PRIVACY POLICY

1. Introduction

Welcome to Affiliates-School.com, owned and operated by Affiliates-School LTD, a Bulgarian company with registration number 207905072, located at 48 Blvd. Vitosha, Sofia, 1000, Bulgaria. We are committed to protecting your personal data and ensuring your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

2. Data Collection

We collect personal data to provide our services effectively. The types of data we collect include:

Contact Information:
We collect your full name, email address, phone number, and mailing address. This information is essential for communication purposes, such as sending you course details, important updates, and responding to your inquiries. Additionally, we may use this information to send you newsletters or promotional materials, provided you have given your consent.

Payment Information:
To process your course enrollment, we collect your billing address and payment details, including credit card information or other payment method details. This data is collected through secure payment processing systems to ensure your financial information is protected. We use this information exclusively for processing your payments and maintaining accurate financial records.

Course Enrollment Details:
When you enroll in one of our courses, we collect specific information related to your enrollment. This includes your selected course, language proficiency, and course preferences. We gather this data to tailor our educational offerings to your needs, ensure you meet any prerequisites, and provide the appropriate level of instruction.

Usage Data:
We collect information about how you interact with our website to enhance your user experience and optimize our services. This data includes your IP address, browser type, device information, and usage patterns, such as the pages you visit, the time spent on our site, and the actions you take. We use this data to analyze website traffic, identify trends, improve site functionality, and deliver personalized content. Additionally, this information helps us diagnose and fix technical issues, ensuring a seamless experience for all users.

Additional Data:
Depending on the specific services or features you use, we may also collect other types of information. For example, we may collect feedback you provide on courses or instructors, or any communication you have with customer support. This information is used to continuously improve our offerings and address any concerns you may have.

3. Legal Basis for Processing

We process your data based on the following legal grounds:

Contractual Necessity:
The primary legal basis for processing your personal data is the necessity to fulfill our contractual obligations to you. When you enroll in a course or register for our services, we enter into a contractual relationship that requires us to process your data to deliver the services you've requested. This includes actions such as processing your course registration, managing your account, facilitating payments, and providing access to course materials. Without processing your data for these purposes, we would be unable to fulfill our commitments under the contract.

Legitimate Interests:
We process your data based on our legitimate interests, which are balanced against your rights and freedoms. These legitimate interests include the continuous improvement of our services, ensuring a high level of customer support, and conducting marketing activities. For example, we may analyze how you use our website to identify areas for improvement, offer personalized content, or develop new features that enhance your experience. Additionally, we may use your data to communicate with you about relevant courses or promotions that we believe may be of interest to you, always considering your preferences and the need for transparency in our communications.

Legal Obligations:
We are required to process certain personal data to comply with legal obligations imposed by applicable laws and regulations. This includes, but is not limited to, fulfilling our tax obligations, maintaining accurate financial records, and adhering to data protection laws such as the General Data Protection Regulation (GDPR). For instance, we may need to retain and share your payment information with tax authorities or financial institutions to ensure compliance with legal requirements. In such cases, the processing of your data is mandatory, and we are legally bound to fulfill these obligations.

Consent:
In some instances, we process your personal data based on your explicit consent. This is particularly relevant for activities such as sending you marketing communications, newsletters, or other promotional content. Where consent is required, we will clearly inform you about the specific data we wish to process, the purpose of that processing, and how you can withdraw your consent at any time. For example, if you subscribe to our mailing list, you are providing consent for us to use your email address to send you updates about our courses and services. Your consent is always voluntary, and you have the right to revoke it without affecting the lawfulness of the processing carried out before the withdrawal.

4. Data Usage

Service Delivery:
Your personal data is essential for ensuring the smooth delivery of our services. We use this data to register you for courses, process payments, and provide you with access to educational content. When you enroll in a course, we use your contact information to confirm your registration, send you relevant course materials, and keep you informed about important updates or changes related to your course. Additionally, we use your payment information to securely process transactions, ensuring that your payments are handled efficiently and accurately. This enables us to deliver the educational experience you expect, tailored to your specific needs and preferences.

Customer Support:
We use your personal data to provide effective and responsive customer support. Whether you have questions about course content, need help with registration, or require technical assistance, your contact information allows us to communicate with you directly and resolve your issues promptly. By maintaining records of your inquiries and interactions with our support team, we can ensure consistent and personalized assistance, track the progress of your requests, and improve our overall service quality. This use of your data helps us to address your needs efficiently and enhances your experience with our services.


