Privacy Policy

Last updated: October 2026

General Information on Data Processing

Thank you for your interest in our online services. The protection of your personal data is important to us. Below we inform you about the collection, processing and use of personal data on our website in accordance with the General Data Protection Regulation (GDPR).

We only process personal data to the extent necessary for the provision of a functional website and our content, services and course offerings. Processing is carried out only with the consent of the data subject or where processing is permitted by law.

ZORYA LTD, Chsonera Rosemarine 378574 Paphos, Cyprus, Registration number: HE437070
Email: office@zorya.ltd

1. Website Visits / Server Log Files

When you visit our website, the web server automatically collects information transmitted by your browser. This information (e.g. IP address, date and time of access, browser type and version) is temporarily stored in so-called server log files. The collection of this data is technically necessary to display our website correctly and to ensure stability and security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website)

2. Cookies

Our website uses only technically necessary cookies that are required for the operation of the site (e.g. for form submission or page navigation).

No analytics, tracking or advertising cookies are used.

3. Contact and Course Booking Forms

When you use a form for course booking or non-binding registration, we collect the data you enter (e.g. name, email address, course selection, billing information) in order to process your enquiry and handle the course booking.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)

Your data is used exclusively for processing the booking and for communication in connection with the course. Data is not shared with third parties unless there is a legal obligation to do so.

4. Newsletter (Brevo)

If you subscribe to our newsletter, we use your email address to send you regular information about our offers and training courses.

Newsletter registration is done via a form with consent (opt-in). You will then receive a confirmation email in which you confirm your registration by clicking a link (double opt-in). Only after this confirmation is your registration complete.

You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email.

Sending is carried out by the provider Brevo (Sendinblue GmbH), based in France. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Brevo.

Legal basis: Art. 6(1)(a) GDPR (consent)

5. Services and Tools Used

Webflow
Our website is hosted by Webflow, Inc. (USA). Data processing is based on Standard Contractual Clauses of the EU Commission.

Google Workspace (Calendar)
We use Google Workspace exclusively for scheduling (calendar entries for participants). No analysis or advertising takes place. Provider: Google Ireland Limited.

Notion
We use Notion for internal organisation and management of course bookings. Provider: Notion Labs, Inc. (USA). Data processing is based on Standard Contractual Clauses.

Make (Integromat)
To automate workflows between forms, calendar and newsletter, we use Make (Celonis SE). Processing takes place within the EU and, where applicable, on the basis of Standard Contractual Clauses.

Brevo
Newsletter sending via Brevo (Sendinblue GmbH) based in the EU (France).

Data processing agreements in accordance with Art. 28 GDPR are in place with all providers mentioned above.

6. Data Retention Period

We store personal data only for as long as necessary to fulfil the respective purpose (e.g. course processing, statutory retention obligations). After that, the data is deleted or anonymised.

7. Rights of Data Subjects

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)

8. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Changes to This Privacy Policy

We reserve the right to update this privacy policy in the event of changes to our website or legal requirements. The current version always applies.

Start Your Erasmus+ Adventure

Whether you have a fixed date or prefer individual planning: choose the right date or share your preferred schedule with us – no obligation.

Course Dates