1. Data Controller
The data controller of your personal data (the "Controller") is Andrei Albu, owner and operator of the Acosmy platform. For any information regarding data processing, you can contact us at the reference email address.
2. Data We Collect
The Acosmy (LMS) platform collects the following types of data:
- Dati dell'Account: Email address, username, seniority level, or company (collected during registration), necessary to provide access to lessons and personalize your learning plan.
- Dati di Telemetria Didattica: Course progress, exercise attempts, and logs generated in Live Coding environments connected to the platform. We analyze this data to improve assessments or support students in case they get stuck.
- Dati Analitici e di Navigazione: IP address (anonymized), user agent, browser information, and navigation behavior collected through Google Analytics 4 (GA4).
3. Cookies and Google Analytics 4 (GA4)
We use essential technical cookies necessary for the functioning of the platform (e.g., for JWT authentication and session maintenance).
For analyzing platform performance, we use Google Analytics 4 (GA4). GA4 is implemented to ensure your privacy: analytical cookies and Google tracking scripts are loaded exclusively with your explicit consent via the banner located on the page. If you do not accept "All", these scripts will not be executed, in full compliance with the ePrivacy directive and the GDPR. Your consent preferences are saved in your local localStorage.
4. Purposes of Processing
Your data is processed for the following purposes:
- To provide, maintain, and advance the functionalities of the LMS service (Training Hub).
- To improve and analyze in an aggregated form the use of the site and conversion rates (prior analytical consent).
- To send you essential communications regarding your account status, billing, or security alerts.
5. Tools and Third Parties
No data is sold to third parties for marketing purposes. The third-party services we rely on as data processors to provide the service include:
- Google Analytics: If consented, processes aggregated data.
- Cloud & Database: Acosmy's infrastructure uses secure foundations. Passwords are never stored in plain text (Bcrypt/JWT).
- Scheduling/Payment: Services like Calendly or Stripe (if integrated) process data strictly adhering to their stringent PCI/GDPR regulations.
6. Your Rights (GDPR)
Under the European Regulation 2016/679 (GDPR), as a European user you have the right to:
- Access your personal data at any time (Right of Access).
- Request the rectification or complete removal of your data from our servers (Right to be Forgotten).
- Revoke or modify consent for analytical tracking at any time by clearing your browser's local storage.
- Object to the processing and request the portability of structured data.
To exercise any of these rights, please contact us promptly: we will evaluate and execute the requested variations within a maximum of 30 days.