This Privacy Policy explains how Painting Pursue Needle processes personal data in connection with its website and courses on IT security and digital literacy.
We use personal data to operate the website, provide course access, manage registrations, respond to inquiries, maintain security, monitor performance, improve content, and comply with legal obligations. We may also use data to detect misuse, support troubleshooting, and keep records needed for administration and accountability.
We may share personal data with hosting providers, analytics providers, security tools, communication services, and other vendors that support the operation of the site and courses. These parties act on our instructions where they process data for us and are expected to use it only for the agreed service purpose. If a business transfer occurs, relevant data may be disclosed as part of that transaction subject to applicable safeguards.
We may disclose personal data when necessary to comply with legal obligations, respond to lawful requests, protect our rights, investigate security incidents, or enforce our terms and policies. We may also share information where disclosure is necessary to prevent fraud, abuse, or other harmful activity.
Where the GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests, as applicable. We limit processing to what is relevant for the stated purpose and apply appropriate safeguards.
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability in certain cases. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also lodge a complaint with the competent supervisory authority.
We may process identification details, contact details, account or course registration data, communication content, technical data such as device and browser information, usage data, and cookie-related identifiers. In a course context, we may also process progress records, quiz responses, and other information you choose to submit.
We collect personal data directly from users when they register, contact us, enroll in courses, or submit forms. We also receive technical and usage data automatically from the site and related systems, including cookies and similar technologies. Where needed for service operation, we may receive limited information from service providers that support hosting, analytics, or security functions.
The site may use essential cookies for core functions, functional cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent depending on their purpose. Non-essential cookies are used only where permitted by applicable law and, where required, after consent.
You may block or delete cookies through your browser settings, although some site functions may not work properly if you do so. Where the site provides a cookie notice or preference tool, you can use it to manage non-essential cookies. Browser controls remain available even if you do not use the site preference settings.
Depending on your location and the applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or request restriction of processing. You may also have the right to receive a copy of certain data in a structured format where the law provides for it.
To exercise a privacy right, send a clear request using the contact details in this policy and describe the data or action you are asking for. We may ask for information needed to verify your identity and to locate the relevant records. If a request cannot be fully granted, we will explain the main reason where the law requires us to do so.
Personal data is retained for the period necessary to provide the site, manage course participation, maintain records, resolve disputes, and meet legal, accounting, or security obligations. When data is no longer needed, we delete it or anonymize it, unless a longer retention period is required by law or justified by a legitimate operational need.
If we make material changes, we will update the policy text on the site and, where appropriate, provide additional notice through a reasonable channel. The date of the latest revision should be checked before relying on this notice.
