GDPR Privacy Policy

Last updated: 10 February 2024

Korsvlek ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect information about you when you use our platform at xonewiu.pro, and describes your rights under the General Data Protection Regulation (GDPR).

1. Data Controller

Korsvlek acts as the data controller for personal data collected through this platform. If you have any questions about how your data is handled, you may contact us at:

Korsvlek
Glencullen House, Barrack Rd, Glencullen, Dublin 18, Ireland
Email: info@xonewiu.pro
Phone: +353 667 132 454

2. Data We Collect

We collect personal data only to the extent necessary to provide our services. The categories of data we may collect include:

• Account information: name, email address, password (stored in hashed form), and profile details you provide during registration.
• Usage data: pages visited, course progress, features used, session duration, and interaction logs.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Communication data: messages you send us via contact forms or email.
• Payment data: billing details processed by our payment providers. We do not store full card numbers on our servers.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: processing necessary to deliver the services you have signed up for.
• Legitimate interests: improving platform functionality, ensuring security, and preventing fraud.
• Consent: where you have explicitly agreed, for example to receive marketing communications.
• Legal obligation: where we are required to retain or disclose data by applicable law.

4. How We Use Your Data

We use collected data for the following purposes:

• Creating and managing your account and course access.
• Delivering, personalising, and improving our educational content and platform features.
• Processing payments and issuing receipts or certificates.
• Responding to support requests and feedback.
• Sending service-related notifications and, where consented, promotional communications.
• Analysing platform usage to identify technical issues and improve user experience.
• Complying with legal and regulatory obligations.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. Specifically:

• Account data is retained for the duration of your account and for a reasonable period after deletion to resolve disputes or comply with legal obligations.
• Usage and technical logs are retained for up to 12 months unless a longer period is required for security purposes.
• Financial records are retained for the period required by applicable accounting and tax regulations.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with trusted third parties only where necessary:

• Service providers: hosting, analytics, payment processing, and email delivery providers acting as data processors under binding agreements.
• Legal authorities: where required by law, court order, or to protect the rights and safety of users or the public.
• Business transfers: in the event of a merger, acquisition, or asset sale, data may be transferred to the successor entity under equivalent protections.

All third-party processors are required to handle your data in accordance with GDPR and our data processing agreements.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority, or transfers to countries recognised as providing an adequate level of data protection.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where it is no longer necessary or where you withdraw consent.
• Right to restriction: request that we limit how we process your data in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format and transfer it to another controller.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@xonewiu.pro. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Cookies and Tracking

We use cookies and similar technologies to operate the platform, remember your preferences, and analyse usage. Cookies may be strictly necessary, functional, or analytical in nature.

You may manage or withdraw cookie consent through your browser settings or our cookie preference tool. Disabling certain cookies may affect platform functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption in transit, access controls, and regular security assessments. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending a notification to your registered email address. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact

For any questions, requests, or concerns regarding this policy or your personal data, please contact us:

Email: info@xonewiu.pro
Phone: +353 667 132 454
Address: Glencullen House, Barrack Rd, Glencullen, Dublin 18, Ireland