Privacy Policy

1. Who we are

This policy describes how Life Support Hub collects and processes your personal data.

Data controller:
Life Support Hub, Civil Non-Profit Company (AMKE)
Kyvelis 62, Alimos 174 56, Greece
G.E.MI.: 179428401000
Email: info@lifesupporthub.edu.gr
Phone: +30 6978127131

2. What data we collect

Depending on what you do on our website, or how you register for a seminar:

• Newsletter subscription / expression of interest: your email address, and (in the expression of interest) the seminars you are interested in.
• Seminar registration through the website: full name, email, contact phone number, area of residence and postcode. For seminars certified by an external body, the name is requested in Latin characters, as it will appear on the certificate; for seminars with Life Support Hub's own certificate of attendance, as it appears on your ID. For seminars certified by the ERC or by ECSI we also ask for your date of birth, which the body requires to issue the certificate; for the other seminars we do not ask for it. We use the area and postcode to plan where to run the next classes: we travel all over Greece, and this tells us where people are asking from.
• Registration made directly with us, by phone or by email: full name and at least one contact detail — phone number or email, whichever you give us — and any notes of ours about your registration. For seminars certified by the ERC or by ECSI we also ask for your date of birth, for the same reason. In this case we do not ask for area of residence or postcode. We enter these details ourselves in the website's admin panel, alongside the registrations that come in through the website.
• Use of the website (only with your consent, see section 9): which pages you visit, which site or search engine brought you to us, the type of your device and browser, and your approximate location (city level). We also record whether you clicked our phone number or email address, which links to other websites you followed, and whether you scrolled to the end of a page. On the forms we record whether the submission went through; on the seminar registration also which seminar you registered for, which page brought you to the form, at which field the submission stopped when you pressed "Submit registration", why the registration was not accepted, and whether you joined the waiting list — but never what you type into the fields. These details are linked to a random identifier in a cookie in your browser, not to your name.

3. Instructor and external contributor profiles

On profile pages ("/sxetika/<key>") and on articles, for anyone who teaches or writes for us, we publish: full name, photograph, professional role, certifications and the body that issues them, a short biography, and links to professional profiles on other sites (e.g. LinkedIn) where they have given them to us.

For members of our instructor team, publishing their name, photograph and certifications rests on our legitimate interest (Article 6(1)(f) GDPR) in showing who teaches and with what qualifications — not on consent: the consent of someone who works for us or teaches on our seminars is not considered freely given within the meaning of the Regulation, so it could not support the publication. Team members may object to publication (the right to object, art. 21 GDPR — see section 7). That legitimate interest ends when someone stops teaching on our seminars, and we then remove their profile from the site. Their name stays on the articles they wrote while on the team.

For external contributors who write articles for us without working for us or teaching on our seminars, publication rests on their explicit consent, which we record before publishing anything. They can withdraw it at any time by writing to us at info@lifesupporthub.edu.gr. Once they do, we remove their profile page and their card from the "About" page, and their name stops appearing on the articles they wrote — the articles themselves stay published, with no attribution to the person who wrote them. If an external contributor starts teaching on our seminars, publication of their profile rests from then on on our legitimate interest, as it does for every team member, and no longer on their consent. We tell them before the change is made. Conversely, if a team member stops teaching but continues to write articles for us, we ask for their explicit consent, as we do from every external contributor.

For questions about your profile, or to ask for a correction or removal, to object to publication or to withdraw your consent, write to us at info@lifesupporthub.edu.gr.

4. Why we process it and on what legal basis

• To send you updates about seminars and related material, when you have given your consent (Article 6(1)(a) GDPR). You can withdraw it at any time.
• To handle your participation in a seminar and to issue your certificate or certificate of attendance, in the context of our contract with you (Article 6(1)(b) GDPR).
• To plan where to run classes, based on where those who register through the website live — our legitimate interest (Article 6(1)(f) GDPR).
• To understand how the website is used and at which point of the seminar registration visitors get stuck, so that we can improve it, when you have given your consent in the cookie message (Article 6(1)(a) GDPR). You can withdraw it at any time (see section 9).

5. Who it is shared with

We do not sell your data. We share it only with providers who help us operate:

• Mailchimp (Intuit Inc.): for sending emails. The company is based in the USA, so the data is transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
• Resend (Plus Five Five, Inc.): for the emails of a registration made through the website — the notification to us and the confirmation to you. The company is based in the USA, so your registration details are transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses). For registrations made directly with us, by phone or by email, no such email is sent and your details are not transferred to Resend.
• Google (Firebase): for hosting website data. Registration details are stored in Google data centres in the EU. The company is based in the USA; for any access from outside the EU, the same safeguards apply.
• Google Analytics (Google Ireland Limited): for measuring traffic and the use of the website (section 2), only if you have given your consent. This data is also transferred to the USA, where Google LLC processes it, based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
• Contabo GmbH: for hosting our training platform, on one of the company's servers in Germany. Your platform account, for the seminars with online theory preparation, is kept there. The company is based in Germany, so the data stays within the EU and no transfer outside the EU takes place.
• Vercel Inc.: for hosting the website — every page you request passes through its servers — and, only with your consent, for the traffic and speed measurements in section 9. The company is based in the USA, so the data is transferred outside the EU based on approved safeguards (the EU-US Data Privacy Framework and standard contractual clauses).
• Certification bodies: for seminars certified by the ERC we enter your participation on the ERC's platform, and for seminars certified by ECSI on ECSI's platform; the details the body needs to issue the certificate are transferred there. For all other seminars your details stay in systems we operate ourselves — the website's admin panel, the participant list and our training platform — and are not transferred to any certification body.

6. How long we keep it

• Newsletter / interest data: until you ask us to delete your data, or you unsubscribe from the updates.
• Seminar registration details: we keep them in the website's admin panel for up to 24 months after the seminar — the validity of the certificate, so that we can find you if you return to requalify — and then delete them from there. Any email in which your registration reached us and the class's participant list remain in our records; they are deleted when you ask us to.
• Website usage data (Google Analytics): up to 14 months from the visit. After that only aggregate statistics remain, linked to no identifier.

7. Your rights

You have the rights of access, rectification, erasure, restriction and data portability, as well as the right to withdraw your consent at any time. For any of these, write to us at info@lifesupporthub.edu.gr.

Where processing rests on our legitimate interest — publishing our team's profiles (section 3) and using your area of residence to plan where classes will run (section 4) — you also have the right to object (art. 21 GDPR), on grounds relating to your particular situation. If you object, we stop the processing unless we can demonstrate compelling legitimate grounds that override your interests and rights. For this too, write to us at info@lifesupporthub.edu.gr.

If you believe that the processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Minors

Our seminars are for adults only. We do not accept expressions of interest or registrations from minors, or on their behalf. In the Double Score programme, participation is registered by the school, and we collect no pupil data.

9. Cookies

The website uses the cookies strictly necessary for its operation. It also uses analytics tools — Google Analytics, and Vercel's traffic and speed measurements — which are enabled only if you consent through the message shown at the bottom of the screen. If you choose "Decline", none of them are loaded. Google Analytics stores cookies in your browser with a random identifier, kept for up to two years from your last visit; what exactly it records is described in section 2. You can change your choice at any time by clearing your browser's site data. Withdrawing does not affect the lawfulness of the processing that preceded it; what has already been recorded follows the retention period in section 6.

10. Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss or misuse.

11. Changes

We may update this policy. The current version will always be on this page, with an updated date.