PIANO WITH ZORISLAV

Privacy

Privacy Policy

Last updated: 1st October 2026

I respect your privacy and protect your personal data in line with the General Data Protection Regulation (GDPR).

This policy explains what data I collect, why, how I use and protect it, and what rights you have.

1. Who I Am

I am Zorislav Frančišković, trading as Piano with Zorislav. I am responsible for the personal data described in this policy. You can reach me at privacy@pianowithzorislav.nl.

2. What Data I Collect

Depending on how you interact with me, I may collect:

  • • Name and surname, email address, phone number, and address
  • • Student date of birth and, where relevant, parent or guardian contact details
  • • Information you submit through contact or booking forms

I only collect data that is necessary for the purposes described below.

3. Why I Collect It

I use your data to:

  • • Respond to enquiries
  • • Schedule, confirm, and manage piano lessons
  • • Provide teaching and related services
  • • Understand the student's level, goals, and needs
  • • Process payments and issue receipts
  • • Keep business, accounting, and tax records

4. Legal Basis

I process data only when there is a valid legal basis:

  • • Contract – for arranging and providing lessons
  • • Legal obligation – for receipts, taxes, and records
  • • Legitimate interest – for administration, communication, and security
  • • Consent – for marketing, photos, recordings, or similar. You can withdraw consent at any time.

5. Students Who Are Minors

I may teach children and young students. For minors, I process data only as needed for lessons, communication, teaching, administration, and safety.

Where appropriate, I communicate with the parent or guardian responsible for arranging lessons. For children under 18, consent for data processing is obtained from the parent or guardian where required by law.

6. Third-Party Providers

I rely on trusted third-party service providers. These providers process personal data on my behalf and under strict confidentiality agreements and Data Processing Agreements (DPAs) in compliance with the GDPR:

  • • Hosting & Database: Fly.io Inc. (application hosting) and Neon Inc. (database infrastructure).
  • • Scheduling & Meetings: Calendly LLC (for booking appointments).
  • • Payment Processing: Mollie B.V. (for secure payment processing).
  • • Communication: Google LLC (Gmail) and Mailjet / Mailgun Technologies (for managing email communication and sending transactional messages).
  • • Embedded Content: Google LLC / YouTube (for embedded video content). Watching embedded videos may result in cookies being set by YouTube/Google.
  • • Productivity & Documentation: Notion Labs, Inc. (for organizing notes related to student records).

These providers process data under their own privacy policies and GDPR obligations.

7. International Transfers

Some providers (such as Calendly and Google) process or store data outside the European Economic Area (EEA), primarily in the United States. Where this occurs, data is protected using recognized legal transfer mechanisms, including the EU-U.S. Data Privacy Framework and European Commission Standard Contractual Clauses (SCCs).

8. Photos, Videos, and Recordings

I may use photos, videos, audio recordings, or student work for teaching, feedback, documentation, or promotion only when there is a proper legal basis.

I will not publish identifiable images, recordings, names, or performances for promotion without permission or another lawful basis. Where consent is the basis, you can withdraw it at any time.

9. Confidentiality

Information shared during lessons is treated with care and confidentiality.

Confidentiality may be limited if the law requires disclosure, if it is needed to establish or defend legal claims, or if there is a serious safety concern.

I never sell or rent your data, and I do not share it for unrelated marketing without a legal basis.

10. How Long I Keep Data

I keep data only as long as necessary for the purposes above or as required by law.

  • • Enquiries, booking and lesson records, and progress notes: up to 1 year after the last lesson
  • • Photos, videos, recordings: only as long as needed for the purpose, or until consent is withdrawn
  • • Receipts and financial records: as long as required by Dutch tax and accounting law

When data is no longer needed, I delete or anonymise it securely.

11. Data Security

I take reasonable technical and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or disclosure.

No online transmission or storage is completely secure, so absolute security cannot be guaranteed. If a reportable breach occurs, I will act within the legal time limits.

12. Your Rights

You have the right to:

  • • Request deletion where legally possible
  • • Object to certain processing
  • • Request restriction of processing
  • • Request data portability where applicable
  • • Withdraw consent at any time
  • • Complain to the Dutch Data Protection Authority

To exercise your rights, contact me at privacy@pianowithzorislav.nl.

13. Changes to This Policy

I may update this policy to reflect changes in my services, data processing, providers, or the law. The latest version will always be on this website with the updated date.