Privacy Policy

With this information, PhiAcademy doo Beograd-Voždovac (hereinafter “PhiAcademy“ or “We“) informs you about the processing of your personal data (“Data“) as well as your data protection claims and rights in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Serbian Personal Data Protection Act, in regard to the following: 

1. Which Data are processed and from which sources do they come?

We process the Data that we receive from you when you visit our website at www.phi-academy.com and the Data, we receive from you when you use services on our website www.phi-academy.com (hereinafter “Website“ or ‘’our Services”) and/or from you as student of  PhiAcademy’s course.

We receive your data from the following sources:

· From you: When you visit the Website and when you use our Services, we receive the data directly from you.

If you are a Master or a Grand Master (hereinafter: Master), we receive your Data for PhiMap from the following sources:

· PhiAcademy GmbH: Our affiliate company PhiAcademy GmbH, Vienna, Austria, Gartengasse 8, has processed the Data of Masters in the base of yours contractual relationship. With the PhiMap all Master Data are processed together to offer user of the Website easer insight a Master Data as Master’s service(s) and contact details. For this purpose, the Master Data are transmitted based on the legitimate interest of our group in the fulfillment of marketing purposes from PhiAcademy GmbH to PhiAcademy doo.

· From you: When you enter into a contractual relationship with us as a Master.

If you are a Student, we receive your Data for PhiMap from the following sources:

· Your Master:  If you successfully complete a course with a Master, Master provide us with your Data. With the PhiMap all your Data are processed together to offer user of the Website easer insight in your service(s) and contact details. For this purpose, your Data are transmitted based on the legitimate interest of our group in the fulfillment of marketing purposes from Master to PhiAcademy doo.

· From you: When you receive an invitation e-mail from PhiCert, and you enter your details to create a PhiCert profile you have option to give consent to be on PhiMap.

We do not collect or process any special categories of personal data.

2. For what purposes are Data processed?

We process your Data in accordance with applicable data protection law and for specific purposes and for a specific period. The most important purposes, duration and legal basis of the processing are listed below. If we collect Data from you for other purposes, we will inform you separately before collecting that Data. If you are obliged to provide the Data for the respective purpose, it will be made visible with (*). Data which do not have (*) are optional.

2.1. Contact Form 

Data:                   name*, e-mail address*, message (inquiry or request) *.

Purpose:             We process the Data you provided when you contact us via the “Contact us directly’’ form in order to respond to your inquiry or to fulfill your request.

Legal Basis:        We process this Data based on our own legitimate interest, namely to process your inquiries and requests and to provide you with better quality Services.

Duration:           We process the Data you provide only for the amount of time it takes to respond to your inquiries or to fulfill your requests.

2.2. Newsletter

Data:                   e-mail address*.

Purpose:             We process the Data you provided when you signed up for the PhiAcademy Newsletter on Website for the purposes of direct marketing. We will send you personalized newsletters via e-mail and inform you about offers, services and events of PhiAcademy and our affiliate companies (e.g., PhiAcademy GmbH, Austria and CraftMaster GmbH, Austria) if based on your Data, we assume that this information is particularly relevant and interesting for you. 

Legal Basis:        We process this Data based on your consent. You can withdraw your consent anytime by e-mail to info@phiacademy.com or if you click on the unsubscribe link in every Newsletter mail.

Duration:           As long as you do not withdraw your consent. At the latest 30 days after

withdrawal of your consent all data (including backups) are deleted.

2.3. Marketing

Data:                   name*, e-mail address*, phone number.

Purpose:             We process your Data for the purpose of direct marketing and social media marketing for offers, services and events of PhiAcademy and its affiliates (e.g., PhiAcademy GmbH and CraftMaster GmbH). We may combine Data we or our providers have collected with Data collected by our affiliates to provide a more detailed picture of the needs and interests of our users.

Legal Basis:        We process the abovementioned Data on the basis of our legitimate interest or based on the legitimate interests of third parties in direct advertising and marketing.

Duration:           Your Data will be processed until you object to this processing. After an objection has been raised, we will delete your Data.

