GDPR Privacy Policy.

1. Data Policy

HEALTH AND RESCUE Academy LTD, headquartered in Sofia, as the Data Controller of Personal Data, within the framework of the General Data Protection Regulation (EU) 2016/679, effective as of 25/05/2018, hereinafter referred to as “GDPR”, as applicable from time to time, hereby provides you with the following information regarding the processing of your personal data and your rights as a data subject.

This notice is addressed to natural persons who carry out any kind of activity, electronic or otherwise, with HEALTH AND RESCUE Academy LTD, such as Customers who maintain a permanent business relationship with the Company, their lawful representatives, their special or universal successors, representatives of legal entities, and any natural person who, in any capacity, has transactional relations with HEALTH AND RESCUE Academy LTD.

The processing of personal data consists of the collection, recording, organization, structuring, storage, alteration, retrieval, consultation, use, transmission, restriction, or deletion of personal data that has come or will come to the knowledge of HEALTH AND RESCUE Academy LTD.

HEALTH AND RESCUE Academy LTD, in compliance with the applicable legal framework, has taken all necessary measures, implementing appropriate technical and organizational safeguards for the lawful keeping, processing, and secure storage of personal data files, undertaking to ensure and protect, by all means, the processing of your personal data from loss or leakage, alteration, transmission, or any other unlawful processing. Below follows the entirety of our policies regarding our compliance with the applicable legal framework. Last update: 24/05/2020.

2. What Information We Collect and How We Use It

We directly collect certain data from you, such as information you provide, or data relating to your participation in a course or class. We also automatically collect certain data, such as information about your device and which parts of our Services you interact with.

2.1. Data You Provide to Us

We may collect different data from or about you, depending on how you use our Services. Below are some examples to help you better understand the data we collect.

2.1.1. Account Data

To use certain features (such as enrolling in a course), you need to create a user account. When you create or update your account, we collect and store the data you provide, such as your email address, password, and full name.

Parts of the Services that involve shared content allow you to interact with other users or share content publicly, including posting reviews on a course page or asking and answering questions. This shared content may be publicly viewable by others depending on where it is posted.

2.1.2. Course Data

When you enroll in and take courses, we collect certain data, including courses, assignments, and quizzes you have started and completed.

2.1.3. Payment Data

If you make purchases, we collect certain data related to your purchase (such as your name and postal code) as required to process your order. You must provide certain billing and payment information directly to our payment processing partners, such as your name, credit card information, billing address, and postal code. For security reasons, HEALTH AND RESCUE Academy LTD does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.

The above personal data are also necessary, among other things, for the issuance of the relevant certificates (Certificate of Attendance) after successful completion by Clients of First Aid programs and/or equivalent life-saving programs and/or crisis management programs during emergency events, etc.

2.1.4. Comments

When visitors leave comments on the website, we collect the data displayed in the comments form, as well as the visitor’s IP address and browser user agent string to help detect spam.

An anonymized string created from your email address (also called a “hash”) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

2.1.5. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the site.

2.2. Cookies

Cookies are small text files stored by your browser as you browse the Internet. They can be used to collect, store, and share data about your activities on websites, including HEALTH AND RESCUE Academy LTD. Cookies also allow us to remember things about your visits to our website (coursesonline.pro), such as your preferred language, and make the site easier to use.

We use both session cookies, which expire after a short period of time or when you close your browser, and persistent cookies, which remain stored in your browser for a set period. We use session cookies to recognize you during a browsing session, such as when you log into our site. We use persistent cookies where we need to recognize you over a longer period, such as when you request to remain logged in.

3. Processing of Special Categories of Personal Data

HEALTH AND RESCUE Academy LTD does not process your personal data that relates to your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor does it process genetic or biometric data for the purpose of uniquely identifying you as a data subject, or health data, or data concerning your sexual life or sexual orientation.

4. Data Concerning Children

The processing of personal data of minors is carried out subject to the prior consent of their parents or legal guardians, unless otherwise provided by law. For the purposes of this notice, minors are considered individuals under the age of 18.

