Last updated: 22 January 2026

This webpage explains how Goya de Hoog Consultancy (“we”, “us”, “our”) handles personal data, cookies, and the rules for using this website and our services. If you have questions, contact us at contact@goyadehoog.com or call +31 657782297.

1) Privacy Notice (GDPR/AVG)

1.1 Who we are (Data Controller)

Data Controller: Goya de Hoog Consultancy
Website: goyadehoog.com
Business Address: Keizersgracht 520H, 1017 EK Amsterdam, The Netherlands
KvK number: 96682329
VAT/BTW number: NL005226316B81

We are established in the Netherlands and process personal data in accordance with the General Data Protection Regulation (GDPR/AVG).

1.2 What personal data we collect

We collect and process the following categories of data:

A. Website Data: Email addresses (newsletters), contact form details (name, email, phone, location, enquiry content).
B. Service Data: Identification and case-related info (CVs, certificates, financial documents, travel history) shared for education/visa support.
C. Technical Data: IP-derived location, device/browser info, and website usage data (see Cookie Policy).

1.3 Why we use personal data (Purposes)

We use your data to communicate with you, deliver agreed consultancy services, prepare administrative documents, manage billing, improve our services, and comply with legal/tax obligations.

1.4 Legal bases for processing

Contract: To deliver the services you requested.
Legal Obligation: For statutory bookkeeping (tax/financial records).
Legitimate Interests: To secure our business and improve our services.
Consent: For optional activities like newsletters (which you can withdraw at any time).

1.5 Who we share data with

We do not sell data. We share it only when necessary with:

Education providers & Government authorities (only as instructed for your case).
IT/Business Processors: Including Google Workspace (email/storage), e-Boekhouden.nl (accounting), and Meta Platforms, Inc. (WhatsApp). We have Data Processing Agreements (DPA) in place with these providers.

1.6 International transfers (Global Operations)

As we operate globally, your data may be shared with organisations outside the EEA (e.g., non-EU universities). We ensure these transfers are legal by using Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

1.7 Retention (How long we keep data)

Enquiry data: Up to 24 months after last contact.
Client files & Invoices: 7 years (aligned with Dutch statutory tax requirements).

1.8 Your rights under GDPR/AVG

You have the right to access, correct, or delete your data, restrict or object to processing, and data portability. You may lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands. We do not use automated decision-making or profiling.

1.9 Security

We enforce Two-Factor Authentication (2FA) and encryption on our primary systems (Google Workspace and e-Boekhouden) to protect your data against unauthorized access.

2) Cookie Policy

2.1 Categories of cookies

We use functional cookies (strictly necessary for the site), analytical cookies (to measure performance), and social media cookies (via the WhatsApp button).

2.2 Cookie List

2.3 Managing Consent

You can adjust preferences via our cookie banner. Cookies requiring consent will not be placed unless you take an active "Opt-in" action.

Have questions? Get in touch