This privacy policy applies for processing of personal data when FindCourses PRO AB, reg. no. 556882-3198 (below "we" or "us") processes personal data as a data controller, for instance when you visit our website.
We are a part of the Keystone Education Group (“Keystone”), which is trusted by more than 120 million unique prospective students every year to help them make one of the most important decisions of their lifetimes, namely, which educational program to attend. At Keystone, we help prospective students find the right education to pursue their dreams, whether they are seeking higher education, wanting to expand their knowledge through a course, or upskilling as a professional.
As part of its services, Keystone offers distinct websites tailored to each business, assisting employees in exploring and discovering thousands of courses worldwide. The platform provides detailed information and allows users to compare various educational courses.
This privacy policy outlines how we process your personal data when you visit our website or interact with us as further set out below. It does not cover instances where we act as a data processor and process personal data on behalf of our customers. In these situations, we advise you to read the privacy policy of the respective customer (e.g., your employer) for details on their processing of your personal data.
This privacy policy covers how we process personal data about the following individuals:
The personal data that we collect and process includes the following types of data:
All processing of personal data is carried out in accordance with the applicable data protection rules, including the General Data Protection Regulation (GDPR).
When you contact us via the contact forms on our website, e-mail or phone, or use our help desk with inquiries related to our services, website or platform we process the personal data you provide, such as your Contact details, along with any other personal data submitted by you. The processing of this personal data is necessary to effectively respond to your inquiries and provide the information or support you are seeking.
The legal basis for this processing is our legitimate interest in responding to your requests and providing support. We process your personal data solely to provide the necessary responses and assistance you require. If you would like to know more about our legitimate interest and reasoning, you are welcome to contact us by using the contact details set out at the end of this privacy policy.
We carry out marketing activities if you have shown an interest in our products and services by submitting your Contact details to us, to inform about services provided by us that may be relevant to you. In order to carry out such marketing activities we process personal data about you, typically your Contact details.
The legal basis for the processing is your consent. In some cases, marketing material is distributed on the basis of our legitimate interest in marketing ourselves and informing you about our services. If you would like to know more about our legitimate interest and reasoning, you are welcome to contact us by using the contact details set out at the end of this privacy policy.
You have the right to withdraw your consent for marketing activities at any time by contacting us directly or by utilizing the unsubscribe option provided in the e-mails you receive from us. Upon withdrawal of your consent, your personal data will be deleted unless it is required for other purposes, such as maintaining your user account. Furthermore, you have the right to object to the processing of personal data for direct marketing, at any time, and we will cease immediately.
We process personal data of representatives of companies, including our customers, to the extent necessary for entering into and managing service agreements. The personal data processed include Contact details.
This processing of personal data is based on our legitimate interest in facilitating the initiation and ongoing administration of these agreements. If you would like to know more about our legitimate interest and reasoning, you are welcome to contact us by using the contact details set out at the end of this privacy policy.
We process personal data of website visitors and users of the platform to develop and improve our platform, website and services. This includes Interaction data and Online identifiers. The personal data is used to improve our services, optimize website performance, and improve the security and reability of our platform.
The processing is based on your consent. In some cases, we may rely on our legitimate interest in developing our business and ensuring the quality and security of our platform, website and services. If you would like to know more about our legitimate interest and reasoning, you are welcome to contact us by using the contact details set out at the end of this privacy policy.
You have the right to withdraw your consent at any time by contacting us directly using the contact details set out at the end of this privacy policy.
We use cookies to ensure the proper functioning of our websites' various services. Cookies are small text files stored on your device's browser when you visit our sites. Some cookies, known as "necessary cookies," are essential for the operation of our websites. These cookies enable fundamental functionalities such as accessing your secure areas.
Where these necessary cookies involve the collection or storage of personal data — such as your IP address, operating system details, browser ID, and your interactions with our site — we process this information based on our legitimate interest in maintaining our website's or platform’s functionality and security.
In addition to necessary cookies, we may use cookies for other purposes and collect personal data which may be aggregated and used for statistical analysis/measurement (e.g., for the purpose of developing and improving our website and platform). The legal basis for using such cookies is your separate consent that you have given through the cookie banner on our website.
Further details about the cookies used by us and how to manage them can be found within our cookie banner. Apart from necessary cookies, which are essential for website functionality, you have the flexibility to tailor your cookie preferences. Options include accepting all cookies, rejecting all cookies, or customizing settings for each cookie category and purpose by selecting "Settings." You can modify or withdraw your consent at any time by adjusting these preferences in the cookie banner.
