Privacy Statement – Resilt
Last updated: 01-08-2026
Voor de Nederlandse versie: ga naar resilt.com/privacy-policy.
Resilt is a trade name of Scholte Paasman Ventures B.V., registered with the Dutch Chamber of Commerce under number 64434966. We process personal data in accordance with the General Data Protection Regulation (GDPR) and with the Google Play User Data Policy.
This statement explains what data we process, why, on what legal basis, how long we keep it and what rights you have. Our Terms & Conditions also apply to your use of our services.
1. Who this statement applies to
This statement applies to everyone whose personal data we process: visitors to resilt.com, users of the Resilt app, learners on Resilt Academy, users of the Resilt Console, customers who buy products or services from us, participants in our events and conferences, and contacts at the organisations we work with.
2. What data we process
2.1 The Resilt app — Depending on how you use it: account details such as your email address and login credentials, the preferences and settings you choose in the app, app interaction and crash information, basic device data such as model and operating system version, and anonymised usage statistics. The app currently offers no paid features. If we introduce them, we will also process purchase data such as purchase ID and transaction status via Google Play Billing or the Apple App Store.
2.2 Website and forms — If you complete a contact or registration form on resilt.com, weerbaarheidscongres.com or michelscholte.com, we process what you enter yourself: usually your name, email address, organisation, job title, phone number and the content of your message. These forms are handled by our website platform and forwarded to us by email.
2.3 Resilt Academy — For e-learning and courses we process your account details, your organisation, your progress through the course, your answers to knowledge checks and the certificates you earn. Access to a course normally runs for twelve months.
2.4 Resilt Console — For Console licences we process the account and contact details of the users the licence holder registers, the area or organisation the licence covers, and usage logging for security and support.
2.5 Purchases, payment and invoicing — When you make a purchase we process your name, billing address, email address, phone number, your VAT number for business purchases, and the details of your order. Payments are handled by certified payment providers; we do not receive or store full payment card details ourselves.
2.6 Events and conferences — When you register we process your name, organisation, job title, email address, your choice of break-out sessions, your attendance and any feedback afterwards. Registration forms also contain free-text fields, for example for dietary preferences. See Section 4.
2.7 Newsletter — If you subscribe, we process your email address, your name and whether our messages are delivered and opened.
2.8 Technical and security data — To secure our systems we process log files containing, among other things, IP address, timestamp and request type.
3. Why we process this data, and on what legal basis
The GDPR requires a legal basis for every processing activity. These are ours.
Performance of the contract — providing and supporting the app, the Academy and the Console; creating and managing your account; handling orders, delivery, access and invoicing; registering and admitting participants to events; and answering the questions you put to us.
Legal obligation — keeping and retaining our administration, including invoices, and complying with tax and other statutory requirements.
Legitimate interest — securing our systems, detecting and preventing misuse and fraud, improving our products using crash and performance data, and maintaining contact with the organisations and professionals we work with. You can object to processing on this basis; see Section 9.
Consent — sending our newsletter, and using the free-text fields you complete yourself when registering. You can withdraw your consent at any time; this does not affect the lawfulness of processing before withdrawal.
We never process personal data for purposes other than those described here without informing you first.
4. Free-text fields and dietary preferences
We do not ask for special categories of personal data such as health, religion or belief, and we do not record them as such.
At events we do offer a free-text field for dietary preferences. That field has one function: to make sure the catering matches what you can and want to eat. Completing it is voluntary, you decide what you write, and you do not have to give a reason, background or medical explanation — “gluten free” or “no meat” is enough. We use the content of that field solely for catering, share only what is strictly necessary with the caterer or venue, and never use it for profiling, segmentation or marketing.
We erase the content of these free-text fields no later than three months after the event, without removing your registration itself. If you want it erased sooner, email privacy@resilt.com.
5. How long we keep data
We do not keep personal data longer than necessary. In concrete terms, we apply the following periods.
Administration, invoices and payment data — seven years. This is a statutory tax retention obligation we cannot depart from.