5. Lawfulness of Processing

HEALTH AND RESCUE Academy LTD lawfully processes personal data where such processing:

Is necessary for the servicing, support, and monitoring of your business relationship with HEALTH AND RESCUE Academy LTD and the proper performance of contracts concluded between us.
Is necessary for the compliance of HEALTH AND RESCUE Academy LTD with a legal obligation, or for the pursuit of its legitimate interests arising from your transactional relationship with HEALTH AND RESCUE Academy LTD or from other rights arising under the law.
Is based on your prior explicit consent, provided that the processing is not grounded on one of the above lawful bases.

6. Purposes of Processing

The processing of your personal data concerns:

The servicing, support, and monitoring of your business relationship with HEALTH AND RESCUE Academy LTD.
The proper execution of contracts between us.
The fulfillment of the obligations of HEALTH AND RESCUE Academy LTD as data controller or processor.
The exercise of its legal and contractual rights.

7. With Whom We Share Your Data

Access to your personal data is granted to employees of HEALTH AND RESCUE Academy LTD within the scope of their responsibilities.

We share certain data about you with instructors, other learners, companies providing services to us, and our business partners who help us promote our services. We may also disclose your data as required for security, legal compliance, or as part of a corporate restructuring.

We may share your data under the following circumstances or as otherwise described in this Privacy Policy:

With your instructors:
We share the data we have about you (except your email address) with instructors or teaching assistants for courses in which you enroll or request information, so that they can improve their courses for you and other learners. This data may include your city, country, browser language, operating system, device settings, the website that brought you to HEALTH AND RESCUE Academy LTD, and your activities on the platform. If we collect additional data about you (such as age or gender), we may also share it. We do not share your email address with instructors or teaching assistants. We also allow our instructors to use Google Analytics on their course pages to track traffic sources and optimize their course pages.

Your personal data is stored on secure servers owned exclusively by us, located within the European Union.

8. How Long We Keep Your Data

HEALTH AND RESCUE Academy LTD retains your personal data for as long as required by the applicable legal and regulatory framework.

Personal data collected will also be retained after the termination of our business relationship, for the purpose of serving the legitimate business interests of HEALTH AND RESCUE Academy LTD. More specifically, personal data is retained/stored for as long as the certificates (Certificate of Attendance) remain valid.

Every six months, records are reviewed to ensure that our security protocols are up to date and that all unused data is deleted.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve follow-up comments automatically instead of holding them for moderation.

For users who register on our website, we also store the personal information they provide in their user profile. All users can view, edit, or delete their personal information at any time (except for changing their username). Website administrators can also view and edit that information.

9. Your Rights Regarding Your Data

As a data subject, you have the following rights:

Right of access to your personal data and, where such data is processed by HEALTH AND RESCUE Academy LTD as controller, to the purposes of such processing, the categories of data, and the recipients or categories of recipients thereof (Article 15 GDPR).
Right to rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).
Right to erasure of your personal data, subject to the Company’s obligations and lawful rights to retain them based on applicable legal and regulatory provisions (Article 17 GDPR).
Right to restriction of the processing of your personal data if: (i) their accuracy is contested, (ii) the processing is unlawful, or (iii) the purpose of processing no longer applies, provided that there is no legal ground for their retention (Article 18 GDPR).

If you have an account on this website or have left comments, you may request an exported file of the personal data we hold about you, including any data you have provided to us. You may also request that we erase the personal data we hold about you. This does not include data we are obliged to keep for administrative, legal, or security purposes.

10. Data Security

Your data is protected through SSL protocol, security safeguards in the website’s backend and server, and all applicable GDPR rules.

11. Exercising Your Rights and Submitting Complaints

Any request concerning your personal data, including its deletion or the exercise of your rights in general, must be submitted in writing to HEALTH AND RESCUE Academy LTD at edu@healthandrescue.com.

Refusal by HEALTH AND RESCUE Academy LTD or undue delay in satisfying your requests when exercising your rights gives you the right to lodge a complaint with the Hellenic Data Protection Authority, as the competent supervisory authority for the application of the GDPR. In any case, you retain the right to submit a complaint to the competent supervisory authority if you believe that your personal data is being processed in violation of applicable law. For more information, you may visit www.dpa.gr.

12. Changes to This Notice

HEALTH AND RESCUE Academy LTD, based on its applicable data protection policy and within the framework of the prevailing legal and regulatory framework, may revise or amend this notice, which will always be made available in its updated form on the Company’s website.

13. Contacting the Company

If you have any questions about this Privacy Notice, please contact us at: edu@healthandrescue.com.