Privacy policy

1. Who is responsible

The controller of your personal data is Glomedia B.V., trading as ViaExam, Heilige Geestweg 18, 2201 JS Noordwijk, the Netherlands (KVK 54778573). For any privacy question or request, email [email protected].

2. What we collect and why

• Free practice test. A random, anonymous identifier stored in a cookie, the questions you were shown, your answers, your score, the time taken and the language you chose. We use this to run the test and show your result. You do not give us your name or email for this. Legal basis: our legitimate interest in providing the free test you started.
• Buying a pass. Your email address, the country and currency of the payment, the amount, the Stripe payment references and your language. We use this to create your pass, send you sign-in links, handle refunds and payment disputes, and keep our accounts. Legal basis: performance of our contract with you, and our legal obligation to keep accounting records.
• Signing in. Sign-in links are single-use and valid for 24 hours; we store only a hashed (unreadable) version of them. A session cookie keeps you signed in while your pass is valid. Legal basis: performance of the contract.
• Your results with a pass. Your practice exams and scores are linked to your pass so you can follow your progress. Legal basis: performance of the contract.
• Service emails. We only email you what the service needs: your sign-in links and messages about your pass. Legal basis: performance of the contract.
• Security. Your IP address and browser information are processed by our hosting provider to deliver and protect the site. We keep limited technical records, such as a count of sign-in requests to prevent abuse and a hashed IP address to detect bots. Legal basis: our legitimate interest in a secure service.
• Statistics. Google Analytics (loaded through Google Tag Manager) only sets cookies if you accept them in the cookie banner. Until then, Google’s consent mode keeps analytics storage switched off. We also use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. Legal basis: your consent (Google Analytics) and our legitimate interest (Cloudflare Web Analytics).

We do not make automated decisions about you with legal or similarly significant effects.

3. Cookies and browser storage

• vx_anon: anonymous identifier for free tests (up to 12 months). Necessary.
• vx_pass: keeps you signed in to your pass (until the pass ends). Necessary.
• Cookie choice: your accept or decline choice is stored in your browser. Necessary.
• _ga, _ga_*: Google Analytics, only after you accept (up to 2 years). Optional.

You can change your choice at any time by clearing this site’s cookies and data in your browser; the banner will appear again.

4. Who processes data for us

• Cloudflare, Inc.: hosting, database, email sending, security and cookieless statistics.
• Stripe Payments Europe, Ltd.: payments. Stripe also processes some data as an independent controller, for example to prevent fraud and meet its legal obligations; see Stripe’s privacy policy.
• Google Ireland Ltd.: Google Analytics and Google Tag Manager, only with your consent.

We have data processing agreements with these providers. Some of them may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

5. How long we keep your data

• Free test data: up to 12 months after your last test.
• Pass data and results: for the duration of the pass and up to 12 months after it ends, so we can handle questions, refunds and disputes.
• Payment and accounting records: 7 years, as required by Dutch tax law.
• Sign-in links: they stop working after 24 hours or after first use.

6. Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time. Email [email protected] from the address linked to your pass, or tell us which device and date you used for a free test. We reply within one month.

7. Complaints

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the authority in your own country, for example the CNIL in France.

8. Age

ViaExam is intended for adults preparing for the civic exam. We do not knowingly collect data from children.

9. Changes

We may update this policy. The date at the top shows the latest version. If a change significantly affects you, we will tell you by email.