Privacy Policy
Last updated: 15 March 2026
1. Data Controller
The data controller for ProjectOffice Training is ProjectOffice. For privacy-related inquiries, contact us at: courses@projectoffice.com
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name — to personalize your experience and appear on certificates.
- Email address — for account access, notifications, and communications.
- Password — stored securely using one-way hashing (bcrypt). We never store or see your plain-text password.
2.2 Learning Data
We track your course progress, quiz results, exam attempts, and completion status to provide the learning platform functionality and issue certificates.
2.3 Payment Data
Payment processing is handled by Mollie (a PCI-DSS compliant payment provider). We store:
- Mollie payment ID (reference number)
- Transaction amount and currency
- Payment status and date
We do not store credit card numbers, bank account details, or other sensitive payment information. This data is processed exclusively by Mollie under their privacy policy.
2.4 Technical Data
We collect standard technical data necessary for Platform operation:
- Session data (essential cookies)
- CSRF tokens (security)
- Server logs (IP address, browser type, access times)
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide access to courses and exams | Performance of contract |
| Process payments | Performance of contract |
| Issue and verify certificates | Performance of contract |
| Send enrollment reminders and service emails | Legitimate interest |
| Maintain platform security | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Cookies
We use only essential cookies required for the Platform to function:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Authentication and CSRF protection | Session / 2 hours |
| Remember token | "Remember me" login functionality | 30 days |
| Cookie consent | Records your cookie preference | 1 year (localStorage) |
We do not use tracking cookies, analytics cookies, or advertising cookies.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Mollie B.V. — payment processing (PCI-DSS compliant, based in the Netherlands).
- Certificate verification — your name and certificate details are publicly verifiable via the certificate verification page when someone enters your certificate number.
6. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion.
- Certificates: retained indefinitely (certificates are permanent credentials).
- Payment records: retained for 7 years (tax/accounting obligations).
- Server logs: retained for 90 days.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data (via your Profile page or by contacting us).
- Erasure — request deletion of your account and data ("right to be forgotten").
- Restriction — request that we limit processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interest.
To exercise any of these rights, email us at courses@projectoffice.com. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Passwords hashed with bcrypt
- CSRF protection on all forms
- HTTPS encryption in transit
- Database access restricted to application only
9. International Transfers
Your data is processed and stored in the European Union. We do not transfer personal data outside the EU/EEA.
10. Children
The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top indicates when the policy was last revised.
12. Contact & Complaints
For privacy inquiries: courses@projectoffice.com
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national data protection authority.