Privacy Policy

Introduction

This Privacy Policy outlines how Vintedu GmbH ("we", "our", or "us") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) of the European Union and applicable laws in Austria and Turkey.

By using our services or accessing our website https://vintedu.com, you agree to the terms of this Privacy Policy.

Controller

Vintedu GmbH
Laxenburger Straße 46/3
1100 Vienna, Austria
Email: [email protected]

Types of Data We Collect

We may collect and process the following types of personal data:

Full name, email address, postal address, and phone number
Usernames and passwords (for registered users)
Payment and billing information
Course progress and usage data
IP address and browser/device information
Communication content (emails, contact forms)

Legal Basis for Processing

We process your data based on:

Your consent (Art. 6(1)(a) GDPR)
The performance of a contract (Art. 6(1)(b) GDPR)
Legal obligations (Art. 6(1)(c) GDPR)
Our legitimate interests (Art. 6(1)(f) GDPR), such as improving our services

Purpose of Data Collection

We use your data for:

Providing and managing online courses
Handling registration and authentication
Customer support and communication
Processing payments
Improving our website and services
Legal compliance and fraud prevention

Data Sharing

We do not sell your data. We may share your data with:

Service providers (e.g., hosting, payment processors) under strict confidentiality
Public authorities when legally required
Partners involved in certification or course delivery (e.g., ICDL Foundation)

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law (e.g., accounting regulations).

Your Rights

You have the right to:

Access your data
Request rectification or deletion
Restrict or object to processing
Withdraw your consent at any time
Data portability
Lodge a complaint with a supervisory authority (e.g., Austrian Data Protection Authority)

To exercise your rights, contact us at [email protected].

Data Security

We implement appropriate technical and organizational measures to secure your data from unauthorized access, disclosure, alteration, or destruction.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies separately.

International Data Transfers

If personal data is transferred outside the EU/EEA, we ensure adequate protection via standard contractual clauses or other legal mechanisms in line with GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the date of the last update.

Last updated: May 1, 2025