1. Introduction
Expelyouth ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and enroll in our 3D modeling courses.
We comply with the EU General Data Protection Regulation (GDPR) and Finnish data protection laws.
2. Information We Collect
2.1 Personal Information
When you register for courses or contact us, we may collect:
- Name and contact details (email address, phone number, postal address)
- Date of birth and identification information
- Educational background and professional experience
- Payment and billing information
- Course preferences and enrollment history
2.2 Technical Information
We automatically collect certain information when you visit our website:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on our site
- Referring website addresses
- Cookies and similar tracking technologies
2.3 Course-Related Information
- Attendance records and participation
- Assignment submissions and project files
- Assessment results and feedback
- Communications with instructors and staff
3. How We Use Your Information
We use the collected information for the following purposes:
- Course Administration: To manage enrollments, deliver courses, track progress, and issue certifications
- Communication: To send course updates, schedule changes, and important announcements
- Payment Processing: To process tuition fees and manage billing
- Website Improvement: To analyze usage patterns and enhance user experience
- Marketing: To send promotional materials about new courses (with your consent)
- Legal Compliance: To comply with legal obligations and resolve disputes
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract Performance: Processing necessary for delivering courses you've enrolled in
- Consent: When you've given explicit permission (e.g., marketing communications)
- Legitimate Interest: For improving our services and website functionality
- Legal Obligation: When required by Finnish or EU law
5. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience. We use:
- Essential Cookies: Necessary for website functionality
- Analytics Cookies: To understand how visitors use our site
- Preference Cookies: To remember your settings and choices
- Marketing Cookies: To deliver relevant advertisements (with consent)
You can manage cookie preferences through our Cookie Settings or your browser settings.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Payment processors, email services, and hosting providers bound by confidentiality agreements
- Educational Partners: When relevant for certification or accreditation purposes
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In case of merger, acquisition, or sale of assets
All third parties are required to maintain data security and use information only for specified purposes.
7. International Data Transfers
Your data is primarily stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through:
- EU-approved standard contractual clauses
- Adequacy decisions by the European Commission
- Your explicit consent
8. Data Retention
We retain your personal data for as long as necessary to:
- Provide services you've requested
- Maintain student records (typically 7 years after course completion)
- Comply with legal, accounting, or reporting requirements
- Resolve disputes and enforce agreements
After this period, data is securely deleted or anonymized.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restriction: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Oppose processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
- Right to Lodge a Complaint: Contact the Finnish Data Protection Authority
To exercise these rights, contact us at [email protected]
10. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection
- Incident response procedures
While we strive to protect your data, no method of transmission over the internet is 100% secure.
11. Children's Privacy
Our courses are designed for adults aged 18 and over. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we've collected data from a child without proper consent, please contact us immediately.
12. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending email notifications for material changes
Continued use of our services after changes constitutes acceptance of the updated policy.
14. Contact Information
For questions, concerns, or to exercise your rights regarding this Privacy Policy, please contact us:
Data Protection Officer: Available via the contact details above
Supervisory Authority: Finnish Data Protection Ombudsman (Tietosuojavaltuutettu)
Website: https://tietosuoja.fi
15. Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy. For processing activities requiring consent, we will obtain your explicit agreement before collecting or using your data.