Marketing:

With your consent, we use your personal data to keep you informed about our latest offerings through marketing activities. This includes sending you promotional materials, newsletters, and information about upcoming courses that may be of interest to you. By analyzing your preferences and past interactions with our services, we can tailor our communications to ensure they are relevant and engaging. For example, if you have previously enrolled in a specific course, we may inform you about advanced courses in the same field or related educational opportunities. You always have the option to manage your communication preferences or opt out of marketing communications at any time, ensuring that you remain in control of the information you receive.

Legal Compliance:
We use your personal data to fulfill our legal obligations and ensure compliance with applicable laws and regulations. This includes activities such as tax reporting, financial record-keeping, and adhering to data protection laws. For example, we may need to retain payment records and issue receipts to comply with tax regulations or provide necessary information to financial authorities as required by law. Additionally, we ensure that our data processing practices align with the General Data Protection Regulation (GDPR) and other relevant data protection laws, safeguarding your rights and ensuring transparency in how your data is handled. Compliance with these legal obligations is a fundamental aspect of our operations and is critical to maintaining the trust and confidence of our users.

5. Data Sharing

Service Providers:
We work with various third-party vendors who play a crucial role in delivering our services. These include payment processors, IT support services, and other technical service providers that enable us to operate our platform efficiently. For example, when you make a payment for a course, your payment information is securely processed by a trusted payment processor. Similarly, our IT support providers ensure that our website remains functional and secure. These service providers operate under strict data protection agreements, which require them to handle your personal data confidentially and in compliance with applicable data protection laws. They are only authorized to use your data as necessary to provide their services to us.


Local Teachers:

To provide you with a seamless educational experience, we may share your personal data with local teachers or instructors in your country who conduct the courses on our behalf. These teachers act as our service providers and are responsible for delivering the educational content and facilitating your learning. For instance, we may share your contact details, course preferences, and language proficiency information with the local teacher to ensure they can tailor the course to your needs and communicate with you effectively. These teachers are bound by confidentiality agreements and are required to handle your data securely, using it solely for the purpose of delivering the course.

Legal Authorities:
We may be required to share your personal data with legal authorities to comply with legal processes, such as court orders or government regulations, or to protect our rights, property, and the safety of our users. For example, if we are legally obligated to disclose certain information as part of a legal investigation or to prevent fraud, we will do so in accordance with the law. We ensure that any such disclosure is conducted with due regard for your privacy and only to the extent necessary to fulfill our legal obligations.

6. International Data Transfers

When we transfer your personal data to countries outside the EEA, we take rigorous steps to ensure that your data remains protected and that the transfer complies with the General Data Protection Regulation (GDPR). Transfers to countries outside the EEA may be necessary for several reasons, such as processing payments, managing your course registration, or providing technical support.

To safeguard your data during such transfers, we implement appropriate measures, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission. These clauses are legal contracts that oblige the receiving party outside the EEA to protect your data to the same standards as required within the EEA.

In some cases, we may transfer your data to countries that the European Commission has recognized as having data protection laws that provide an adequate level of protection, comparable to the standards required under EU law. In these situations, your data is handled with the same level of care and security as it would be within the EEA.

Additionally, we continuously monitor the legal frameworks and data protection practices of the countries to which we transfer your data. Where necessary, we implement further safeguards, such as data encryption and secure storage protocols, to enhance the security of your personal information during international transfers. These measures ensure that your data is always protected, regardless of where it is processed or stored.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.


The length of time we keep your personal data depends on the specific purpose for which it was collected and the legal or regulatory obligations we must adhere to. For instance, if you are enrolled in a course, we retain your data for the duration of your course and any subsequent period needed to provide you with customer support, issue certificates, or manage any follow-up services related to your educational experience.

Once the data is no longer needed for these purposes, we assess whether we are legally obligated to retain it further. This may include compliance with tax, accounting, or other legal regulations that require us to maintain records for a specified period. For example, financial transaction data might be kept for several years to comply with tax laws, while records of your course completion may be retained to verify your certification status if needed in the future.

After the relevant retention period has expired, we take steps to securely delete or anonymize your data. Secure deletion involves permanently erasing data so that it cannot be recovered or reconstructed. This process ensures that your personal information is no longer accessible or usable, thereby protecting your privacy.

