General Data Protection Regulation (GDPR) Policy
Last Updated: February 11, 2025
Skeldurik ("we", "us", or "our") is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and protect your personal data when you use our online workshop platform.
1. Data Controller Information
The data controller responsible for your personal data is:
Skeldurik
Zhukovs'koho St, 26/28
Odesa, Odessa Oblast
Ukraine, 65000
Email: support@skeldurik.com
Phone: +380635693582
2. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
Consent: You have given clear consent for us to process your personal data for specific purposes, such as newsletter subscriptions or marketing communications.
Contract Performance: Processing is necessary to fulfill our contractual obligations when you register for workshops or use our services.
Legal Obligation: Processing is required to comply with applicable laws and regulations.
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security.
3. Personal Data We Collect
We collect and process the following categories of personal data:
3.1. Information You Provide Directly
Account Information: Name, email address, phone number, password, profile picture, and biographical information.
Workshop Enrollment Data: Course selections, learning preferences, skill level, and educational background.
Payment Information: Billing address, payment method details (processed securely through third-party payment processors).
Communication Data: Messages, feedback, support requests, and correspondence with us or other users.
User-Generated Content: Assignments, exercises, comments, forum posts, and collaborative project contributions.
3.2. Information Collected Automatically
Technical Data: IP address, browser type and version, operating system, device information, and unique device identifiers.
Usage Data: Pages visited, features used, time spent on platform, navigation paths, workshop progress, and interaction patterns.
Performance Data: Workshop completion rates, exercise scores, skill assessments, and learning analytics.
Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies as described in our Cookie Policy.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
Service Delivery: To provide access to workshops, process enrollments, deliver educational content, and facilitate interactive exercises.
Account Management: To create and manage your account, authenticate your identity, and provide customer support.
Communication: To send workshop updates, assignment reminders, platform notifications, and respond to your inquiries.
Payment Processing: To process transactions, manage billing, and prevent fraudulent activities.
Platform Improvement: To analyze usage patterns, assess workshop effectiveness, personalize learning experiences, and develop new features.
Marketing: To send promotional materials, workshop recommendations, and newsletters (only with your explicit consent).
Legal Compliance: To comply with applicable laws, respond to legal requests, enforce our terms of service, and protect our rights.
Security: To maintain platform security, prevent unauthorized access, detect and prevent fraud, and protect user safety.
5. Data Sharing and Disclosure
We may share your personal data with the following categories of recipients:
5.1. Service Providers
We share data with trusted third-party service providers who perform services on our behalf, including:
Cloud hosting and infrastructure providers
Payment processors and financial institutions
Email delivery and communication platforms
Analytics and performance monitoring tools
Customer support and help desk systems
Content delivery networks
These providers are contractually obligated to protect your data and use it only for specified purposes.
5.2. Workshop Instructors and Collaborators
We share relevant information with workshop instructors to facilitate teaching, provide feedback, and support collaborative learning activities.
5.3. Other Users
Certain information may be visible to other platform users, including profile information, forum posts, and collaborative project contributions, as controlled by your privacy settings.
5.4. Legal Authorities
We may disclose personal data when required by law, legal process, litigation, or governmental authorities, or to protect our rights, property, or safety.
5.5. Business Transfers
In connection with mergers, acquisitions, reorganizations, or asset sales, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
6. Your Rights Under GDPR
As a data subject, you have the following rights:
6.1. Right of Access
You have the right to request confirmation of whether we process your personal data and obtain access to such data, along with information about the processing.
6.2. Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
6.3. Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data under certain circumstances, including when:
The data is no longer necessary for the purposes collected
You withdraw consent and no other legal basis exists
You object to processing and no overriding legitimate grounds exist
The data has been unlawfully processed
Deletion is required for legal compliance
6.4. Right to Restriction of Processing
You have the right to request restriction of processing when:
You contest the accuracy of personal data
Processing is unlawful but you oppose erasure
We no longer need the data but you require it for legal claims
You have objected to processing pending verification
6.5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
6.6. Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes, including profiling.
6.7. Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
6.8. Right Not to be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects.
6.9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
7. Exercising Your Rights
To exercise any of your rights, please contact us at:
Email: support@skeldurik.com
Phone: +380635693582
Signal: https://signal.me/#p/+380635693582
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of such extension.
To verify your identity and protect your data security, we may request additional information before processing your request.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
Account Data: Retained while your account is active and for a reasonable period afterward to accommodate account reactivation requests.
Workshop Data: Retained for the duration of workshop access and for historical reference and certification purposes.
Communication Records: Retained for customer support purposes and legal compliance requirements.
Financial Records: Retained according to applicable tax and accounting regulations.
Marketing Data: Retained until you withdraw consent or request deletion.
After the retention period expires, we securely delete or anonymize your personal data.
9. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection.
When transferring data internationally, we implement appropriate safeguards, including:
Standard Contractual Clauses approved by the European Commission
Adequacy decisions recognizing equivalent data protection levels
Binding Corporate Rules for intra-organizational transfers
Certification mechanisms and codes of conduct
We ensure that all international transfers comply with GDPR requirements and provide adequate protection for your personal data.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
Encryption of data in transit and at rest
Regular security assessments and vulnerability testing
Access controls and authentication mechanisms
Employee training on data protection practices
Incident response and breach notification procedures
Regular backups and disaster recovery planning
While we strive to protect your personal data, no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent.
If we become aware that we have collected personal data from a child under 16 without proper consent, we will take steps to delete such information promptly.
If you believe we have inadvertently collected data from a child, please contact us immediately at support@skeldurik.com.
12. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.
You can control cookie preferences through your browser settings and our cookie consent management tool. Please refer to our Cookie Policy for detailed information about the cookies we use and how to manage them.
Note that disabling certain cookies may limit your ability to use some platform features.
13. Third-Party Links and Services
Our platform may contain links to third-party websites, applications, or services not operated by us. We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any third-party services before providing personal data. This GDPR Policy applies only to data collected by Skeldurik.
14. Data Protection Officer
For questions regarding data protection, GDPR compliance, or exercising your rights, you may contact our Data Protection Officer at:
Email: support@skeldurik.com
Subject Line: Data Protection Inquiry
15. Changes to This Policy
We may update this GDPR Policy periodically to reflect changes in our practices, legal requirements, or operational needs. The "Last Updated" date at the top indicates the most recent revision.
We will notify you of material changes by email or through prominent platform notices. Continued use of our services after changes become effective constitutes acceptance of the updated policy.
We encourage you to review this policy regularly to stay informed about how we protect your personal data.
16. Supervisory Authority
If you have concerns about our data processing practices or wish to lodge a complaint, you may contact your local data protection supervisory authority.
For individuals in the European Union, you can find your supervisory authority contact information at: https://edpb.europa.eu/about-edpb/board/members_en
17. Contact Information
For questions, concerns, or requests regarding this GDPR Policy or our data protection practices, please contact us:
Skeldurik
Zhukovs'koho St, 26/28
Odesa, Odessa Oblast
Ukraine, 65000
Email: support@skeldurik.com
Phone: +380635693582
Signal: https://signal.me/#p/+380635693582
We are committed to addressing your concerns and protecting your privacy rights under GDPR.