General Data Protection Regulation (GDPR) Compliance

Last updated: November 16, 2024

Introduction

Innovlex Study is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

Innovlex Study acts as the data controller for the personal information we collect and process. You can contact us at:

Email: info@innovlexstudy.com

Phone: +380509371249

Address: Kyivs'ka St, 65/2, Kremenchuk, Poltava Oblast, Ukraine, 39600

Personal Data We Collect

We collect and process the following categories of personal data:

Identity information: name, username, title
Contact information: email address, telephone number, postal address
Account information: login credentials, course enrollment data, learning progress
Technical information: IP address, browser type, device information, operating system
Usage data: course interactions, viewing history, assessment results
Payment information: billing address, transaction details (payment card data is processed by third-party payment processors)
Communications: correspondence, feedback, support requests

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract performance: Processing necessary to provide our educational services and fulfill our contractual obligations
Consent: Where you have given explicit consent for specific processing activities
Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, security, and fraud prevention
Legal obligations: Processing required to comply with legal and regulatory requirements

How We Use Your Data

We use your personal data for the following purposes:

Providing access to masterclasses and educational content
Managing your account and course enrollments
Processing payments and maintaining transaction records
Communicating with you about your courses, updates, and support requests
Personalizing your learning experience and recommending relevant content
Analyzing platform usage to improve our services
Ensuring platform security and preventing fraud
Complying with legal obligations and enforcing our terms
Sending marketing communications where you have consented

Data Sharing and Disclosure

We may share your personal data with:

Service providers: Third-party vendors who assist with platform hosting, payment processing, email delivery, analytics, and customer support
Instructors: Course creators may receive limited information about enrolled participants for educational purposes
Legal authorities: When required by law or to protect our rights and safety
Business transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal data to third parties. All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant authorities
Adequacy decisions recognizing equivalent data protection standards
Other legally recognized transfer mechanisms

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods vary based on data type:

Account information: retained while your account is active and for a reasonable period afterward
Course progress data: retained to maintain your learning history and certificates
Transaction records: retained as required by tax and accounting regulations
Marketing data: retained until you withdraw consent or we no longer have a legitimate interest

After the retention period expires, we securely delete or anonymize your personal data.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes collected or you withdraw consent.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations, such as while we verify its accuracy.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your data unlawfully.

Exercising Your Rights

To exercise any of your rights, please contact us at info@innovlexstudy.com. We will respond to your request within one month, though this may be extended by two additional months for complex requests. We may request verification of your identity before processing your request.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Employee training on data protection
Incident response procedures

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. You can control cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

Automated Decision-Making

We may use automated processing to personalize course recommendations and customize your learning experience. You have the right to request human intervention, express your point of view, and contest automated decisions that significantly affect you.

Changes to This Policy

We may update this policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the last updated date. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

Contact Information

If you have questions, concerns, or requests regarding this policy or our data practices, please contact us: