Privacy Policy

Your data is processed jointly by the GOAL project partners: GAL Inima Giurgiului Association, registered at Șos. București–Alexandria no. 162, Ghimpați, Giurgiu County, Romania (email: [email protected], phone: +40 742 371 889) and Polifonia, Bulgaria (email: [email protected], phone: +359 88 773 7400).

For any request regarding your data you may contact either partner using the details above.

Account data: first name, last name, email address, password (stored only in encrypted form), preferred language, and the dates of account creation and last sign-in.

Usage data: your progress through lessons and courses, messages sent via the contact form, and technical data needed for security (server logs, IP address).

Statistics: with your consent, we collect anonymous traffic statistics through the Umami platform (pages visited, device type). These are not used to identify you.

We process data to: create and manage your account and provide the Platform's features (performance of a contract); ensure security and prevent abuse (legitimate interest); compile usage statistics (consent); send account-related communications such as verification or password-reset emails (performance of a contract).

We do not use your data for marketing and we do not make decisions based solely on automated processing that produce legal effects concerning you.

Account data is kept for as long as your account is active. You may request deletion of your account at any time, in which case the data is removed or anonymised within a reasonable period, unless the law requires us to keep it. Technical logs are kept for limited periods.

We use service providers that process data on our behalf: hosting and infrastructure services, the email delivery service (MailerSend) and the video streaming service (Bunny). These providers are contractually required to protect the data.

We do not sell or rent your data. Data may be disclosed to authorities only where the law requires it.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent for statistics at any time, without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with a supervisory authority: ANSPDCP in Romania (www.dataprotection.ro) or the CPDP in Bulgaria (www.cpdp.bg).

We apply appropriate technical and organisational measures: encrypted password storage, secure connections (HTTPS), role-based access restrictions and two-factor authentication for administrators.