You can always delete cookies by going into your browser settings and deleting content. If you need any assistance in this regard, you are welcome to contact us by using the contact details set out at the end of this privacy policy.
We may share personal data collected through our website with third parties. These may include suppliers of hosting services, customer support, analytics platforms and spam prevention platforms to the extent necessary for the purposes described in this privacy policy.
In compliance with legal obligations, we may also disclose your personal data to government authorities and other third parties when required by law or a legally enforceable judgment or order.
If we sell or buy any business or assets, we may transfer your personal data to a prospective seller or buyer of such business or assets. If we or a significant part of our assets are sold to another company, your personal data may also be shared in connection with the sale.
Your personal data may be transferred to third parties located outside of the EU/EEA. If the personal data is processed outside the EU/EEA, there is either an adequacy decision from the European Commission in place, which ensures that the third country in question guarantees an adequate level of protection, or we ensure that appropriate safeguards are in place to ensure that your rights under the GDPR are safeguarded. Examples of such appropriate safeguards are that the data transfer is subject to the European Commission's Standard Contractual Clauses (SCC's) or that the relevant third party follows approved standards of conduct.
If you would like more information about the security measures we have implemented, please contact us by using the contact details set out at the end of this privacy policy.
All our processing of personal data is secured by relevant and appropriate technical and organizational measures to protect your data and ensure your rights, including when personal data is shared or transferred to a third party. We regularly review our security policies and processes to ensure that our systems are secure and protected.
We handle personal data so that it is accurate, accessible and processed in accordance with the degree of sensitivity of the personal data. We also use a range of security technologies and information security procedures to protect personal data from unauthorized access, use or disclosure. Accordingly, we restrict access to personal data strictly to the staff or third parties who have a necessary need to process the data on our behalf. These parties are subject to a duty of confidentiality.
We have entered into data processing agreements with all our suppliers that process personal data.
Your Contact details will be anonymized after a period of two (2) years from the date of collection, if the personal data is no longer needed for the purpose of which it was collected. Anonymization involves altering the data so that it can no longer be associated with any specific individual, ensuring that it is no longer considered personal data under the GDPR.
Personal data that is processed in order to develop and analyse our website, such as your Online identifiers, will be stored for up to 50 months from the date of collection. After this period, we will anonymize the personal data.
Any personal data retained for legal purposes, including compliance with regulatory requirements and dispute resolution, will be retained for the duration required by applicable laws or regulations.
Below is an overview of your rights under the GDPR:
|
Right to information and access: |
We strive to be open and transparent about how we process your personal data. If you wish to know more about how we process your personal data or wish to receive the personal data we process about you, you can request access to the information we have stored about you. If we receive an access request, we may ask you to provide more information about who you are to ensure that we provide the data to the right person. |
|
|
|
|
The right to rectification: |
If you become aware that we hold outdated or inaccurate information about you, you can ask us to correct the error at any time by contacting us. |
|
|
|
|
The right to erasure and restriction: |
You have the right to request that your personal data is erased or that its use is restricted, for example, if you believe that your personal data is being processed in violation of applicable law. We will as far as possibly comply with a request to erase personal data, but we cannot do this if we are required by law to store certain data e.g. for accounting purposes or to comply with a legal claim. |
|
|
|
|
The right to data portability: |
In some cases, you may have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format. If technically possible, you may also request that the data be transferred to a third party. |
|
|
|
|
The right to object: |
You have the right to object to our processing of your personal data if, for example, it is processed on the basis of our legitimate interests. |
|
The right to withdraw consent: |
If you have given consent to our processing of your personal data, you always have the right to withdraw this consent at any time by contacting us. However, this does not affect the lawfulness of the processing based on your consent until you have withdrawn it. |
|
|
|
To exercise your rights, as described above, you can contact us by using the contact details set out at the end of this privacy policy. Your inquiry will be answered as quickly as possible, and within one month at the latest. If it takes longer than one month, you will always be notified, together with the reason for such delay.
If you feel that our processing of personal data does not comply with what we have described here or that we are otherwise in breach of the data protection regulations, you can complain to the supervisory authority where you reside or work, or where you believe an infringement has taken place. In Sweden, the supervisory authority is:
Integritetsskyddsmyndigheten
Box 8114, 104 20 Stockholm, Sweden
E-mail: imy@imy.se
We reserve the right to change and update this policy.
Our contact information is:
FindCourses PRO AB, org.nr 556882-3198
Karlavägen 100 A 5TR
115 26 Stockholm, Sweden
If you have any questions about how we process your personal data, or if you wish to exercise your rights under the GDPR, please contact us at contact@keystoneacademic.com.
