location only on your phone, to sort lessons by distance and to see which new lessons match your alerts. For the distance by car, the app sends your location and the lesson's, both rounded to about 1 km, to Apple. A postcode you type in is looked up with Apple. The maps in the app come from Apple Maps. What Apple does with this is covered by Apple's privacy policy.
• What you search for and the place you type in are sent to our server to find lessons and places; we use them for nothing else.
• Reminders and notifications about new or cancelled lessons are made by the app itself, on your phone. We use no push service and don't know your phone. A few times a day the app fetches the public list of lessons and the details of your saved lessons in the background; it works out on your phone which lessons match your alerts.
• If you add a lesson to your calendar, the app does that on your phone. It only asks permission to add events and cannot read your calendar.
• If you choose ‘Directions’ or ‘Google Maps’ on a lesson, Apple Maps or Google Maps opens at the lesson's location. From then on that service's privacy policy applies.
• ‘Report a problem’ and the anonymous counts work in the app just as on the site (see above and ‘Reports and feedback’).

Organisation administrators

• For people who manage an organisation's lessons we store their name and email address, so that we can send them a login link and reports about their lessons. Legal basis: the agreement with the organisation to show its lessons.
• After logging in, the site sets a necessary session cookie (valid for 7 days). For security, we store your IP address and browser with that session. A login link is valid for 15 minutes and works once; we keep the email address someone requests a link for that long. Expired sessions and links are deleted daily.
• We keep this data for as long as the person is an administrator; after that we delete it on request.

Lessons and organisations

Data about lessons, organisations and teachers (such as a name and short description) is published by the organisation itself, or taken by us from its public website with a link to the source. It is meant to be public. An organisation can change it or have it removed at any time.

Reports and feedback

Under every lesson and organisation you can report something, without an account. We store what you fill in (the reason, your details and the date) and, only if you provide it, your email address, so that the organisation or we can respond. The report is emailed to the site administrator and to the organisation.

To prevent abuse we don't store your IP address, but irreversible codes derived from it that change every day: one from your address and one from your network (the first part of your address). They only let us see whether someone reports very often on a single day, and whether the same lesson was already reported from the same network in the past month; such a report then doesn't count again towards the ‘Reports received’ notice on the lesson. Handled reports are deleted 12 months after they were handled.

New lessons by email

You can sign up for an email about new lessons, for example from an organisation or teacher, or matching the filters of your search. We then store your email address, the filters you choose (such as subject, audience and a place with a radius), the language we email you in, when you signed up and when we last emailed you, plus the same daily-changing anti-abuse code as for reports. Legal basis: your explicit consent (GDPR Art. 9(2)(a)), as your choices can say something about your faith.

We only email you once you've confirmed your subscription via the link in the confirmation email. If you don't confirm, we delete your subscription after 7 days. Every email has a link to unsubscribe; this deletes your subscription and email address immediately.

Processors

• Translations: Anthropic (United States). Only the title, description and price details of published lessons go there, to show them in German, English, Turkish and Arabic; no visitor data. These texts can contain names or contact details that an organisation put in its lesson itself.

We have a data processing agreement with Anthropic. The data at Anthropic goes to the United States; all other data stays within the EU.

Your rights

You may view your data, have it corrected or deleted, and object to its processing. Just email us; we'll respond within a month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.