Skip to content
Life Support Hub
ΕΛ

Privacy Policy

Last updated: 28 October 2026

1. Who we are

This policy describes how Life Support Hub collects and processes your personal data.

Data controller:
Life Support Hub, Civil Non-Profit Company (AMKE)
Kyvelis 62, Alimos 174 56, Greece
G.E.MI.: 179428401000
Email: info@lifesupporthub.edu.gr
Phone: +30 6978127131

2. What data we collect

Depending on what you do on our website, or how you register for a seminar:

  • Newsletter subscription / expression of interest: your email address, and (in the expression of interest) the seminars you are interested in.
  • Seminar registration through the website: full name, email, contact phone number, area of residence and postcode. For seminars certified by an external body, the name is requested in Latin characters, as it will appear on the certificate; for seminars with Life Support Hub's own certificate of attendance, as it appears on your ID. For seminars certified by the ERC or by ECSI we also ask for your date of birth, which the body requires to issue the certificate; for the other seminars we do not ask for it. We use the area and postcode to plan where to run the next classes: we travel all over Greece, and this tells us where people are asking from.
  • Registration made directly with us, by phone or by email: full name and at least one contact detail — phone number or email, whichever you give us — and any notes of ours about your registration. For seminars certified by the ERC or by ECSI we also ask for your date of birth, for the same reason. We may also ask for your area of residence and postcode, to plan where to run the next classes. We enter all of these details ourselves in the website's admin panel, alongside the registrations that come in through the website.
  • Online payment: for seminars paid online by card, your registration details pass first to Stripe together with the payment, and are recorded by us only if the payment is completed; if it is not, we keep nothing. You enter your card details directly on Stripe's payment page and we never see them. From Stripe we receive the amount, the confirmation of payment, and the name and email you gave there. On the same seminars we ask whether you are a health professional, an educator or a coach; if so, we contact you for proof of it, because whether the receipt is issued without VAT depends on it.
  • Double Score programme form: the name of the organisation and its type (school, club, tutoring centre and so on), the full name, email and phone number of the contact person and, if you fill them in, the area and any comments. We use them to contact you about the organisation taking part in the programme, and we send you an email confirming that we received the form.
  • Use of the website (only with your consent, see section 9): which pages you visit, which site or search engine brought you to us, the type of your device and browser, and your approximate location (city level). We also record whether you clicked our phone number or email address, which links to other websites you followed, and whether you scrolled to the end of a page. On the forms we record whether the submission went through; on the seminar registration also which seminar you registered for, which page brought you to the form, at which field the submission stopped when you pressed "Submit registration", why the registration was not accepted, whether you joined the waiting list, and whether the online payment was completed — but never what you type into the fields. If you arrived from one of our ads on Google, an identifier of the ad click is also recorded, so that we can see whether the click led to a form being submitted (see section 9). These details are linked to a random identifier in a cookie in your browser, not to your name.

3. Instructor and external contributor profiles

On profile pages ("/sxetika/<key>") and on articles, for anyone who teaches or writes for us, we publish: full name, photograph, professional role, certifications and the body that issues them, a short biography, and links to professional profiles on other sites (e.g. LinkedIn) where they have given them to us.

For members of our instructor team, publishing their name, photograph and certifications rests on our legitimate interest (Article 6(1)(f) GDPR) in showing who teaches and with what qualifications — not on consent: the consent of someone who works for us or teaches on our seminars is not considered freely given within the meaning of the Regulation, so it could not support the publication. Team members may object to publication (the right to object, art. 21 GDPR — see section 7). That legitimate interest ends when someone stops teaching on our seminars, and we then remove their profile from the site. Their name stays on the articles they wrote while on the team.

For external contributors who write articles for us without working for us or teaching on our seminars, publication rests on their explicit consent, which we record before publishing anything. They can withdraw it at any time by writing to us at info@lifesupporthub.edu.gr. Once they do, we remove their profile page and their card from the "About" page, and their name stops appearing on the articles they wrote — the articles themselves stay published, with no attribution to the person who wrote them. If an external contributor starts teaching on our seminars, publication of their profile rests from then on on our legitimate interest, as it does for every team member, and no longer on their consent. We tell them before the change is made. Conversely, if a team member stops teaching but continues to write articles for us, we ask for their explicit consent, as we do from every external contributor.

For questions about your profile, or to ask for a correction or removal, to object to publication or to withdraw your consent, write to us at info@lifesupporthub.edu.gr.

The instructor portal

Members of our instructor team use a private portal, reached through a link we send them; it is not public and does not appear in search engines. In it we process:

  • your account's email address; your password is managed by Google (Firebase Authentication) and we never see it;
  • your full name, phone number, area, T-shirt size and, if you upload one, a photograph;
  • your level in each programme (e.g. Instructor or Director), which we verify with the certification body;
  • the seminars you volunteer for, the teams we place you in, and whether you are a team's Director;
  • your answers to invitations to an Educational Instructor Day (EID), and your attendance;
  • the messages you write in a seminar team's conversation.

