Privacy Policy
Last updated: October 2026
General Information on Data Processing
Thank you for your interest in our online services. The protection of your personal data is important to us. Below we inform you about the collection, processing and use of personal data on our website in accordance with the General Data Protection Regulation (GDPR).
We only process personal data to the extent necessary for the provision of a functional website and our content, services and course offerings. Processing is carried out only with the consent of the data subject or where processing is permitted by law.
ZORYA LTD, Chsonera Rosemarine 378574 Paphos, Cyprus, Registration number: HE437070
Email: office@zorya.ltd
1. Website Visits / Server Log Files
When you visit our website, the web server automatically collects information transmitted by your browser. This information (e.g. IP address, date and time of access, browser type and version) is temporarily stored in so-called server log files. The collection of this data is technically necessary to display our website correctly and to ensure stability and security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website)
2. Cookies
Our website uses only technically necessary cookies that are required for the operation of the site (e.g. for form submission or page navigation).
No analytics, tracking or advertising cookies are used.
3. Contact and Course Booking Forms
When you use a form for course booking or non-binding registration, we collect the data you enter (e.g. name, email address, course selection, billing information) in order to process your enquiry and handle the course booking.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
Your data is used exclusively for processing the booking and for communication in connection with the course. Data is not shared with third parties unless there is a legal obligation to do so.
4. Newsletter (Brevo)
If you subscribe to our newsletter, we use your email address to send you regular information about our offers and training courses.
Newsletter registration is done via a form with consent (opt-in). You will then receive a confirmation email in which you confirm your registration by clicking a link (double opt-in). Only after this confirmation is your registration complete.
You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email.
Sending is carried out by the provider Brevo (Sendinblue GmbH), based in France. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Brevo.
Legal basis: Art. 6(1)(a) GDPR (consent)
5. Services and Tools Used
Webflow
Our website is hosted by Webflow, Inc. (USA). Data processing is based on Standard Contractual Clauses of the EU Commission.
Google Workspace (Calendar)
We use Google Workspace exclusively for scheduling (calendar entries for participants). No analysis or advertising takes place. Provider: Google Ireland Limited.
Notion
We use Notion for internal organisation and management of course bookings. Provider: Notion Labs, Inc. (USA). Data processing is based on Standard Contractual Clauses.
Make (Integromat)
To automate workflows between forms, calendar and newsletter, we use Make (Celonis SE). Processing takes place within the EU and, where applicable, on the basis of Standard Contractual Clauses.
Brevo
Newsletter sending via Brevo (Sendinblue GmbH) based in the EU (France).
Data processing agreements in accordance with Art. 28 GDPR are in place with all providers mentioned above.
6. Data Retention Period
We store personal data only for as long as necessary to fulfil the respective purpose (e.g. course processing, statutory retention obligations). After that, the data is deleted or anonymised.
7. Rights of Data Subjects
You have the right to:
- Access your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
8. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
9. Changes to This Privacy Policy
We reserve the right to update this privacy policy in the event of changes to our website or legal requirements. The current version always applies.
Start Your Erasmus+ Adventure
Whether you have a fixed date or prefer individual planning: choose the right date or share your preferred schedule with us – no obligation.
