Legal

GDPR & Data Protection

Last updated 19 July 2026

European Chef Academy operates as a licensed education provider based in Helsinki, Finland, and is subject to the EU General Data Protection Regulation (Regulation 2016/679) and the Finnish Data Protection Act.

Controller and contact

European Chef Academy is the data controller for the personal data we process through this platform. For data protection enquiries, contact us at study@europeanchefacademy.com.

What the GDPR gives you

The GDPR grants you a set of enforceable rights over your personal data. We honour each of these within the platform and our records.

  • Right to be informed about how your data is used.
  • Right of access to the data we hold about you.
  • Right to rectification of inaccurate data.
  • Right to erasure ('right to be forgotten') where applicable.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time.

How to exercise your rights

You can update your name, phone, and bio directly in Settings. For access, correction, or deletion requests, email study@europeanchefacademy.com with your student number. We respond within one month, as required by the GDPR.

Lawful basis

We process your data under the lawful bases set out in Article 6 of the GDPR — consent, contract, legal obligation, and legitimate interests — and only where a valid basis applies.

Special categories

We do not knowingly process special-category data (such as health or racial origin) except where strictly necessary for enrolment or accommodation and only with your explicit consent.

Data protection officer

If the academy appoints a Data Protection Officer, their contact details will be published here. In the meantime, data protection queries are handled by the academy administration.

Supervisory authority

If you are not satisfied with our response, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu) at tietosuoja.fi.

International transfers

Any transfer of personal data outside the EU/EEA is made only with appropriate safeguards under Chapter V of the GDPR, including Standard Contractual Clauses.

Questions about this policy? Contact us at study@europeanchefacademy.com