Privacy notice — SMILE Learning Platform

Who is responsible

This learning platform is run for the SMILE project partnership by Smart Leap Education Research Consultancy GmbH, Vogelsanger Weg 91, 40470 Düsseldorf, Germany (controller under the GDPR).
For any question about your data, write to [email protected].

Account data: your name, username, email address and an encrypted password.
Learning data: lessons you completed, results of activities and knowledge checks, points, badges, notes and the answers you write in reflection activities.
Certificates: your name as you confirm it, the module, the date and a verification code.
Optional profile data that you can leave empty: gender, age group, country and whether you are a young migrant, a youth worker or an employer.
Messages you send us through the contact form or a help request.

To give you the training you signed up for, save your progress and issue certificates (Art. 6(1)(b) GDPR).
To report to the Erasmus+ programme with anonymous, aggregated statistics, for example how many people completed a module (Art. 6(1)(f) GDPR, legitimate interest of the project). No report contains your name.
Optional profile data and taking part in the leaderboard are based on your consent (Art. 6(1)(a) GDPR). You can change or delete them in your profile at any time.
To keep the platform secure, for example by limiting failed login attempts (Art. 6(1)(f) GDPR).

Anyone who has the code of your certificate can check online that it is valid. The check shows your name, the module and the date. Without the code the certificate cannot be found.

We use only the cookies the platform needs to work: your login session, your language and security checks. We do not use advertising or tracking cookies.
To understand how the platform is used, we count page visits without cookies. Your IP address is not stored: it is turned into a code that changes every day. We keep these visit records for 90 days and after that only daily totals (for example, visits per country and device).

The platform is hosted on servers in the European Union by a technical service provider that works on our instructions.
Pages are delivered through Cloudflare, a security and delivery network. It processes technical connection data, such as your IP address, to protect the platform from attacks.
Project partners and the National Agency receive only anonymous totals. We do not sell your data.

Your account and learning data stay as long as your account exists. When you ask us to delete your account, we delete your personal data. Anonymous totals remain.
Certificate records are kept so that they can still be verified, unless you ask us to revoke them.

You can ask for a copy of your data, correct it, delete it, limit its use, take it with you or object to its use. If we rely on your consent, you can withdraw it at any time.
You can also complain to a data protection authority, for example in the country where you live.