Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Island Internship collects, uses, and protects your personal data when you visit our website, submit an application, or interact with our services. We are committed to handling your information responsibly and in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1. Who We Are

Island Internship operates the website islandinternship.com. We are the data controller responsible for personal data processed through this website and in connection with our internship placement services.

For data protection enquiries, contact us at: hello@islandinternship.com

2. What Personal Data We Collect

We collect personal data in the following ways:

Data you provide directly

• Application and enquiry forms: Name, email address, phone number, university, field of study, preferred destination, internship timing, and any additional information you choose to share.
• Email and WhatsApp communications: The content of messages you send us, including any documents you share (such as CVs, university letters, or internship agreement forms).
• Guide download and resource requests: Name and email address when you request a guide or sign up for updates.

Data collected automatically

• Usage data: Pages visited, time on site, referring URL, and device/browser information — collected via cookies and analytics tools (see Section 5).
• IP address: Collected automatically by our hosting infrastructure for security and analytics purposes.

We do not collect sensitive personal data (such as health data, financial account details, or national identification numbers) unless you choose to share it with us in the context of a specific support situation — for example, health or insurance information relevant to your placement.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and manage the application and matching process
• To assess your suitability for internship placements and identify suitable host companies
• To communicate pre-departure guidance, visa information, and logistical support
• To coordinate with host companies and, where relevant, your university or study coordinator on your behalf
• To send program updates and resources you have requested
• To send marketing communications about our programs, if you have given consent (see Section 4)
• To improve our website and services through aggregated, anonymised analytics
• To comply with legal obligations

4. Legal Bases for Processing

Under GDPR, we rely on the following legal bases for processing your personal data:

• Contract (Art. 6(1)(b)): Where processing is necessary to perform a service you have requested — including matching you to placements, providing pre-departure support, and coordinating your program.
• Legitimate interests (Art. 6(1)(f)): Where we have a legitimate interest in operating and improving our services — including responding to enquiries, maintaining records of student interactions, and analysing website usage — provided this does not override your rights and interests.
• Consent (Art. 6(1)(a)): For marketing communications (e.g. newsletters, program updates beyond your current application). You can withdraw consent at any time by emailing us or clicking the unsubscribe link in any communication.
• Legal obligation (Art. 6(1)(c)): Where we are required to process or retain data by law.

5. Cookies and Analytics

Our website uses limited technical measures to understand how visitors use the site and to improve performance. These include:

• Essential cookies: Required for basic site functionality. These cannot be disabled.
• Privacy-friendly analytics: We use Plausible Analytics to collect aggregated page-view and referral information without using advertising cookies or building personal user profiles.

You can control standard browser storage through your browser settings. Limiting analytics collection will not affect your ability to use the site or apply to the program.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy:

• Enquiries that did not result in a placement: Up to 2 years from the date of last contact, unless you ask us to delete your data sooner.
• Enrolled students: For the duration of the placement and for up to 5 years afterwards, to meet any legal or contractual obligations and to maintain program records.
• Marketing communications: Until you unsubscribe or withdraw consent.

When data is no longer required, we delete it securely or anonymise it for aggregate reporting purposes.

7. Third-Party Services

We share your data with third parties only where necessary and with appropriate safeguards:

• Host companies: When you proceed to a placement match, we share your CV and relevant profile information with the proposed host company. We will inform you of this before sharing.
• Email and CRM tools: We use third-party tools to manage communications and applications (such as email service providers and CRM software). These providers process data on our behalf under data processing agreements.
• Analytics providers: Aggregated, anonymised usage data is shared with privacy-friendly analytics providers such as Plausible Analytics.
• University coordinators: Where you ask us to help coordinate paperwork with your university, we may share relevant documentation on your behalf.

We do not sell your personal data to third parties. We do not share your data with host companies or other parties for their independent marketing purposes.

8. International Data Transfers

Island Internship operates with team members and partners in Bali (Indonesia) and Sri Lanka. If your personal data is processed or accessed from outside the European Economic Area (EEA), we take steps to ensure it remains protected under standards equivalent to those required by GDPR — including through appropriate contractual safeguards.

If you have questions about international transfers of your data, please contact us at hello@islandinternship.com.

9. Your Rights

Under GDPR, you have the following rights in relation to your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate or incomplete data.
• Erasure: You can ask us to delete your data, subject to any legal obligations we have to retain it.
• Restriction: You can ask us to restrict processing of your data in certain circumstances.
• Portability: You can request your data in a structured, machine-readable format where technically feasible.
• Objection: You can object to processing based on legitimate interests, including direct marketing.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at hello@islandinternship.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (AP), at autoriteitpersoonsgegevens.nl.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes access controls, encrypted communication channels, and limiting data access to team members who need it to provide our services. No method of internet transmission or storage is completely secure — if you have concerns about a specific data security matter, contact us directly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify enrolled students by email and update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.

12. Contact

For any questions about this Privacy Policy or about how we handle your data:

• Email: hello@islandinternship.com
• WhatsApp: +31 6 8366 0360