1. Who we are

The Data Controller responsible for the processing described in this Privacy Policy is:

2. Services covered by this Policy

This Privacy Policy applies to personal data processed through:

• The Future Smart Academy website and LearnWorlds learning platform;
• Account registration, login and profile functions;
• Pre-recorded and live online courses;
• Course purchases, checkout and invoicing;
• Quizzes, assignments, assessments, certificates and course progress;
• Community posts, comments, messages and learner interactions;
• Contact forms, email, telephone and customer support;
• Webinars, events, surveys and marketing communications.

3. Personal data we collect

3.1 Account and contact information

• First name and last name;
• Email address and telephone number;
• Country, location or language preferences;
• Username, password and account authentication information;
• Profile image, biography and other information you choose to add;
• Professional or educational information relevant to a course.

3.2 Learning and participation information

• Courses purchased, accessed or completed;
• Lesson activity, course progress and time spent learning;
• Quiz, test, assessment and assignment results;
• Uploaded files, answers and learner submissions;
• Certificates, achievements and completion records;
• Attendance and participation in live sessions;
• Feedback, reviews, testimonials and survey responses.

3.3 Community and communications

• Community posts, comments, reactions and messages;
• Emails and communications sent to us;
• Contact-form and support-request information;
• Questions submitted to instructors or administrators;
• Communication and marketing preferences;
• Records of consent, withdrawal or objection.

3.4 Purchases and billing

• Products and courses purchased;
• Billing name, address and tax information;
• Transaction amount, date, payment status and reference;
• Invoice and receipt information.

Payments are processed by the payment service provider presented during checkout. We do not intend to store complete credit or debit card details on our own systems. Payment providers process payment information in accordance with their own legal and security obligations.

3.5 Technical and usage information

• IP address and approximate location;
• Device, browser and operating-system information;
• Login dates, times and security records;
• Pages, courses and platform functions accessed;
• Referring pages and navigation information;
• Cookie identifiers and consent preferences;
• System, diagnostic, fraud-prevention and security logs.

4. How we collect personal data

We may collect personal data:

• Directly from you when you register, purchase or contact us;
• When you use a course, submit work or participate in the community;
• When you attend a live lesson, event or webinar;
• Automatically through necessary cookies, logs and similar technologies;
• Through optional technologies where you have provided the required consent;
• From payment, hosting, communication and learning-platform providers;
• From a parent, guardian, employer or organisation arranging access for you, where applicable.

5. Why we process personal data

We process personal data in order to:

• Create, maintain and secure user accounts;
• Process registrations, enrolments and course purchases;
• Provide course content, live lessons, assessments and certificates;
• Monitor learning progress and provide educational support;
• Enable community and communication functions;
• Process payments and issue invoices or receipts;
• Respond to questions, enquiries and support requests;
• Send essential account, purchase, course and security messages;
• Improve the Academy, courses and user experience;
• Prevent fraud, misuse and unauthorised access;
• Meet accounting, tax, consumer-protection and legal obligations;
• Send promotional communications where legally permitted.

6. Legal bases for processing

Depending on the purpose, we rely on one or more of the following legal bases:

• Performance of a contract: to create an account, process a purchase, provide a course or deliver a service you requested.
• Legal obligation: to satisfy accounting, tax, regulatory, consumer-protection and other legal requirements.
• Legitimate interests: to operate, administer, secure and improve the Academy, prevent misuse and manage our business, provided that these interests are not overridden by your rights.
• Consent: for non-essential cookies, certain marketing communications, recordings or other activities where consent is required.
• Legal claims: where processing is necessary to establish, exercise or defend legal rights.

7. Live online sessions

Some courses may include live online sessions delivered through Google Meet or another video-conferencing provider. The provider may process your display name, email address, device information, voice, image, chat messages and participation data in accordance with its own privacy terms.

Other participants may see your display name, profile image, camera feed, microphone activity, chat messages and information you voluntarily share during a session.

We will inform participants before recording a live session. Where consent is required, recording will take place only after the required consent has been obtained. Participants may not record, photograph or distribute a session or information about other participants without prior authorisation.

8. AI tools and educational activities

Courses may demonstrate or use artificial-intelligence tools provided by third parties. Information entered directly into a third-party AI service may also be processed by that service under its own privacy terms.

Learners should not submit passwords, financial details, confidential business information, special-category personal data or information about another person to an AI tool unless specifically instructed and legally authorised.

We do not use solely automated decision-making that produces legal or similarly significant effects for Academy users, unless this is legally permitted and appropriate safeguards and information are provided.