Alternatively, in cases where we may need to retain certain data for statistical or research purposes, we anonymize the data. Anonymization involves removing or altering personal identifiers so that the data can no longer be linked back to you. This allows us to continue using the information for analytical purposes without compromising your privacy.

Throughout the entire data lifecycle, from collection to deletion or anonymization, we apply stringent security measures to protect your personal data from unauthorized access, alteration, or destruction. This careful approach ensures that your data is handled responsibly and in full compliance with applicable data protection laws.

8. Your Rights

Under the GDPR, you are entitled to the following rights regarding your personal data:

  • Right of Access: You have the right to request access to your personal data that we hold and to receive a copy of it, allowing you to understand how your data is being used and to verify its accuracy.


  • Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated, ensuring that all information we hold about you is accurate and current.


  • Right to Erasure ("Right to be Forgotten"): Under certain conditions, you have the right to request the deletion of your personal data. This might apply if the data is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if you object to the processing and there are no overriding legitimate grounds for continuing it.


  • Right to Restrict Processing: You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or if the processing is unlawful and you oppose erasure.


  • Right to Data Portability: You have the right to request that your personal data be transferred to another organization, or directly to you, in a structured, commonly used, and machine-readable format. This right applies when the processing is based on your consent or a contract and is carried out by automated means.


  • Right to Object: You can object to the processing of your personal data at any time, particularly if the data is being processed for direct marketing purposes. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your rights and interests.


  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal, but we will cease processing your data going forward unless we have another legitimate basis for doing so.

Please note that the exercise of these rights is subject to certain limitations and may be restricted in order to comply with our legal obligations. For instance, we may need to retain certain data to fulfill legal, regulatory, or contractual obligations, and such requirements may limit the scope of your rights. We will inform you of any such limitations or restrictions that apply to your request.

9. Data Security

We take the security of your data seriously and implement comprehensive technical and organizational measures to ensure its protection against unauthorized access, alteration, or destruction.

  • Encryption: We employ advanced encryption techniques to safeguard your personal data both in transit and at rest. Encryption ensures that your data is converted into a secure format that can only be accessed by authorized parties with the appropriate decryption keys. This includes encrypting data transmitted between your device and our servers, as well as encrypting data stored in our databases and backup systems.


  • Secure Servers: Our data is hosted on secure servers that are protected by industry-standard security protocols. These servers are located in data centers with robust physical security measures, such as controlled access, surveillance, and fire protection. Additionally, our servers are equipped with firewalls and intrusion detection systems to prevent unauthorized access and monitor for any suspicious activity.


  • Regular Security Audits: To maintain the highest level of security, we conduct regular security audits and vulnerability assessments. These audits are performed by internal security experts and, when necessary, by external third-party security professionals. The audits help us identify potential security weaknesses, assess the effectiveness of our security measures, and implement improvements to address any issues found.


  • Access Controls: We enforce strict access controls to ensure that only authorized personnel can access your personal data. This includes implementing role-based access controls, where employees have access only to the data necessary for their job functions. Additionally, access to sensitive data is subject to multi-factor authentication, which requires multiple forms of verification before access is granted.


  • Data Backup and Recovery: We regularly back up your personal data to ensure its availability in the event of data loss or corruption. These backups are stored securely and are subject to the same encryption and access control measures as the primary data. In the event of a data breach or system failure, we have established procedures for data recovery to minimize any potential impact on your data.


  • Employee Training: Our employees undergo regular training on data protection and cybersecurity best practices. This training includes awareness of potential security threats, proper handling of personal data, and adherence to our data protection policies and procedures. We aim to foster a culture of security and ensure that all staff members are knowledgeable about their role in protecting your data.


  • Incident Response Plan: We have developed a comprehensive incident response plan to address any potential data breaches or security incidents. This plan outlines the steps to be taken in the event of a security breach, including containment, investigation, notification, and remediation. Our incident response team is trained to handle security incidents swiftly and effectively to mitigate any impact on your personal data.

By implementing these measures, we are committed to maintaining the confidentiality, integrity, and availability of your personal data and ensuring that it is protected from unauthorized access, alteration, or destruction.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your user experience, analyze site usage, and improve the functionality and performance of our services. Cookies are small data files that are placed on your device when you visit a website. These technologies help us understand how you interact with our site and provide you with a more personalized and efficient browsing experience.

Types of Cookies We Use:

  • Essential Cookies: These cookies are necessary for the basic functioning of our website and enable you to navigate the site and use its features. They include cookies that allow you to log in to secure areas of the site and complete transactions. Without these cookies, certain functionalities of the website may not be available.


