Privacy notice

Who is responsible

TTA s. r. o., Kvetná ulica 244/12, 930 41 Kvetoslavov, Slovakia, is the controller for its account administration, personal sales, billing and platform-security activities. Contact info@ttaservices.net or write to the registered office, with “Privacy – Eurolearn” in the subject.

For company-assigned learning, the organization determines the training purpose, authorized users and recordkeeping requirements. TTA acts as its processor where it follows those documented instructions. The company supplies its own employee privacy information and lawful basis. Separate TTA purposes are assessed separately; a service contract does not make every processing activity the company’s responsibility.

Data and purposes

• Account: name, email, country, optional licence number, password hash, email verification and account-consent revisions; used to identify you, provide access and communicate about the service.
• Security: session and authenticator records, recovery credentials, throttling, audit events and relevant IP/browser information; used to prevent misuse and investigate incidents.
• Learning: memberships, company crew codes, assignments, course versions, lesson progress, assessment answers/results, attempts, completion and certificate records; used to provide and document training.
• Duty records: observed and reviewed training intervals, review decisions, notes and crew-code snapshots; used for the assigning company’s training-time review and authorized integration.
• Commerce and support: billing address, organization identifiers, orders, invoice references, payment-provider references, correspondence and privacy-request decisions. Eurolearn does not store full card numbers or card security codes.
• Training authority: the authorized Head of Training’s name and signature image, used on the organization’s certificates. It is not collected for biometric identity matching.

Sources and legal grounds

Information comes from you, your organization’s authorized administrators, your use of the platform and payment confirmations when checkout is enabled. Required account and order information enables the requested service; without it the account or purchase cannot be supplied. Your employer should explain any employment-related obligation to undertake training.

TTA relies on contract for the requested personal service, legal obligations for required accounting and regulatory handling, and proportionate legitimate interests for security, fraud prevention and resolving claims. Optional uses that need consent require a separate choice. Automated scoring supports course assessment; the organization makes operational acceptance decisions.

Recipients and public verification

Authorized platform staff and contracted hosting/email providers receive only what their role requires. Company administrators see records for their organization. Its integration credentials expose that company’s reviewed training records, including historical records after a member leaves; they do not grant access to another company’s or personal assignments.

Anyone with a certificate verification link can see the learner name, course title and version, completion and expiry dates, status, demonstration/legacy indicators, acceptance requirement and a replacement reference where applicable. Email addresses, licence numbers, scores and signatures are not returned by public verification. Share the link only with intended recipients.

The launch supplier schedule is still being completed. Websupport hosting is planned; the final hosting location, email provider, contractual safeguards and any non-EEA access must be confirmed. Stripe and Vimeo are planned services and are not described here as already active. Their actual roles, countries and transfer safeguards must be disclosed before activation.

Retention and deletion

Account access lasts while needed for the service. Billing, claims and training evidence can need longer retention under applicable duties or documented company instructions. Ending membership stops access but does not erase the company’s historical evidence. The final schedule must identify a purpose, retention period or criterion, owner and disposal process for each category, including backups.

A deletion request is reviewed, not an immediate purge. The current account-removal process clears operational identity and security data after membership closure, while certificate, completion and audit snapshots can remain. TTA must explain the lawful basis and duration of any retained data. A production retention schedule and disposal process are still required; this draft promises no automatic deletion period.

Your rights and contact

You may request access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. Withdraw optional consent without affecting earlier lawful processing. Contact TTA; Profile also has the account-deletion request workflow. TTA may verify identity proportionately and will coordinate processor requests with the organization.

Responses are normally due within one month; lawful extensions require an explanation. You can complain to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk), or the relevant supervisory authority where you live or work. A company administrator’s decision does not remove these rights.