PRIVACY POLICY EDUCA.UNIVERSITY

This Privacy Policy sets forth the limits and parameters that Educa University employs for the use and protection of the set of personal data provided by users of the website www.educa.university, committing to the security of all such data and thus avoiding their misuse.

You can contact us in any way to communicate with us. We reserve the right to modify or adapt this Privacy Policy at any time. It is recommended to review it, and if you have registered and accessed your account or profile, you will be informed of any changes.

1. Basic information on data protection.

• Controller: Educa University, B.V.

• Purpose: Information and academic and commercial training of our teaching services.

• Legitimation: Consent of the data subject and execution of a contract in which the data subject is a party.

• Recipients: Data processors to fulfill the purposes.

• Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information.

2. Additional information

• Business Name: Educa University, B.V.

• Address: Weteringschans 165-C, 1017 XD Amsterdam

• Registration KVK: 87142104

• VAT Number: NL864215873B01

• Additional information: You can consult additional information through the email: lopd@educa.university

3. Applicable regulations

Our Privacy Policy has been designed in accordance with the current legal regulations according to the General Data Protection Regulation of the EU 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

By providing us with your data, you declare that you have read and know this Privacy Policy, giving your consent freely, specifically, informed, and unequivocal to the processing of your personal data according to the purposes and terms expressed herein.

These privacy conditions may be complemented by the Legal Notice, Cookie Policy, and the General Conditions that, where appropriate, are collected for certain products or services, if such access involves any specialty in the protection of personal data.

4. Purposes of processing and legal bases

In this section, the different purposes and legal bases for the processing of personal data carried out by EDUCA UNIVERSITY are typified.

• Consent of the data subject (Art. 6.1.a) GDPR): Provide information related to training activities and teaching services offered by our center and other collaborating entities of our total trust. This information will include offers, discounts, scholarships, commercial information, or other matters that we consider of interest.

• Contractual execution and pre-contractual measures (Article 6.1.b) GDPR): Execute the contracted service or formalize the established relationship. Registration conditions EDUCA UNIVERSITY.

• Necessary communication for the maintenance of the contractual relationship: Respond to your inquiries, requests, or petitions.

• Compliance with a legal obligation (Article 6.1.c) GDPR): Communicate information to public, regulatory, or governmental authorities in cases where it is necessary to do so by law, local regulations, or in compliance with regulatory obligations.

• Legitimate interest of the data controller (Article 6.1.f) GDPR): Sending advertising and commercial information about the courses and studies offered on the EDUCA UNIVERSITY website by any means, including electronic.

• Treatment of the data of the contact person of a company or individuals for professional location purposes and depending on the provision of the services they offer.

• Segmentation tasks. Segmentation or profiling may be carried out to adapt the contents of training activities to the needs of users. In no case will segmentation or profiling have legal or significant effects on the data subject.

• For the improvement of the website and its operation, statistics are compiled, collecting information on user navigation on date and time of access, thus improving the user experience on the website.

5. To which recipients will we communicate your data?

Your personal data may be provided to collaborating and affiliated companies of the data controller when necessary to fulfill the aforementioned purposes so that they can provide information about training, employment, editorial products, and new technologies through various means, always respecting the security measures required by current legislation on the protection of personal data, as well as the general quality and privacy policies of the Company.

Except for the provisions contained in the previous paragraph, EDUCA UNIVERSITY will not communicate the User's data to third parties beyond what is required by current data protection regulations, which are made to competent authorities when required.

6. Are International Data Transfers Made?

Educa University, B.V., will make international data transfers.

7. How long will we keep your data?

The personal data provided will be kept until its deletion is requested by the interested party. In any case, your personal data will be kept for the period necessary for the effective fulfillment of the purpose for which they were collected and for the time established by current legal regulations, except for the revocation of consent or the exercise of the right to limit the processing. In such cases, your data will be blocked for the legally established periods.

8. What security measures will we apply?

EDUCA UNIVERSITY will treat your personal data with the strictest confidentiality, applying the security measures, technical and organizational, established by applicable law.

9. What rights can you exercise?

The User has the following rights regarding the processing of their personal data:

• Right to request access to their personal data.

• Right to request rectification if they are inaccurate or request their deletion (for example, if they are no longer necessary for the purposes for which they were collected or if the consent granted is withdrawn).

• Right to request the limitation of their processing, provided that any of the conditions provided for in the regulations are met, in which case we will only keep them for the exercise or defense of claims.

• Right to object to the processing, in which case we will stop processing your data, except for compelling legitimate reasons or the exercise or defense of possible claims.

• Right to data portability.

• Right to revoke consent for each specific purpose, without affecting the legality of the processing based on the consent given prior to its withdrawal.

• Right to file a complaint with the Dutch Data Protection Authority or the competent supervisory authority if you believe that we have not treated you properly.

Also, if you do not wish to receive electronic commercial communications in the future, you can express this desire by sending an email to the following email address: lopd@educa.university

10. How can you exercise your rights?

We have forms for the exercise of your rights that you can request from us through the following email address: lopd@educa.university

These forms must be signed electronically or accompanied by a photocopy of your valid ID or passport.

If someone represents you, they must attach a copy of their identification document or sign with their electronic signature.

The forms can be submitted in person or sent by mail or email to the address of the data controller indicated at the beginning of this text.

11. What is the established time to resolve the exercise of rights?

We will inform you about the actions resulting from your request within one month, which may be extended by two more months when it comes to requests that are especially complex, and we will notify you of this extension within the first month.

In cases where we do not address your request, we will inform you of it, justifying our refusal within one month from its submission.

12. How did we obtain your personal data?

We obtain the information you provide by filling out the various forms on the website when you contract training with us, checking the box "I Accept the Privacy Policy" and clicking to submit the data, or by sending emails to the Company through the accounts enabled for this purpose. The User declares to have read and expressly accepted this privacy policy by submitting emails to the Company through the accounts enabled for this purpose, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes informed.

According to the purposes indicated in section 4, the categories of data that will be processed are:

• Identifying data: name and surname, telephone, and email.

12.1. What happens if I do not provide them?

Mandatory data will be distinguished in the information collection forms. If you decide not to provide some of this mandatory data, we will not be able to fulfill the intended purpose, and data processing and the corresponding service provision will not take place. In the case of creating a "commercial profile" based on the information provided, no automated decisions with legal effects for the User will be made.

You guarantee that the Personal Data you provide to us are truthful and correct, and you will be responsible for informing us of any changes to them. In the event that the provided data belong to a third party, the User guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data.

13. Social networks

Profiles on social networks that EDUCA UNIVERSITY has will not involve data processing beyond what the social network itself allows for corporate profiles. The Company may use these profiles to inform users subscribed to the company's profile on each social network about its activities, events, seminars, offers, promotions, or news about its products or services, as well as to share information of interest on the usual themes of the company. The Company will not extract any data directly from the social network.