We use them to organise the teaching teams of our seminars, to communicate with you about them, and to make sure every seminar is taught by instructors with the required qualifications. This processing rests on our working relationship with you (Article 6(1)(b) GDPR). From the volunteering and the teams we also work out, for internal use, how often each instructor takes part, so that we can plan the teams and keep track of teaching standards. This rests on our legitimate interest (Article 6(1)(f) GDPR), and only we see these figures.

When we place you in a seminar's team, the other members of that team see your full name and phone number, so that they can coordinate, as well as the team's conversation. Your email address is stored with the team's details so that we can notify you of new messages; it is not shown in the portal, but it is technically accessible to the team's members. Other instructors see none of your details.

We keep the portal data for as long as you teach on our seminars. When you stop, or whenever you ask us to, we delete your account together with everything linked to it: your details and photograph, your levels, your volunteering, your place in teams, your EID answers and your messages. Until then, a team's messages stay stored after the seminar, unless the person who wrote them or we delete them.

4. Why we process it and on what legal basis

  • To send you updates about seminars and related material, when you have given your consent (Article 6(1)(a) GDPR). You can withdraw it at any time.
  • To handle your participation in a seminar and its payment, to keep your place when you cannot come, and to issue your certificate or certificate of attendance, in the context of our contract with you (Article 6(1)(b) GDPR).
  • To issue the receipt for every payment and transmit it to AADE, the Greek tax authority, and to decide whether it is issued without VAT, in compliance with a legal obligation (Article 6(1)(c) GDPR).
  • To keep customer records with the details of everyone who receives a receipt (name, area, postcode and email) in the website's admin panel and in AADE's timologio application, on the basis of our legitimate interest (Article 6(1)(f) GDPR).
  • To plan where to run classes, based on where those who register live — our legitimate interest (Article 6(1)(f) GDPR).
  • To answer an organisation that expresses interest in the Double Score programme and to arrange its participation — our legitimate interest (Article 6(1)(f) GDPR) in contacting the contact person the organisation gives us.
  • To organise the teaching teams through the instructor portal, in the context of our working relationship with the members of our team (Article 6(1)(b) GDPR), and for their participation figures — our legitimate interest (Article 6(1)(f) GDPR). Details in section 3.
  • To understand how the website is used and at which point of the seminar registration visitors get stuck, so that we can improve it, when you have given your consent in the cookie message (Article 6(1)(a) GDPR). You can withdraw it at any time (see section 9).
  • To measure whether our ads on Google Search bring visitors who complete a form, when you have given your consent in the cookie message (Article 6(1)(a) GDPR). You can withdraw it at any time (see section 9).

5. Who it is shared with

We do not sell your data. We share it only with providers who help us operate:

  • Mailchimp (Intuit Inc.): for sending emails. The company is based in the USA, so the data is transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
  • Resend (Plus Five Five, Inc.): for the emails of a registration or a Double Score form sent through the website — the notification to us and the confirmation to you — and for the instructor portal's emails: email verification, password reset, EID invitations and notices of new seminars or new team messages. The company is based in the USA, so these details are transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses). For registrations made directly with us, by phone or by email, no such email is sent and your details are not transferred to Resend.
  • Stripe (Stripe Payments Europe, Ltd., Ireland): for online payments. It receives your registration and card details in order to carry out the payment. For fraud prevention and for its own legal obligations, Stripe also processes these details as an independent controller, under its own privacy policy. It may transfer them to the USA based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses). For registrations without online payment, your details are not transferred to Stripe.
  • AADE (myDATA): for every payment we transmit the receipt to the Independent Authority for Public Revenue, as the law requires. The receipt transmitted contains the amount, the VAT, the date and the payment method; it contains neither your name nor any other personal detail. Separately, we enter your name, area, postcode and email in the customer list of AADE's timologio application, where we keep our customer records.
  • Google (Firebase): for hosting the data of the website and of the instructor portal. Registration, Double Score and portal details are stored in Google data centres in the EU. Portal accounts (email and password) are held by the Firebase Authentication service, which may also process them outside the EU. The company is based in the USA; for any access or processing outside the EU, the same safeguards apply.
  • Google Analytics (Google Ireland Limited): for measuring traffic and the use of the website (section 2), only if you have given your consent. This data is also transferred to the USA, where Google LLC processes it, based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
  • Google Ads (Google Ireland Limited): for measuring our ads on Google (section 9), only if you have given your consent. It receives measurement data from Google Analytics; it does not receive your name, email or phone number. This data is also transferred to the USA, where Google LLC processes it, based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
  • Contabo GmbH: for hosting our training platform, on one of the company's servers in Germany. Your platform account, for the seminars with online theory preparation, is kept there. The company is based in Germany, so the data stays within the EU and no transfer outside the EU takes place.
  • Vercel Inc.: for hosting the website — every page you request passes through its servers — and, only with your consent, for the traffic and speed measurements in section 9. The company is based in the USA, so the data is transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
  • Certification bodies: for seminars certified by the ERC we enter your participation on the ERC's platform, and for seminars certified by ECSI on ECSI's platform; the details the body needs to issue the certificate are transferred there. For all other seminars your details stay in systems we operate ourselves — the website's admin panel, the participant list and our training platform — and are not transferred to any certification body.

