Privacy Policy

1. Data Controller

The data controller for this website and platform is:

Endolum GmbH
Oberdorfstrasse 8
8853 Lachen SZ, Switzerland
CHE-297.991.738
contact@endolum.io

2. Information We Collect

We collect information you provide directly and information collected automatically when you use our services:

• Account information: Name, email address, username, password (hashed)
• Payment information: Processed through our payment provider. We do not store credit card details.
• Learning data: Course progress, challenge completions, certification results
• Contact form submissions: Name, email, company name, message content
• Technical data: IP address, browser type, device information, pages visited
• Newsletter subscriptions: Email address and consent status

3. How We Use Your Information

• Provide access to courses, labs, and certification exams
• Track your learning progress within the platform
• Process payments and manage your account
• Respond to contact form inquiries
• Send service notifications (account, access, course updates)
• Send marketing communications (only with your explicit consent)
• Improve our platform based on usage patterns

4. Legal Basis for Processing (GDPR/nDSG)

We process your personal data based on:

• Contract performance: Account management, course access, certification delivery
• Consent: Marketing communications, newsletter subscriptions, cookie analytics
• Legitimate interest: Platform security, fraud prevention, service improvement
• Legal obligation: Tax and accounting records as required by Swiss law

5. Information Sharing

We do not sell your personal information. We share data only in these cases:

• Payment processors: To process course and certification purchases
• Hosting providers: Infrastructure required to run the platform
• Legal requirements: When required by Swiss law or to protect our rights

6. Cookies

We use cookies for:

• Essential cookies: Required for platform functionality (session management, authentication)
• Analytics cookies: To understand how the platform is used (only with your consent)

You can manage cookie preferences through our cookie banner or your browser settings.

7. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Learning progress and certifications: Retained to maintain certification records
• Contact form submissions: Retained for up to 2 years
• Payment records: Retained as required by Swiss tax and accounting law (10 years)
• Server logs: Retained for up to 30 days

8. Your Rights

Under the Swiss Federal Act on Data Protection (nDSG) and GDPR (for EU/EEA residents), you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Data portability: Receive your data in a structured format
• Withdraw consent: Withdraw marketing consent at any time
• Object: Object to processing based on legitimate interest

To exercise these rights, contact us at contact@endolum.io. You can delete your account directly through the academy platform settings. You can unsubscribe from marketing emails using the link in every email.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

10. International Data Transfers

Your data may be processed on servers outside of Switzerland. Where this occurs, we ensure adequate protection through standard contractual clauses or equivalent safeguards recognized under Swiss data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. The "Last updated" date at the top indicates the most recent revision.

12. Contact

For privacy-related questions or to exercise your rights:

Endolum GmbH
Oberdorfstrasse 8
8853 Lachen SZ, Switzerland
contact@endolum.io