Last updated: 10 May 2026
This is a translation; in case of differences the Dutch version prevails. Read the Dutch version
TestWisely B.V. (hereinafter: TestWisely, we or us), established at Bolstoen 11-N, 1046 AS Amsterdam, registered with the Chamber of Commerce under number 42133647, provides an AI platform to educational institutions for the assessment of tests. In providing our services and in our other business activities, we process personal data.
In this privacy statement we explain which personal data we process, for which purposes, on which legal basis, with whom we share it and how long we retain it. We process personal data in accordance with the General Data Protection Regulation (GDPR; in Dutch: AVG) and the Dutch GDPR Implementation Act (UAVG).
For some processing operations we act as controller (see chapter 3). For processing on the TestWisely platform carried out on behalf of schools, we act as processor; for that processing the school is the controller (see chapter 2).
The TestWisely platform is used by educational institutions to have tests marked and assessed. In the course of that use, personal data of students and teachers is processed, such as first name, class, student number, position, test answers, test scores.
The school is the controller for this processing within the meaning of the GDPR. TestWisely acts as processor. We process this data solely on the basis of the school's written instructions and pursuant to a data processing agreement.
For information about the purposes, legal bases, retention periods and the exercise of rights with regard to this data, we refer you to your school's privacy statement. Requests under the GDPR (such as access, rectification or erasure) are best addressed directly to your school. TestWisely supports the school in handling these requests.
TestWisely may use test answers to improve the underlying AI models. This is done solely on the basis of anonymised data that can no longer be traced back to an individual student or teacher. We follow a documented process for this. If anonymity cannot be guaranteed, no model improvement takes place on the basis of that data.
Within TestWisely, schools can schedule coaching conversations between a teacher and a student. In doing so, personal data is processed such as the student's name and class, the appointment details (date, time, location), the answers the student fills in beforehand on a fixed questionnaire (intake) and the report the teacher records after the conversation. The school is the controller for this; TestWisely acts as processor.
The teacher and the student concerned can view their own coaching conversations. In addition, staff members with an administrative role within the school — such as a team leader, department head, director or care coordinator — can find the coaching conversations of their own school, view the associated statistics and, where necessary for their guidance or support task, view the content of a conversation. This access is limited to their own school.
Viewing of the content of a coaching conversation by an administrator is recorded in a log (who viewed which conversation and when). This keeps it transparent and verifiable who has had access to this data. Students and teachers are informed through this privacy statement that such viewing is possible.
TestWisely is the controller for the processing operations described below. For each processing operation we explain which personal data we process, for what purpose, on which legal basis, how long we retain the data and with which recipients we share it.
When you visit our website, our web server automatically records some technical data. For this we process the following personal data:
We process this data on the basis of our legitimate interest in keeping our website available, secure and functional and in preventing misuse. We retain server and security logs for 3 months. We use a hosting provider to host our website.
When you contact us by email, telephone or the contact form, or when you use our customer support, we process the data you provide to us in order to handle your question or request. For this we process the following personal data:
In the case of a general contact request, we process this data in order to handle your request for contact with due care. The legal basis is the performance of a (potential) agreement with you or your organisation. We retain this data until 1 year after the last contact, unless longer retention is necessary for customer administration or a legal obligation.
For the conclusion and performance of agreements with educational institutions and other customers, we process data of contact persons and organisations. For this we process the following personal data:
We process this data for the performance of the agreement and to maintain the relationships arising from it. We retain customer data for the term of the agreement and for 2 years thereafter. Some data may be retained for longer if we are obliged to do so, for example under tax legislation.
When you apply for a vacancy or submit an open application, we process the data you provide in order to be able to handle your application. For this we process the following personal data:
We process this data in preparation for a possible employment contract. We retain your application data until 4 weeks after completion of the procedure; if you join us as an employee, the data becomes part of your personnel file.
Via our website you can sign up for our newsletter, in which we inform you about product updates, new features, and relevant developments in education and AI. For this we process the following personal data:
For sending the newsletter, we process your data on the basis of your consent. For business contact persons of existing customers, we may send the newsletter on the basis of our legitimate interest, with an option to unsubscribe in every message in accordance with the law. Analysing opening and click behaviour is done on the basis of our legitimate interest in improving the quality and relevance of our communications. You can unsubscribe at any time via the unsubscribe link in every newsletter; after unsubscribing, we retain your email address for a further 12 months for evidentiary purposes. We use an email marketing provider to send the newsletter.
For the processing for which TestWisely itself is the controller (chapter 3), we do not use solely automated decision-making within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you. Nor do we use profiling with such effects.
On the TestWisely platform, artificial intelligence is used for marking and scoring tests. Before a score or grade is finally determined, the result is checked by a teacher; meaningful human intervention therefore takes place. The school is the controller for this processing. Your school informs you about how the assessment is arrived at, the safeguards applied and your rights in that respect. Questions about this should therefore be addressed to your school.
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful processing. These measures are geared to the state of the art and the risks of the processing, and include, among other things:
We only share personal data with third parties insofar as this is necessary and permitted for the purposes stated above, on the basis of a legal obligation or with your consent. With parties that process personal data on our behalf we conclude a data processing agreement that complies with Article 28 GDPR. For example:
For some parts of our services we use suppliers established outside the European Economic Area (EEA), including suppliers in the United States and Canada.
Transfer of personal data to countries outside the EEA takes place only subject to an appropriate level of protection within the meaning of Chapter V GDPR. In the first instance we rely on an adequacy decision of the European Commission: for the United States the EU-US Data Privacy Framework and for Canada the adequacy decision for commercial organisations. Where an adequacy decision is lacking or does not apply, we use the Standard Contractual Clauses of the European Commission, where appropriate supplemented with additional technical, organisational or contractual safeguards on the basis of a transfer impact assessment.
We do not retain personal data for longer than necessary for the purposes for which it was collected or than is required by law. The specific periods per processing operation are set out in chapter 3.
For processing for which TestWisely is the controller, you have the following rights under the GDPR:
You can submit your request via info@testwisely.nl. We may ask you to identify yourself before we handle your request. In principle we respond within one month of receipt of the request. For requests relating to data we process on behalf of a school, we refer you to your school as controller.
We do not use cookies on this website (testwisely.nl).
For logging in to the TestWisely platform and for the proper functioning of the test application, we use a limited number of cookies and similar technologies. These are used solely for purposes that are strictly necessary for the operation of the platform, such as maintaining a logged-in session, remembering preferences and securing the administration of tests. Under Article 11.7a(3) of the Dutch Telecommunications Act (Telecommunicatiewet), no consent is required for these functional cookies and technologies. The school is the controller for the processing on the platform (see chapter 2).
If you believe that we do not handle your personal data with due care, we ask you to contact us first, so that we can deal with your complaint. In addition, you always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We may amend this privacy statement from time to time, for example as a result of changes in our services or in the law. The most up-to-date version is always available on our website. In the event of significant changes, we actively inform the data subjects.
For questions about this privacy statement or about the way we handle your personal data, you can contact us via:
TestWisely
Bolstoen 11-N
1046 AS Amsterdam
info@testwisely.nl