GDPR Compliance Statement

Data Processing Legal Basis

We process personal data under the following legal bases as defined by the General Data Protection Regulation:

Consent: When you enroll in courses or submit contact forms, you provide explicit consent for processing information necessary to deliver requested services.

Contractual Necessity: Processing enrollment details, assessment results, and session scheduling information is required to fulfill our service agreement with learners.

Legitimate Interest: We process technical usage data to improve platform performance and ensure service quality, provided this processing does not override your privacy rights.

Rights of Data Subjects

Under GDPR, you have the following rights regarding your personal data:

Right of Access: You may request confirmation of what personal data we hold about you and receive a copy of that data.

Right to Rectification: You may request correction of inaccurate or incomplete personal information.

Right to Erasure: You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, subject to legal retention obligations.

Right to Restrict Processing: You may request limitation on how we use your data under certain circumstances.

Right to Data Portability: You may request your data in a structured, commonly used format for transfer to another service provider.

Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Exercising Your Rights

To exercise any of these rights, submit a written request to [email protected] with "GDPR Request" in the subject line. Include specific details about which right you wish to exercise and any relevant account identifiers.

We will respond to valid requests within one month of receipt. Complex requests may require up to three months, in which case we will notify you of the extension and reasons for the delay.

Data Transfers

Your personal information may be processed on servers located outside the European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place through standard contractual clauses or other approved transfer mechanisms.

Data Protection Officer

For questions about our data processing practices or to raise concerns about how we handle personal information, contact our data protection coordinator at [email protected] with "Data Protection" in the subject line.

Supervisory Authority

If you believe our processing of your personal data violates GDPR requirements, you have the right to lodge a complaint with the supervisory authority in your jurisdiction.

Automated Decision Making

We do not use automated decision-making systems or profiling that produce legal effects or similarly significant impacts on individuals. Instructor matching involves human review of assessment results and learning preferences.

Data Security

We implement technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, access controls, and regular security assessments.

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, where required by law.

Policy Updates

Changes to this GDPR compliance statement will be posted on this page with an updated effective date. We will notify active learners of material changes via email to the address associated with their enrollment.