Privacy Policy
Last updated: June 2026
1. Data Controller
SSRA academy is the data controller for personal data collected through our website, courses, applications, and support channels. Contact: info@ssracourses.com.
2. Data We Collect
- Account information, including name, email address, country, and login details.
- Application and enrolment information, including academic background, German language level, course interest, and motivation statements.
- Support and communication data, including messages you send to us.
- Usage and technical data, including IP address, device information, browser type, pages visited, and security logs.
- Payment-related checkout data is collected and processed by Paddle.com, our Merchant of Record. We do not store full payment card details.
3. Purposes and Legal Basis
We process personal data to create and manage accounts, provide course access, verify eligibility for restricted courses, deliver customer support, secure the platform, send transactional messages, comply with legal obligations, and improve our services. The legal bases include contract performance, legitimate interests, consent where required, and legal obligation.
4. Payment-Related Data and Merchant of Record
Payment-related checkout, billing, tax, invoicing, subscription management, and refund data is processed by Paddle.com as our Merchant of Record. Paddle may appear on your bank or card statement and handles billing-related customer service and refund requests.
5. Data Sharing
We share personal data only where necessary with the following recipients:
- Paddle.com — our Merchant of Record for checkout, payment processing, subscription management, tax compliance, invoicing, customer service related to billing, and refund requests. Where applicable, Paddle uses appropriate international transfer safeguards, including EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
- Hosting, database, email, analytics, and support service providers, to operate the website and provide our educational services.
- Professional advisers, including legal, accounting, and tax advisers where required.
- Authorities where required by law or to protect legal rights.
We do not sell your personal data.
6. Retention
We retain personal data only for as long as needed for the purposes described above, including account operation, course access, legal, accounting, tax, security, and reporting obligations. When data is no longer needed, it is deleted or anonymised.
7. Your Rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent. You may also lodge a complaint with a competent supervisory authority. Contact us at info@ssracourses.com to exercise your rights.
8. Security and Cookies
We use appropriate technical and organisational measures, including access controls, encryption in transit, and security monitoring. We use essential cookies for authentication, security, and service operation; analytics or marketing cookies are used only where permitted by law.