GDPR Compliance

Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation. This document outlines how we comply with GDPR requirements and what rights you have regarding your personal information.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to provide the educational services you have enrolled in
• Legitimate Interests: We have legitimate interests in improving our courses and communicating relevant educational opportunities
• Consent: Where applicable, we obtain your explicit consent for specific processing activities such as marketing communications
• Legal Obligations: We may process data to comply with legal requirements such as financial record-keeping

Your Rights Under GDPR

You have comprehensive rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Note that we may retain certain information where legal obligations require it.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of disputed information.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with your national data protection authority if you believe our processing of your personal data violates GDPR.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact us at [email protected] with "Data Protection Inquiry" in the subject line.

International Data Transfers

Your personal data is processed and stored within the European Economic Area. If we engage service providers located outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods depend on the nature of the data:

• Account information: Retained while your account is active and for six years after closure for legal compliance
• Course progress and assignments: Retained for the duration of your enrollment plus three years
• Communications: Retained for three years from the date of the last interaction
• Marketing consent records: Retained for seven years from the date consent was given or withdrawn

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All decisions regarding course enrollment and access are made with human involvement.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and no later than seventy-two hours after becoming aware of the breach. The notification will include the nature of the breach, likely consequences, and measures taken or proposed to address it.

Exercising Your Rights

To exercise any of your GDPR rights, please send a written request to [email protected]. We may require verification of your identity to prevent unauthorized disclosure of personal data. We will respond to your request within one month, or inform you if we need additional time due to the complexity of the request.