6. How long we keep it

  • Newsletter / interest data: until you ask us to delete your data, or you unsubscribe from the updates.
  • Seminar registration details: we keep them in the website's admin panel for up to 24 months after the seminar — the validity of the certificate, so that we can find you if you return to requalify — and then delete them from there. Any email in which your registration reached us and the class's participant list remain in our records; they are deleted when you ask us to.
  • Double Score form details: in the website's admin panel and in the notification email we receive, for as long as our communication and the organisation's participation in the programme last, and for up to 24 months after our last contact.
  • Kept places: if you do not attend the seminar you paid for, we keep your registration details for 18 months from the date of the original session, so that you can use the place for a later session (see the Terms of Participation). If you use it, the same applies as to any registration; if you do not use it within the 18 months, we delete the details from the admin panel.
  • Online payment details: Stripe keeps them for as long as its own legal obligations require, for example tax obligations or those concerning fraud prevention.
  • Receipt details: the receipt's number, date and MARK code are kept with the payment at Stripe, where the profession you declared for VAT is also kept, for as long as tax law requires. For a payment not made online (by bank transfer or in cash, for example), if the receipt is issued through the website, the same details, with the amount, the payment method and your details as the customer (name, area, postcode and email), are kept for the same period in the website's admin panel. The receipt itself is also kept in AADE's myDATA. In the customer list of the timologio application your details stay until you ask us to delete them.
  • Instructor portal data: for as long as you teach on our seminars; we delete it when you stop, or whenever you ask us to (section 3).
  • Website usage data (Google Analytics): up to 14 months from the visit. After that only aggregate statistics remain, linked to no identifier.
  • Ad measurement data (Google Ads): in Google Ads we see only aggregate figures, such as how many forms were completed from each ad; Google keeps them for as long as the Google Ads terms provide.

7. Your rights

You have the rights of access, rectification, erasure, restriction and data portability, as well as the right to withdraw your consent at any time. For any of these, write to us at info@lifesupporthub.edu.gr.

Where processing rests on our legitimate interest — publishing our team's profiles and the instructor portal's participation figures (section 3), using your area of residence to plan where classes will run and contacting an organisation's contact person about the Double Score programme (section 4) — you also have the right to object (art. 21 GDPR), on grounds relating to your particular situation. If you object, we stop the processing unless we can demonstrate compelling legitimate grounds that override your interests and rights. For this too, write to us at info@lifesupporthub.edu.gr.

If you believe that the processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Minors

Our seminars are for adults only. We do not accept expressions of interest or registrations from minors, or on their behalf. In the Double Score programme, participation is registered by the school, and we collect no pupil data.

9. Cookies

The website uses the cookies strictly necessary for its operation. It also uses analytics tools — Google Analytics, and Vercel's traffic and speed measurements — which are enabled only if you consent through the message shown at the bottom of the screen. If you choose "Decline", none of them are loaded. Google Analytics stores cookies in your browser with a random identifier, kept for up to two years from your last visit; what exactly it records is described in section 2. If you arrived from one of our ads, a cookie with the identifier of the click may also be stored, for up to 90 days. You can change your choice at any time through the "Cookie settings" link at the bottom of every page. If you then choose "Decline", measurement stops, the Google Analytics cookies are deleted from your browser and the page reloads without them. Withdrawing does not affect the lawfulness of the processing that preceded it; what has already been recorded follows the retention period in section 6.

Measuring our ads on Google

Life Support Hub runs ads on Google Search. With your consent, we measure whether a visitor who arrived from one of these ads then completed a form on the website: a seminar registration, the Double Score programme form, an expression of interest in seminars or a newsletter subscription. For this purpose, Google Analytics measurement data is shared with Google Ads (Google Ireland Limited). We do not send your name, email or phone number to Google, nor anything you type into the forms. We do not use this data for personalised advertising or for remarketing. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through "Cookie settings". For the transfer to the USA, what section 5 says about Google Analytics applies.

10. Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss or misuse.

11. Changes

We may update this policy. The current version will always be on this page, with an updated date.

With your consent, we use Google cookies (Google Analytics) and Vercel's measurement tools to understand how the site is used and how fast it loads. We also measure how many of the visitors who arrive from our Google ads submit a form. We do not use any of this for personalised advertising. Read more in our Privacy Policy.