Privacy Policy

Data we collect

We process the personal data you provide when you apply, enrol, or use our platform, as well as data generated through your use of our services.

• Contact details — name, email address, phone number.
• Identity and verification — student number and profile photo.
• Enrolment and academic records — courses, progress, and certificates.
• Technical data — IP address, device, and usage logs.

Why we process it

We use your data to manage your enrolment and studies, issue certificates, operate the student platform, communicate with you, and meet our legal and regulatory obligations as a licensed education provider in Finland.

• To provide and administer your training and certification.
• To run the job portal, internship placements, and mentor bookings.
• To send announcements and notifications you have opted into.
• To maintain security, prevent fraud, and comply with audits.

Legal basis

Where required, we rely on your consent, the performance of our enrolment contract with you, our legitimate interests as an academy, and compliance with legal obligations under EU and Finnish law.

Sharing your data

We share data only where necessary: with internship partner restaurants you apply to, our accreditation authorities, and trusted service providers who process data on our behalf under strict agreements. We never sell your personal data.

International transfers

Some tools we use may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data retention

We keep your data for as long as your enrolment is active and for the period required by Finnish education and tax law thereafter, after which it is deleted or anonymised.

Your rights

Under the GDPR you may access, correct, delete, or restrict the use of your data, object to processing, and request data portability. You can withdraw consent at any time. To exercise these rights, contact us at study@europeanchefacademy.com.

Security

We apply appropriate technical and organisational measures — access controls, encryption in transit, and regular review — to protect your data against unauthorised access, loss, or misuse.