  • Performance Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether users receive error messages from web pages. The data collected by these cookies is aggregated and used to improve the performance and usability of our site. Performance cookies help us understand how our site is used and identify areas for enhancement.


  • Functional Cookies: Functional cookies allow our website to remember choices you make (such as your username, language, or region) and provide enhanced, more personalized features. These cookies help us tailor the site to your preferences and improve your overall user experience.


  • Targeting/Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may be used to track your browsing habits across different websites and deliver targeted advertising based on your behavior and preferences. These cookies help us understand your interests and provide you with more relevant content and ads.


  • Analytics Cookies: Analytics cookies track and analyze how visitors use our website. They collect data on visitor behavior, including the number of visits, the average duration of visits, and the sources of traffic. This information helps us improve our website's functionality, content, and user experience.


How We Use Tracking Technologies:

  • User Experience Enhancement: We use cookies to remember your preferences and settings, such as language choices and display options, to provide a more personalized browsing experience.


  • Site Usage Analysis: Cookies and tracking technologies help us monitor and analyze how our website is used. This includes tracking visitor behavior, identifying popular content, and understanding user interactions to improve site performance and usability.


  • Marketing and Advertising: We may use cookies to deliver targeted advertisements and measure the effectiveness of our marketing campaigns. This helps us understand which marketing strategies are most effective and ensures that you receive relevant promotional content.


  • Functional Improvements: By using cookies, we can enhance site functionality, streamline user processes, and ensure that our services meet your needs more effectively.


Managing Cookies:

You have the option to manage or disable cookies through your browser settings. Most web browsers allow you to control cookies through their settings, including blocking or deleting cookies as desired. Please note that disabling cookies may affect the functionality and performance of our website and limit your ability to access certain features or services.


Third-Party Cookies:

Our website may also use cookies set by third-party services or partners. These third-party cookies are used for various purposes, including analytics, advertising, and social media integration. We do not have control over third-party cookies, so please refer to the respective third-party's privacy policy for more information on their cookie practices.

11. Third-Party Links

Our website may contain links to third-party sites, including those of our payment providers and other external services. These links are provided for your convenience and may include, but are not limited to, links to payment processors, social media platforms, and other external resources.

Third-Party Sites:


  • External Websites: When you click on a link to a third-party website, you are leaving our site and are subject to the privacy policies and practices of that external site. We do not control, monitor, or endorse these external sites, and their privacy practices may differ from ours. We encourage you to review the privacy policies and terms of service of any third-party sites you visit to understand how they collect, use, and protect your personal data.


  • Payment Providers: Our website may include links to payment providers such as credit card processors or online payment platforms. These payment providers handle transactions securely and may collect personal and financial information necessary to process payments. We do not have control over their data handling practices. For information on how these providers manage your data, please refer to their respective privacy policies. Some examples of payment providers we may use include PayPal, Stripe, and others, each with their own privacy practices and policies.


Social Media and Other Third-Party Services:


  • Social Media Integration: Our site may include social media buttons or widgets, such as those from Facebook, Twitter, LinkedIn, or Instagram. These features may collect information about your interactions with our website and may link to your social media accounts. The use of these features is governed by the privacy policies of the respective social media platforms. We encourage you to review their policies to understand how they handle your information.


  • External Resources: We may also link to other external resources, such as industry blogs, partner websites, or informational articles. These links are provided for informational purposes and do not imply endorsement of the content or practices of those sites.

Responsibility and Review:

We are not responsible for the content, privacy practices, or security measures of any third-party sites. While we strive to provide links to reputable and secure sites, the inclusion of a link does not imply endorsement or affiliation with the linked site. It is important for you to be aware of and understand the privacy policies and terms of service of any third-party sites or services you engage with.

We encourage you to regularly review the privacy policies of any third-party sites you visit to ensure that you are comfortable with their practices and understand how your personal information is being used and protected.

12. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:


Affiliates-School LTD

48 Blvd. Vitosha, Sofia, 1000, Bulgaria
Email:
info@affiliates-school.com

Welcome to all the new members! If you’ve left your details and haven’t received a response yet, feel free to send us a message on WhatsApp, and we’ll ensure your inquiry is handled promptly and with high priority. Registration for the next session is now open - 02/02/2025 - Sunday - For more details, contact us or sign up now. Hurry, spots are limited!