2.4. PhiMap

Data:                   name*, your PhiAcademy’s title(s) *, street, city and country of residence*, e-mail address*, phone*, your photo, company name, Facebook and Instagram account.

Purpose:             We process your Data for the purpose of direct marketing for your service(s) in accordance with the course(s) which you successfully finished at PhiAcademy. Namely, PhiMap is intended to offer users data regarding your service(s) and contact details as easily accessible source of information at any time. Since PhiAcademy and its affiliates operate worldwide and have a large and diversified organizational structure, it is of particular interest to be able to track in PhiMap whether a person has actually successfully completed a PhiAcademy course. In this way, any misuse of the protected trademarks and the good name of PhiAcademy should be detected early and prevented as far as possible.

Legal Basis:        We process the abovementioned Data on the basis of your consent and our and your legitimate interests in direct advertising and marketing purposes.

Duration:           Your Data will be processed until you object to this processing. After an objection has been raised, we will delete your Data.

2.5. PhiAcademy Chat

Data:                  name*, e-mail address*, message (issue or request)*, phone number.

Purpose:             When you contact our PhiAcademy Chat to submit requests or inquiries regarding our courses, and therefore provide us with your Data, these Data will be processes to respond to your requests or inquiries regarding our courses and for direct marketing purposes.

Legal Basis:        We process the abovementioned Data on the basis of our legitimate interest or based on the legitimate interests of third parties, namely to process your inquiries and requests to enhance the quality of the Services we provide and for direct marketing purposes. You may withdraw consent for using Data for marketing purposes anytime by sending an e-mail to info@phiacademy.com.

Duration:           Your Data will be processed until you object to this processing. After an objection has been raised, we will delete your Data.

2.6. PhiAcademy Call Support

Data:                   name*, e-mail address*, phone number, message or questions and answers related to PhiAcademy, PhiAademy courses and PhiAademy Masters.

Purpose:             PhiAcademy Call Support is intended to offer users data regarding our course(s) via live calls when we call you, and for direct marketing purposes.

Legal Basis:        We process the Data based on our legitimate interest in the processing of your Data for administrative and direct marketing purposes. You can withdraw your consent for using Data for marketing purposes anytime by sending an e-mail to info@phiacademy.com.

Duration:           Your Data will be processed until you object to this processing. After an objection has been raised, we will delete your Data.

2.7. Book your place

Data:                  name*, e-mail address*, city, country, phone number*, message or request or question related to PhiAcademy, PhiAcademy courses and PhiAcademy Masters.

Purpose:             “Book your place” is intended to offer users direct contact to the Master whose course they are most interested in attending. By submitting the Data, you agree that the Data be submitted to the Master of your choice and to the PhiAcademy.

Legal Basis:        We process the Data based on your consent and on the basis of our legitimate interest or based on the legitimate interests of third parties in direct advertising and marketing and for the our administrative purposes. You can withdraw your consent for using Data for marketing purposes anytime by sending an e-mail to info@phiacademy.com.

Duration:           Your Data will be processed until you object to this processing. After an objection has been raised, we will delete your Data.

Beyond all above mentioned, we process your Data only as long as there is a legal obligation to do so or we need Data for the exercise or defence of legal claims.

3. Who receives your Data?

Within PhiAcademy and our affiliate companies PhiAcademy GmbH and CraftMaster gmbh, those employees will receive your Data, who need them for the purposes outlined above. If we are legally obliged to do so, we will also transfer your Data to public authorized bodies. In addition, companies commissioned by us (in particular IT and back office providers) will receive your Data if they need them to fulfill their respective tasks. These providers are obliged to treat all Data confidentially, to process it only to the extent necessary for their service provision and they provide their processing activities within the European Economic Area. If these companies provide their processing activities outside the European Economic Area, there are appropriate safeguards in place to ensure an adequate level of data protection.

We will transfer your Data to the following recipients:

4. Are you obliged to provide Data?

To receive a message or newsletter - it is necessary that you provide the Data we need to perform our voluntary services. Those Data are marked with (*) as mandatory. Unless you provide those mandatory Data, we will generally be unable to provide our services.

To be on PhiMap - it is necessary that you provide Data above mentioned under point 1, except optional Data, how we be able to fulfill our contractual obligations.