9. Service providers and data recipients

Where necessary, personal data may be shared with trusted providers of:

• Learning-management and hosting services, including LearnWorlds;
• Payment processing, billing and invoicing services;
• Live video-conferencing services, including Google Meet;
• Email, communication and customer-support services;
• Analytics services, where enabled and permitted by your choices;
• Cloud storage, cybersecurity and technical-support services;
• Accounting, legal and professional advisers.

Providers receive only the information reasonably necessary for their services and are required to process it lawfully and securely. Some providers may also act as independent data controllers for processing they determine themselves, such as payment processing.

We may disclose information to courts, regulatory authorities, law-enforcement bodies or other public authorities when disclosure is required or permitted by law.

We do not sell personal data.

10. International data transfers

Certain service providers may process personal data outside Greece or the European Economic Area. Where the GDPR requires it, transfers are protected through a recognised mechanism, such as an adequacy decision, the EU Standard Contractual Clauses or another legally permitted safeguard.

11. Cookies and similar technologies

The Academy uses strictly necessary cookies and similar technologies for login, security, checkout, user preferences and essential platform functions.

Analytics, functionality or marketing technologies may also be used where enabled. Where consent is legally required, these technologies will be activated only according to the choices made through the Academy’s cookie-consent system.

More information is provided on the Academy’s separate Cookie Policy page. Logged-in users may also be able to manage applicable privacy and notification choices through their account.

12. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy and for applicable legal, accounting, tax, security and dispute-resolution requirements.

• Account and learning records may be retained while an account is active and for a reasonable period after it is closed.
• Contact-form and enquiry data is normally retained for up to 24 months, unless the enquiry leads to a customer relationship or a longer period is justified.
• Purchase, invoice and tax records are retained for the period required by applicable law.
• Marketing preference records are retained while necessary to demonstrate or respect your consent, withdrawal, subscription or objection.
• Technical and security logs are retained for a period appropriate to operational, fraud-prevention and security needs.
• Any recorded live session is retained only for the educational purpose and period communicated to participants.

When information is no longer required, it is deleted, anonymised or securely disposed of.

13. Data security

We use appropriate technical and organisational measures intended to protect personal data against accidental loss, unauthorised access, unlawful processing, alteration or disclosure. Measures may include access controls, secure authentication, restricted administrative permissions, encrypted communications, backups and security monitoring.

No internet-based system can guarantee absolute security. Users are responsible for keeping account credentials confidential and should contact us promptly if they suspect unauthorised access to their account.

14. Your data-protection rights

Subject to the GDPR and applicable legal conditions, you may have the right to:

• Receive information about the processing of your data;
• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Object to direct marketing at any time;
• Request data portability where applicable;
• Withdraw consent at any time where processing relies on consent;
• Request human intervention regarding applicable automated decisions;
• Lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect processing that was lawful before the withdrawal. Certain rights may be limited where retaining or processing information is required by law or necessary for legal claims.

To exercise a right, email contact@algorithmics.gr and clearly describe your request. We may ask for information necessary to verify your identity. We normally respond within one month, subject to any extension permitted by the GDPR.

15. Marketing communications

We may send information about courses, events, services or offers where you have provided consent or where another lawful basis permits the communication.

You may unsubscribe through the link provided in a marketing email, adjust available communication preferences through your account or contact us at contact@algorithmics.gr.

Opting out of marketing does not prevent essential account, purchase, security, course, certificate or service communications.

16. Children and parental responsibility

Some Algorithmics Greece educational services may be designed for children, while other Future Smart Academy courses may be intended only for adults. The applicable age group will be indicated in the relevant course or service information.

Where a service is provided to a minor, registration, purchase and processing of the minor’s information must be authorised or managed by a parent or legal guardian whenever required by law. We collect only information reasonably necessary to provide and administer the educational service.

If we learn that information relating to a minor has been provided without the required authorisation, we may delete or restrict the information and close the related account. Parents and guardians may contact us regarding information relating to a child under their legal responsibility.

17. Community and information shared by users

Information posted in community areas may be visible to other authorised users according to the Academy’s community settings. Users should not post sensitive, confidential or unnecessary personal information about themselves or another person.

If an account is deleted or anonymised, certain community contributions may remain in anonymised form where permitted and necessary to preserve the continuity of discussions or comply with legal obligations.

18. Third-party services

The Academy may contain links or integrations involving third-party websites and services. We do not control their independent processing activities. Users should review the privacy information of a third-party service before providing personal data directly to it.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change. The updated version will be published on the Academy with a revised “Last updated” date. Additional notice will be provided where required for material changes.

20. Complaints and supervisory authority

If you have concerns about our processing of your personal data, please contact us first so we can investigate and respond.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority. Its official website is www.dpa.gr.

21. Contact us