Privacy Statement

The HPA Scan is offered by Next Learning Valley B.V., Atoomweg 63, Kantoorunit A3.04, 3542 AA Utrecht, the Netherlands, registered with the Dutch Chamber of Commerce under number 61580848. Next Learning Valley is the controller for the processing described in this statement. You can reach us at info@nextlearningvalley.com.

This statement covers the HPA Scan survey, whether you reach it through a direct link, a QR code, or embedded on our website.

When you start the survey we ask for your name, work email address, organisation name, and the perspective you answer from (employee, management, or internal academy). We derive the domain of your email address to group respondents from the same organisation.

During the survey we collect your answers to the context questions (such as role, tenure, and optionally department and country) and your scores on the survey statements, together with timestamps.

The survey pages use no analytics, advertising trackers, or marketing cookies. Our abuse-protection service (see section 4) processes your IP address once, at the moment you submit the signup form; we do not store it.

We process this data to generate your personal results page, to provide your organisation with insight into the assessment results, to follow up with you about your results and, where relevant, our services, and to improve the HPA instrument using aggregated, non-identifiable statistics.

The legal basis is your consent. You give it by starting the survey after reading the consent notice that links to this statement. You can withdraw it at any time via the contact route in section 6; withdrawal does not affect processing that took place before it.

The HPA Scan runs on the following service providers:

• Vercel hosts the application.
• Neon hosts the database. The database is located in the United States.
• Cloudflare protects the signup form against automated abuse and processes your IP address for that purpose.
• OpenAI generates the short coaching text on your results page. It receives only an anonymised summary of your scores: no name, email address, or organisation name is sent.

Where these providers process data in the United States, we rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses as included in each provider's data processing terms.

We keep your individual data for 24 months after your last activity in the survey, and delete it after that. Aggregated statistics that can no longer be traced to you may be kept longer.

You have the right to access, rectification, erasure, objection, and data portability, and you can withdraw your consent at any time. Send requests to support@nextlearningvalley.com; we respond within one month. Your results page already shows everything you entered and scored, so it also serves as a direct view of your data.

If you believe we handle your data incorrectly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Your organisation receives results at group level. In addition, the assessment coordinator for your organisation can view individual responses, including yours. Results are used to understand how the internal academy functions, not to evaluate the performance of individual people.

The HPA Scan is a diagnostic instrument. Results are indicative and intended as input for reflection and dialogue, not as an assessment of individuals. The coaching text on your results page is generated by AI and may contain inaccuracies. No rights can be derived from the results.