5. Cookies

5.1 Technically required Cookies

We use cookies on our Website, which are small files stored on your device (web browser). On your next visit to our Website using the same device, the information stored in cookies will subsequently be returned to our Website. We use the Data collected through these cookies to better represent our Website and to make our offers user-friendly, for example to evaluate the use of our Website. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. Other cookies are only stored on our Website for the duration of your visit.

The following cookie is used:

This cookie is technically necessary for the presentation of the Website. You can deactivate the setting of cookies in the settings of your browser. Please note that a general deactivation of cookies may possibly lead to functional limitations of our Website.

5.2 Cookies for marketing and advertising purposes

5.3 Analytical and behavioral cookies

5.4 Other Analytics and Marketing tools

5.4.1 Google Analytics

We use Google Analytics cookies, a web analysis service provided by Google LLC (hereinafter “Google”). These cookies transmit data concerning how you use the Website to a Google server in the USA. However, your IP address is shortened prior to transmission and the transmitted data can no longer be associated with you.

Data:                Data concerning how you use the Website (visits, sessions, frequency, time active, events and user actions).

Purpose:         Google will use the collected information to evaluate data concerning the general use of our Website and to compile Website Activities reports. For information about how Google and its affiliates use data, please visit Google's Privacy Policy, currently available at: www.google.com/privacy.html.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. If you want to prevent the use of Google Analytics cookies in general, you can either do this through your browser settings or you can install the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout.

Duration:        Your Data will be processed until you withdraw consent. Beyond that, we will process the Data only as long as there is a legal obligation to do so or we need the Data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://policies.google.com/privacy.

5.4.2     Google Customer Match

The Google Customer Match feature enables us to create an audience using data such as e-mail addresses and phone numbers. Google does not receive actual e-mail addresses. Google’s system transforms the contact information we have into hashed codes, using secure hashing algorithm SHA256, a one-way hashing mechanism that is not unencrypted by Google.

Data:                Name*, e-mail-address*, address (street, city, postal code, county, country), chosen license, metadata (date of registration, date of subscription, clicks, etc.)

Purpose:         We process your Data for the purpose of remarketing, direct marketing and social media marketing in the Google Customer Match tool. We may combine Data we or our providers have collected with Data collected by our affiliates to provide a more detailed picture of your needs and interests.

Legal Basis:     Data collection only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn.

Duration:        Your Data will be processed until you withdraw consent. Beyond that, we will process the Data only as long as there is a legal obligation to do so or we need the Data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://support.google.com/google-ads/answer/6334160?hl=en

https://policies.google.com/technologies/partner-sites?hl=en

https://policies.google.com/privacy

5.4.3     Facebook

We also use the Facebook Audience Pixel analysis tool from Facebook Ireland Limited. All data collected by this pixel is encrypted by Facebook using "hashes".

Data:                Data concerning the way you use the Website (visits, sessions, frequency, time active, events and user actions). 

Purpose:         Measures the effectiveness of our advertising.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. The comparison of the data with the data stored by us is based on our legitimate interest in marketing and customer loyalty.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in such storage. Beyond that, data processed with your consent will no longer be stored if you withdraw consent, unless there is a legal obligation to do so or we need the data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://www.facebook.com/policy.php.

5.4.5     Facebook Custom Audiences

Facebook’s Customer List Custom Audiences feature enables us to create an audience using data such as e-mail addresses and phone numbers ("Audience"). When using this feature, your data is locally hashed on our system before we upload and pass it on to Facebook ("Hashed Data") to be used to create an Audience.

Data:                Name*, e-mail-address*, address (street, city, postal code, county, country), chosen license, metadata (date of registration, date of subscription, clicks, etc.).

Purpose:         We process your Data for the purpose of remarketing, direct marketing and social media marketing in the Facebook Customer List Audience tool. We may combine Data we or our providers have collected with Data collected by our affiliates to provide a more detailed picture of the needs and interests of our customers.

Legal Basis:     We process this data on the basis of our legitimate interest in direct advertising and marketing and to measure the effectiveness of our advertising.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in such storage.

