Account privacy notice

Current account service

Eurolearn is open for account creation and live testing. Registration is free. Published course access, organization membership and purchases are separate processes. Only supply information needed to test or use your account; do not upload health information or identity-document scans.

Who is responsible

TTA s. r. o., Kvetná ulica 244/12, 930 41 Kvetoslavov, Slovakia, is the controller for its account administration, personal sales, billing and platform-security activities. Contact info@ttaservices.net or write to the registered office, with “Privacy – Eurolearn” in the subject.

For company-assigned learning, the organization determines the training purpose, authorized users and recordkeeping requirements. TTA acts as its processor where it follows those documented instructions. The company supplies its own employee privacy information and lawful basis. Separate TTA purposes are assessed separately; a service contract does not make every processing activity the company’s responsibility.

Data and purposes

• Account: name, email, country, optional licence number, password hash, email verification and account-consent revisions; used to identify you, provide access and communicate about the service.
• Security: session and authenticator records, recovery credentials, throttling, audit events and relevant IP/browser information; used to prevent misuse and investigate incidents.
• Learning: memberships, company crew codes, assignments, course versions, lesson progress, assessment answers/results, attempts, completion and certificate records; used to provide and document training.
• Duty records: observed and reviewed training intervals, review decisions, notes and crew-code snapshots; used for the assigning company’s training-time review and authorized integration.
• Commerce and support: billing address, organization identifiers, orders, invoice references, payment-provider references, correspondence and privacy-request decisions. Eurolearn does not store full card numbers or card security codes.
• Training authority: the authorized Head of Training’s name and signature image, used on the organization’s certificates. It is not collected for biometric identity matching.

Sources and legal grounds

Information comes from you, your organization’s authorized administrators, your use of the platform and payment confirmations when checkout is enabled. Required account and order information enables the requested service; without it the account or purchase cannot be supplied. Your employer should explain any employment-related obligation to undertake training.

TTA relies on contract for the requested personal service, legal obligations for required accounting and regulatory handling, and proportionate legitimate interests for security, fraud prevention and resolving claims. Optional uses that need consent require a separate choice. Automated scoring supports course assessment; the organization makes operational acceptance decisions.

Recipients and public verification

Authorized platform staff and contracted hosting/email providers receive only what their role requires. Company administrators see records for their organization. Its integration credentials expose that company’s reviewed training records, including historical records after a member leaves; they do not grant access to another company’s or personal assignments.

Anyone with a certificate verification link can see the learner name, course title and version, completion and expiry dates, status, demonstration/legacy indicators, acceptance requirement and a replacement reference where applicable. Email addresses, licence numbers, scores and signatures are not returned by public verification. Share the link only with intended recipients.

Websupport provides the live VPS and outgoing application email. Google Workspace Drive stores recovery backups encrypted by Eurolearn before upload. Cloudflare Turnstile protects registration, sign-in and account recovery; it processes connection and browser signals, including IP address and user agent, to distinguish people from bots. Cloudflare also processes these signals to improve Turnstile, as described in its linked Privacy Addendum. Stripe checkout is disabled and Vimeo course playback has not been opened for learners.

These suppliers can involve processing or access outside your country. The full supplier, processing-location and transfer-safeguard schedule is still being completed for operational launch; contact TTA for the information available for your use. No EEA-only storage or access guarantee is made by this testing notice.

Retention and deletion

Account access lasts while needed for the service. Billing, claims and training evidence can need longer retention under applicable duties or documented company instructions. Ending membership stops access but does not erase the company’s historical evidence. The final schedule must identify a purpose, retention period or criterion, owner and disposal process for each category, including backups.

A deletion request is reviewed, not an immediate purge. The current account-removal process clears operational identity and security data after membership closure, while certificate, completion and audit snapshots can remain. TTA must explain the lawful basis and duration of any retained data. A production retention schedule and disposal process are still required; no automatic deletion period is promised during testing.

Your rights and contact

You may request access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. Withdraw optional consent without affecting earlier lawful processing. Contact TTA; Profile also has the account-deletion request workflow. TTA may verify identity proportionately and will coordinate processor requests with the organization.

Responses are normally due within one month; lawful extensions require an explanation. You can complain to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk), or the relevant supervisory authority where you live or work. A company administrator’s decision does not remove these rights.

Necessary browser storage

Eurolearn uses first-party session and CSRF cookies to maintain sign-in and protect requests. The configured session lifetime is eight hours; the CSRF cookie can last up to 364 days and may be refreshed. Signing out invalidates the authenticated session. Blocking these cookies can prevent sign-in and account changes. No advertising or audience-analytics cookies are added by the application.