Accounts in the app, the Academy and the Console — up to twelve months after your last activity, or sooner if you ask us to delete your account.
Course data, progress and certificates — up to two years after your course access ends, so that you can still request a certificate later.
Newsletter subscription — until you unsubscribe. One click at the bottom of any message is enough.
Contact details in our relationship administration — until you object, or up to three years without any contact.
Event registrations and participant data — up to twelve months after the event. The free-text fields in Section 4 are erased sooner, no later than three months afterwards.
Messages from contact forms — up to twelve months after they have been dealt with.
Log files and security data — a maximum of twelve months.
If a dispute or legal proceeding is under way, we keep the data involved until it has been concluded.
6. Who we share data with
We do not sell personal data and only share it where this is necessary for the service you use, or where the law requires it. The parties we engage include the following.
Website, hosting and forms — our website platform, which handles form submissions and forwards them to us.
Payment and invoicing — Stripe for payments via our website and Academy, Moneybird for invoicing and administration, and Google Play Billing or the Apple App Store for any in-app purchases.
Email and collaboration — the providers of our business email and document environment.
Learning environment — the provider of Resilt Academy.
Events — venues and caterers, strictly to the extent needed for access and catering.
We have data processing agreements in place with these parties. Until 1 August 2026 we also used HubSpot for relationship management, forms and email. That use has ended, the tracking script has been removed from resilt.com and the data has been transferred to our own administration.
7. Aggregated and anonymous insights
We use aggregated, anonymised data to develop reports, analyses and insights for companies, organisations and public authorities. These contain no personal data and cannot be traced back to individual people or households.
8. Cookies, analytics and advertising
On resilt.com, data collection by our website platform is switched off and no Google Analytics or Google Ads tags are currently active. We therefore place no analytics or advertising cookies on this site, only cookies needed to make the site work. Earlier versions of this statement did mention Google Analytics and Google Ads; that was no longer accurate and has been corrected here.
If we switch this on later, we will ask for your consent in advance and update this statement. More information is in our cookie policy.
In the app we do process anonymised usage and crash data, to detect faults and improve the app.
9. Your rights
You have the right to access your data, to have inaccurate data corrected, to have your data erased, to have processing restricted, to object to processing based on legitimate interest, to have your data transferred in a common format, and to withdraw consent you have given.
Send your request to privacy@resilt.com. We respond within one month. To prevent us handing data to the wrong person, we may ask you to identify yourself.
You can also have your account or data deleted via resilt.com/delete-data.
Lodging a complaint. If you disagree with how we handle your data, we would like to hear it from you first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ The Hague, via autoriteitpersoonsgegevens.nl. If you live in another EU country, you may also complain to your local supervisory authority.
10. Security
We take technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include encryption, secure connections (HTTPS), restricted access rights and periodic checks. If a data breach nonetheless occurs that poses a high risk to you, we report it to the Dutch Data Protection Authority and inform you.
11. Transfers outside the EU
Some of our suppliers process data outside the European Economic Area. Where they do, we ensure appropriate safeguards are in place, such as the European Commission's standard contractual clauses or a valid adequacy decision.
12. Children
Our services are not directed at children under the age of thirteen and we do not knowingly collect their data. If you believe we have done so anyway, email privacy@resilt.com and we will delete it.
13. Changes
We may amend this statement if our services or the applicable rules change. The date at the top indicates the latest version. In the event of material changes we will inform you actively, for example by email or in the app.
14. Contact
Resilt – Scholte Paasman Ventures B.V.
Ridderschapstraat 23
3512 CN Utrecht
The Netherlands
Chamber of Commerce number: 64434966
General: info@resilt.com
Privacy: privacy@resilt.com
We have not appointed a data protection officer; this is not mandatory for an organisation of our size and nature. Privacy questions reach us at privacy@resilt.com.
15. Disclaimer
We compile the information on resilt.com with care, but cannot guarantee that it is complete, current or correct. No rights can be derived from its content. We are not liable for damage resulting from the use of our website, app or linked external websites.