Additional information about the tool can be found here:

https://www.facebook.com/legal/terms/customaudience

5.4.6     TikTok

Data:                Data concerning the way you use the Website (visits, sessions, frequency, time active, events and user actions). 

Purpose:         Measure the effectiveness of our advertising.

Legal Basis:     The collection of data only takes place with your consent. Consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. The comparison of the data with the data stored by us is based on our legitimate interest in marketing and customer loyalty.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in such storage. Beyond that data processed with your consent will no longer be stored if you withdraw consent, unless there is a legal obligation to do so or we need the data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://www.tiktok.com/legal/privacy-policy?lang=en

5.4.7     Pinterest

Data:                Data concerning the way you use the Website (visits, sessions, frequency, time active, events and user actions). 

Purpose:         Measure the effectiveness of our advertising.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. The comparison of the data with the data stored by us is based on our legitimate interest in marketing and customer loyalty.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in such storage. Beyond that data processed with your consent will no longer be stored if you withdraw consent unless there is a legal obligation to do so or we need the data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://policy.pinterest.com/en-gb/privacy-policy#section-residents-of-the-eea

5.4.8     Snapchat

Data:                Data concerning the way you use the Website (visits, sessions, frequency, time active, events and user actions). 

Purpose:         Measure the effectiveness of our advertising.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. The comparison of the data with the data stored by us is based on our legitimate interest in marketing and customer loyalty.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in the storage. Beyond that data processed with your consent will no longer be stored if you withdraw consent unless there is a legal obligation to do so or we need the data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://www.snap.com/en-GB/privacy/privacy-policy.

5.4.9     LinkedIn

Data:                Data concerning the way you use the Website (visits, sessions, frequency, time active, events and user actions). 

Purpose:         Measure the effectiveness of our advertising.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn. The comparison of the data with the data stored by us is based on our legitimate interest in marketing and customer loyalty.

Duration:        We store your data only as long as it is necessary for the purposes for which we have collected your data, we are legally obliged to do so or we have a corresponding overriding interest in the storage. Beyond that data processed with you consent will no longer be stored if you withdraw consent unless there is a legal obligation to do so or we need the data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://www.linkedin.com/legal/privacy-policy.

5.4.10   Hotjar

Data:                Device’s IP address (stored in a de-identified format); device screen resolution; device type (unique device identifiers), operating system, and browser type; geographic location (country only); preferred language used to display the Hotjar enabled site; mouse events (movements, location and clicks); keypresses; referring URL and domain; pages visited and date and time when Website pages were accessed.

Purpose:         We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g., how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our Services with user feedback.

Legal Basis:     The collection of data only takes place with your consent. This consent can be withdrawn by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it is withdrawn.

Duration:        Your Data will be processed until you withdraw consent. Beyond that, we will process the Data only as long as there is a legal obligation to do so or we need the Data for the exercise or defense of legal claims.

Additional information concerning the tool can be found here:

https://www.hotjar.com/legal/policies/privacy/.

6. Your rights in the context of the processing of your Data

You have the right

·       to request information concerning which of your personal Data we process;

·       to rectify or erase your Data; 

·       to restrict the processing of your Data;

·       to withdraw your consent;

·       to object to the processing of your Data; 

·       to Data portability.

If you believe that we violate your rights when processing your Data, please contact us. This is the only way we can process your concerns as quickly as possible. You also have the right to lodge a complaint with a supervisory authority in Serbia: www.poverenik.rs and in Austria: www.dsb.gv.at.

7. Automated decision-making and profiling

We do not use automated decision-making or profiling according to Article 22 of the GDPR.

8. Who is responsible for the processing of your Data and how can you get in touch with the Controller?

PhiAcademy doo Beograd-Voždovac, Bulevar oslobođenja 137, Belgrade, the Republic of Serbia is responsible for data processing activities.

9. Who can you contact?

If you have any requests or concerns, you can contact us directly by post or e-mail via the following addresses:

address: PhiAcademy doo Beograd-Voždovac

Bulevar Oslobođenja 137, 11000 Belgrade

Republic of Serbia

e-mail: info@phiacademy.com