Privacy Policy (GDPR-Compliant)

Effective Date: 12.04.2025
Last Updated: 23.05.2025

At https://acelearnonline.eu/, we are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, and safeguard your data when you visit or interact with our website and use our services powered by Tutor LMS.

1. Data Controller

https://acelearnonline.eu/
Address: Uus tn 56, 50606 Tartu linn, Tartu maakond
Email: siim.vares@tartu.ee

2. What Personal Data We Collect

We may collect and process the following personal information:

• Identification Data: your name, email address, phone number.
• Account Information: username, encrypted password, role (student/instructor).
• Learning Activity: enrolled courses, progress, quiz results, certifications.
• Payment Information: billing details (processed by third-party services, we do not store credit card data).
• Technical Data: IP address, browser type, device type, operating system, location (based on IP), cookies.

3. Purpose of Data Processing

We collect your data for the following purposes:

• To create and manage your account;
• To provide access to online courses and LMS features;
• To track course progress and generate certificates;
• To process transactions and manage subscriptions;
• To provide customer support and technical assistance;
• To comply with legal obligations;
• To analyze and improve website performance and user experience.

4. Legal Basis for Processing

Under GDPR, we rely on the following lawful bases to process your personal data:

• Contractual necessity — to provide access to purchased courses and services;
• Consent — for email marketing, cookies, etc.;
• Legitimate interests — for analytics, site optimization, and fraud prevention;
• Legal obligations — to comply with tax and accounting regulations.

5. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain user sessions;
• Remember user preferences;
• Analyze website traffic (e.g., via Google Analytics).

You can manage your cookie preferences via your browser settings or our cookie banner on your first visit.

6. Data Sharing and Third Parties

We only share your personal data when necessary and with trusted third parties such as:

• Hosting and IT infrastructure providers;
• Payment gateways (e.g., PayPal, Stripe);
• Analytics tools (e.g., Google Analytics, Matomo);
• Instructors (if you enroll in their courses).

All data processors are required to comply with GDPR and have signed Data Processing Agreements (DPAs) with us.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above or to comply with applicable laws and regulations.

8. Your Rights Under GDPR

As an EU data subject, you have the right to:

• Access your personal data;
• Correct inaccurate or outdated information;
• Request deletion (“right to be forgotten”);
• Restrict or object to processing;
• Request data portability;
• Withdraw consent at any time (where applicable);
• Lodge a complaint with a Data Protection Authority (DPA).

To exercise any of these rights, please contact us at: siim.vares@tartu.ee

9. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, misuse, loss, or disclosure. However, no method of internet transmission is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page, and you will be notified via email or website notification where applicable.