Privacy Policy

1. Data Policy

Health+Rescue Academy, based in Sofia, as the Data Controller of personal data, within the framework of the General Data Protection Regulation (EU) 2016/679 effective from 25/05/2018, hereinafter “GDPR”, as applicable, hereby provides you with the following information regarding the processing of your personal data and your rights as a data subject.

This notice is addressed to natural persons engaging in any electronic or non-electronic interaction with Health+Rescue Academy, such as, for example, Clients with an ongoing collaboration with the company, their legal representatives and successors, representatives of legal entities, and any natural person who, in any capacity, maintains transactional relationships with Health+Rescue Academy.

The processing of personal data includes the collection, recording, organization, structuring, storage, alteration, retrieval, consultation, use, transmission, restriction, or deletion of personal data that has or will come to the knowledge of Health+Rescue Academy.

Health+Rescue Academy, in compliance with the current legal framework, has taken all necessary actions by implementing appropriate technical and organizational measures for the lawful processing, secure storage, and protection of the personal data records, committing to safeguard your personal data from loss, leakage, alteration, transmission, or any other unauthorized processing. Below follows our complete policy regarding compliance with the current legal framework. Last updated: 24/05/2020.

2. What Information We Collect and How We Use It

We directly collect certain data from you, such as information you enter and data related to your participation in a course or class. We also automatically collect certain data, such as information about your device and which parts of our Services you interact with.

2.1. Data You Provide to Us

We may collect different data from or about you depending on how you use the Services. The following examples help illustrate the data we collect:

2.1.1. Account Data

To use certain features (like enrolling in a course), you need to create a user account. When you create or update your account, we collect and store the data you provide, such as your email address, password, and full name.

The shared content sections of our Services allow you to interact with other users or publicly share content, such as posting reviews, questions, or answers. This shared content may be publicly visible depending on where it is posted.

2.1.2. Course Data

When you enroll in and take courses, we collect certain data, including which courses, assignments, and quizzes you start and complete.

2.1.3. Payment Data

If you make purchases, we collect certain data related to your purchase (like your name and postal code), as necessary to process your order. You must provide payment and billing data directly to our payment processing partners, such as your name, credit card details, billing address, and postal code. For security, Health+Rescue Academy does not collect or store sensitive cardholder data like full credit card numbers or authentication data.

The above personal data is also necessary, among other things, for the issuance of relevant certificates, such as Certificates of Attendance, following the successful completion by Clients of First Aid programs and/or life-saving training and/or crisis management programs during emergency situations, etc.

2.1.4. Comments

When visitors leave comments on the site, we collect the data shown in the comments form as well as the visitor’s IP address and browser user-agent string to help detect spam.

An anonymized string (also called a hash) created from your email address may be provided to the Gravatar service to check if you are using it. The Gravatar privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture is publicly visible within your comment.

2.1.5. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract any location data from images on the website.

2.2. Cookies

Cookies are small text files stored by your browser as you browse the Internet. They are used to collect, store, and share data about your activity on websites, including Health+Rescue Academy. Cookies also help remember details of your visits, like your preferred language, and make the site easier to use.

We use both session cookies, which expire after a short time or when you close your browser, and persistent cookies, which stay in your browser for a set period. We use session cookies to identify you during a browsing session, such as when you log into our site. We use persistent cookies to recognize you over a longer period.

If you leave a comment on our site, you may opt to save your name, email address, and website in cookies for your convenience. These cookies last for one year.

If you have an account and log in, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login info and screen preferences. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. If you log out, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be stored in your browser indicating the post ID of the edited article. It expires after one day.

2.3. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with the embedded content, including if you are logged in to that website.

3. Processing of Special Categories of Personal Data

Health+Rescue Academy does not process personal data related to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data for identification, or data concerning your health, sex life, or sexual orientation.

4. Children’s Data

The processing of personal data of minors is carried out with the prior consent of parents or legal guardians, unless otherwise provided by law. For the purposes of this notice, minors are considered individuals under the age of 18.

