Privacy Policy

We appreciate your interest in our website and our company. The protection of your personal data during the collection, processing, and use of your data in connection with your visit to our website is important to us. Your data is protected in accordance with applicable legal provisions.

For external links to third-party content, we cannot assume any liability despite careful content review.

The responsible entity within the meaning of data protection laws is:

If you have questions about data protection or wish to exercise rights regarding your personal data, please email us at [email protected].

Every access to our website and every retrieval of a file stored on the website is logged. This storage serves internal system-related and statistical purposes. The following data is logged: name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser, and requesting domain.

Additional personal data is only collected if you provide such information voluntarily, for example as part of an inquiry or registration.

To protect accounts, investigate misuse and provide security support, we record sign-in events and session histories. These records can include the date and time, outcome, session duration and end reason, browser or device information, IP address, and an approximate country and city. The location is resolved on our own systems from the DB-IP Lite database; no visitor IP address is sent to DB-IP for this lookup. IP Geolocation by DB-IP.

We process these records on the basis of our legitimate interest in protecting accounts and the service from misuse under Article 6(1)(f) GDPR. Login events and ended session histories are retained for 180 days and then removed in scheduled batches. Only authorised super administrators can view the per-account records. The GDPR requires storage periods to be stated and personal data not to be kept longer than necessary; see Articles 5, 6 and 13 GDPR.

When somebody opens the public verification page of a certificate, we count that visit. What we store is one row per certificate, per calendar day (Europe/Berlin) and per country, holding a count. Nothing else is stored. The visitor's IP address is resolved to a country on our own systems from the DB-IP Lite database; no IP address is sent to DB-IP for this lookup, and the address itself is never stored. The browser's user-agent string is never stored either. So that the same visitor is not counted twice on one day, we store a one-way SHA-256 hash of a secret, the day, the address and the browser string. It cannot be reversed, it comes out differently on a different day and therefore links nothing across days, it is joined to no other record, and it is deleted automatically once the day it belongs to is over. There is no cookie and no identifier that follows a visitor. IP Geolocation by DB-IP.

We count these visits on the basis of our legitimate interest under Article 6(1)(f) GDPR in giving the certificate holder a measure of the reach of the credential we issued them, and in understanding whether the verification service is used. This is not analytics of individuals. The counts themselves (day, country, number) do not identify anyone, so they are kept without a fixed deletion period and are deleted together with the certificate. The certificate holder can see these figures in their own account and can switch the counting off there at any time; switching it off stops the counting, while figures already counted remain. Link previews requested by LinkedIn, Slack and similar services are not counted; only a visit from a real browser is. The GDPR requires the purpose, the legal basis and the storage period to be stated; see Articles 5, 6 and 13 GDPR.

Where you have provided us with personal data, we use it only to respond to your inquiries, to process contracts concluded with you, and for technical administration.

Your personal data will only be disclosed or otherwise transmitted to third parties if this is necessary for the purpose of contract processing — in particular, the transmission of order data to suppliers — or for billing purposes, or if you have given your prior consent. You have the right to revoke any consent given at any time with effect for the future.

Stored personal data will be deleted when you revoke your consent to storage, when knowledge of the data is no longer required to fulfil the purpose for which it was stored, or when storage is inadmissible for other legal reasons.

Upon written request, we will be happy to inform you about the data stored about your person. Please contact us at [email protected].

Where we use data for a purpose that requires your consent under legal provisions, we will always ask for your express agreement and record your consent in accordance with data protection regulations.

You may revoke any consent given at any time with effect for the future and/or object to the future use of your data for advertising, market research, or opinion research purposes. A simple message to us is sufficient. You may use the contact details provided above for this purpose, without incurring any costs other than the basic transmission costs.

We endeavour to store your personal data by taking all technical and organizational measures in such a way that they are not accessible to third parties. When communicating by email, complete data security cannot be guaranteed by us; for confidential information, we recommend the postal route.

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website may be transferred to a Google server in the USA and stored there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at tools.google.com/dlpage/gaoptout.

Please note that on this website, Google Analytics has been extended with the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking).

Our website uses cookies and similar technologies to ensure the website functions correctly and to analyse how it is used.

Types of Cookies

• Strictly Necessary: Required for the website to function. They cannot be switched off.
• Analytics: Help us understand how visitors interact with the site (e.g., page views, traffic sources). Used only with your consent.
• Preferences: Remember your settings such as language preference.

You can manage or disable cookies through your browser settings at any time. Disabling strictly necessary cookies may affect site functionality.

By subscribing to the Albion Academy newsletter, you consent to receiving periodic emails containing updates on new courses, session dates, industry insights, and promotional offers.

Unsubscribe

You may unsubscribe at any time by clicking the "Unsubscribe" link included in every newsletter email, or by contacting us at [email protected].

Data Use

Your email address is used solely for sending the newsletter and will not be shared with third parties. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal.