Privacy Policy Overview

Definitions

This section defines the main terms used in the policy so you can understand how we refer to data, users, services and processing activities described below.

Personal data: any information that identifies or can reasonably identify a natural person, such as name, email, phone number, job title, employer, payment identifiers, and identifiable training activity or support interactions.

Processing: any operation performed on personal data, whether automated or not, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, or erasure.

User: an individual who registers for or uses the BotLabAkad platform, including individual learners, instructors, and employees of corporate customers who access course material or platform services.

Service: the BotLabAkad learning platform and associated offerings, including self-paced courses, live workshops, lab environments, corporate training portals, billing, support, and analytics used to operate and improve the platform.

Cookies: small text files and similar technologies placed on your device to recognize it and store information about preferences, authentication, analytics and settings related to your interaction with BotLabAkad.pro.

Why We Use Your Data

Data is used to deliver the service, manage accounts, improve course content via real-world cases, and meet legal and contractual obligations. Use cases are practical and grounded in improving learning outcomes for professionals.

• To register accounts, deliver courses, manage enrolments and provide access to labs and learning materials.
• To process payments, issue invoices and manage subscription or corporate billing.
• To personalize course recommendations and adapt practical scenarios to user roles and industries.
• To contribute and prevent fraud, misuse or security incidents that could affect platform integrity.
• To comply with legal obligations, respond to lawful requests and meet contractual requirements with corporate customers.
• To conduct research and course effectiveness analysis using aggregated or pseudonymized data drawn from real case studies.
• To communicate course updates, support messages and administrative notices relevant to your enrolment.
• To provide optional marketing communications where you have given consent and to manage those preferences.

Legal Bases for Processing

Where applicable under data protection law, we rely on several legal bases to process personal data. Applicable bases depend on the type of data and the processing purpose.

• Consent: when you opt into newsletters, marketing or optional data uses.
• Contract performance: to fulfil our obligations under subscription, course purchase or corporate training agreements.
• Legal obligation: to meet regulatory, tax or accounting requirements applicable in Switzerland or other jurisdictions.
• Legitimate interests: to operate and improve the platform, protect systems from abuse, and conduct case-driven product development, balanced against individual rights.

Your GDPR Rights

If GDPR applies to you, you have a set of rights regarding your personal data. We describe these rights and how to exercise them below. We will take reasonable steps to verify identity before acting on a request.

• Right of access — you can request a copy of personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete information.
• Right to erasure — you may request deletion of personal data where legal grounds allow.
• Right to restrict processing — you may request limitation of processing in specific circumstances.
• Right to data portability — where applicable, you can request a machine-readable copy of data you provided.
• Right to object — you may object to processing based on legitimate interests or direct marketing.

Cookies and Similar Technologies

We use cookies and comparable technologies for functionality, analytics and optional personalization. Cookies help enable lab sessions, remember preferences and measure content effectiveness in real scenarios.

Types include session cookies (temporary), persistent cookies (retain preferences), functional cookies (essential features), analytics cookies (performance measurement) and marketing cookies (with consent).

Categories used: necessary (required for core platform functions), preferences (store user settings), analytics (usage measurement and course performance) and marketing (optional advertising and outreach with consent).

You can manage cookie preferences through the cookie banner on BotLabAkad.pro, via your browser settings, or by contacting support for help adjusting cookie and tracking settings.

View our full Cookie Policy at https://BotLabAkad.pro/cookie-policy

Sharing Your Data

We share personal data only as necessary to operate the service, support corporate integrations, and comply with law. Sharing is limited and controlled with contractual safeguards where appropriate.

• Learning platform vendors and lab environment providers who host course content and execution sandboxes.
• Payment processors and business services used to handle transactions and invoicing.
• Analytics and hosting providers who process usage data under strict contracts.
• Corporate customers when users are enrolled under a company account and where the employer administers access and reporting.
• Legal authorities and regulators when required by law or to respond to lawful requests.
• Third parties in connection with business transfers, mergers, or asset sales with appropriate data protection measures.

International Data Transfers

Services and providers we use may process data outside Switzerland. When transfers occur we apply contractual and technical safeguards consistent with applicable law to maintain an adequate level of protection for your personal data.

Safeguards may include standard contractual clauses, vendor assessments, encryption, access restrictions and minimization of transferred data. Details are available on request for specific transfers.

Data Retention

We retain personal data as needed to provide services, meet contractual and legal obligations, support training histories and maintain audit records. Retention periods are aligned with business needs and legal requirements.

Account data is retained while your account is active and for a period following deactivation necessary for billing, tax or dispute resolution — generally up to 5 years unless a different legal requirement applies.

Support correspondences and direct messages are retained according to operational needs, typically up to 2 years, except where shorter or longer retention is required by law or corporate agreement.

System logs and diagnostic records are retained for security and troubleshooting. Retention for logs is generally up to 12 months, with aggregated metrics stored longer for product improvement.

When deletion requests are processed we remove personal identifiers from active systems. Backup copies may persist for a limited period and are subject to secure deletion schedules; anonymized data may be retained for analytics.

Security Measures

We implement industry-standard technical and organizational measures to protect personal data, including encryption, access controls, regular security testing and staff training. Measures are chosen to reduce risk in practical operational contexts.

• Encryption in transit (TLS) and at rest for sensitive data stored in our services.
• Role-based access control, audit logging and periodic access reviews for personnel and service accounts.
• Regular vulnerability assessments, penetration testing and staff security awareness training focused on protecting user data in live lab and corporate scenarios.

User Rights

You have rights to access and manage your personal data. We describe common rights below and the steps to exercise them. Requests are handled in line with legal requirements and after identity verification when appropriate.

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request removal of personal data where legal grounds permit.
• Portability: request a machine-readable copy of data you provided to us.
• Restriction: request restriction of processing in limited circumstances.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: withdraw consent where processing is based on consent, without affecting processing before withdrawal.
• Lodge a complaint: file a complaint with a supervisory authority if you consider your rights were not respected.

How to Request Your Rights

To exercise your rights, visit https://BotLabAkad.pro/contact or send a written request to BotLabAkad, Wöschnauerstrasse 30, 5012 Schönenwerd, Switzerland. For urgent matters you may call +41766643411. Include sufficient information to verify your identity and the nature of the request. We aim to respond to valid requests within 30 days, subject to applicable legal exceptions.

[email protected]

We aim to respond to privacy rights requests within 30 calendar days of receipt. In complex cases we may extend this period by up to an additional 30 days and will notify you of the reason and the estimated response time. Requests should include sufficient information to identify you and the records you are requesting.