5. Lawfulness of Processing

Health+Rescue Academy lawfully processes personal data when:

• It is necessary for the servicing, support, and monitoring of your transactions with Health+Rescue Academy, and the proper execution of your contracts.

• It is necessary for Health+Rescue Academy‘s compliance with legal obligations or for pursuing its legitimate interests arising from your transactions or its legal rights.

• It is based on your prior explicit consent when processing is not grounded in the above legal bases.

6. Purposes of Processing

Your personal data is processed for the purposes of:

• Servicing, supporting, and monitoring your transactions with Health+Rescue Academy,

• Proper execution of contracts,

• Fulfilling Health+Rescue Academy’s obligations as data controller or processor,

• Exercising its legal and contractual rights.

7. Who We Share Your Data With

Access to your personal data is granted to employees of Health+Rescue Academy within the scope of their responsibilities.

We share certain data about you with instructors, other students, companies that perform services on our behalf, and business partners who help us promote our services. We may also share your data as required for safety, legal compliance, or as part of a corporate restructuring.

Your data may be shared under the following circumstances:

With your instructors:
We share data (excluding your email address) with instructors or teaching assistants for courses you enroll in or request information about, to help them enhance their courses. This data may include your city, country, browser language, operating system, device settings, referring website, and activities on Health+Rescue Academy. If we collect additional data (like age or gender), we may share that too. We do not share your email address. Instructors may use Google Analytics to track traffic sources and optimize course pages.

Your personal data is securely stored on our own servers located within the European Economic Area, specifically in Greece.

8. How long we retain your data

Health+Rescue Academy LTD retains your personal data for the duration specified in each case by the applicable legislative and regulatory framework.

The personal data collected will also be retained after the termination of our existing cooperation in order to serve the legitimate business interests of Health+Rescue Academy LTD. Specifically, personal data is retained/stored for as long as the certificates, such as the Certificate of Attendance, remain valid.

Every 6 months, we review our records to ensure that our security protocols are up to date and that any data not being used is deleted.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and automatically approve any follow-up comments instead of holding them in a moderation queue.

For users who register on our website, we also store the personal data provided in their user profile. All users can view, edit, or delete their personal data at any time (except for changing their username). Website administrators can also view and edit this information.

9. Your rights regarding your data

As a data subject, you retain the following rights regarding your personal data:

• Right of access to your personal data and, if processed by Health+Rescue Academy LTD as the data controller, to the purposes of processing, the categories of data, and the recipients or categories of recipients (Article 15 GDPR).

• Right to rectification of inaccurate data and to complete incomplete data (Article 16 GDPR).

• Right to erasure of your personal data, subject to the Company’s legal obligations and rights to retain such data in accordance with the applicable legislative and regulatory provisions (Article 17 GDPR).

• Right to restrict processing of your personal data if the accuracy of the data is disputed, the processing is unlawful, or the purpose of processing no longer applies—provided that no legal grounds for retention exist (Article 18 GDPR).

If you have an account on this website or have left comments, you may request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You may also request the deletion of the personal data we hold about you. This does not include data we are obliged to retain for administrative, legal, or security reasons.

10. Data Security

Your data is protected by SSL protocol, security safeguards on the backstorage of the site and server, and full compliance with all GDPR requirements.

11. Exercising your rights and submitting a complaint

Any request regarding your personal data, its deletion, or the exercise of your rights in general must be submitted in writing to Health+Rescue Academy LTD at the email address: hara@healthandrescue.com

If Health+Rescue Academy LTD refuses or unreasonably delays satisfying your request when exercising your rights, you have the right to file a complaint with the Bulgarian Data Protection Authority, the competent supervisory authority for the enforcement of the GDPR. In any case, you retain the right to lodge a complaint with the competent authority if you believe that your personal data is being processed in violation of the applicable legislation. For more information, you can visit: www.cpdp.bg.

12. Changes to this notice

Health+Rescue Academy LTD may revise or modify this notice based on its data protection policy and the applicable legal and regulatory framework. The updated version will always be available on the company’s website.

13. Contacting the company

If you have any questions about this Privacy Notice, please contact us at  hara@healthandrescue.com

.