Ten dokument nie jest jeszcze dostępny po polsku. Poniżej znajdziesz wersję angielską.
Privacy Policy
Last updated: 14 October 2026
This policy explains how we collect and use your personal data when you use https://jemshitmavlyanov.com/ (the “Site”) and purchase our online courses.
1. Who is responsible for your data
The data controller is QUICK FLOW SRL:
- Registered office: Bucharest, Sector 2, Șos. Mihai Bravu nr. 39, bl. P15, sc. A, et. 3, ap. 11, Romania
- Trade Register number: J2021006561401
- Tax identification number (CUI): 44089760
- Email: office@jemshitmavlyanov.com
2. What data we collect
- Account data: your email address and, if you provide them, your first name, last name and phone number, as well as your preferred language. We do not use passwords: you log in with a one-time link sent to your email.
- Purchase data: courses purchased, date, price, any promotional code, payment status and the billing details you enter at checkout (name or company name, address, tax ID where applicable). We also keep the date and time you requested immediate access, together with the IP address at the time of the order, as proof of your consent. Card payments are processed by Stripe. We do not see or store your card details.
- Learning data: lessons watched, when they were watched and the screen width of your device, needed to give you access, to issue your certificate and to improve the courses.
- Communication data: messages you send us by email, including withdrawal requests, complaints and conformity claims, which we keep as a record of how they were handled.
- Technical data: a session cookie that keeps you logged in, and basic technical information (such as IP address and browser type) processed by our hosting provider for security.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your Account and giving you access to the courses you buy | Performance of a contract (Art. 6(1)(b)) |
| Processing payments and issuing invoices or receipts | Performance of a contract and legal obligation (Art. 6(1)(b) and (c)) |
| Keeping proof of your consent to immediate access | Legal obligation and our legitimate interest in defending ourselves in a dispute (Art. 6(1)(c) and (f)) |
| Issuing your certificate of completion | Performance of a contract (Art. 6(1)(b)) |
| Answering your questions and providing support | Performance of a contract or our legitimate interest in helping you (Art. 6(1)(b) and (f)) |
| Contacting you by phone about your order or access, if email does not work | Performance of a contract (Art. 6(1)(b)) |
| Emails about our courses, sent to existing clients | Our legitimate interest and Art. 12 of Romanian Law no. 506/2004 (see section 4) |
| Emails about our courses, sent to people who have not purchased | Your consent (Art. 6(1)(a)) |
| Keeping the Site secure and preventing abuse | Our legitimate interest (Art. 6(1)(f)) |
| Complying with accounting, tax and other legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Marketing emails
If you have purchased a course, we may send you occasional emails about our other courses and offers that are similar to what you bought.
If you have created an account but not purchased, we only send such emails if you have agreed to receive them. You can give or withdraw this consent at any time in your Account.
Every marketing email contains an unsubscribe link. You can also object at any time by writing to office@jemshitmavlyanov.com. Unsubscribing does not affect emails strictly related to a course you bought (such as access or order confirmations).
5. Who we share your data with
We do not sell your data. We share it only with providers who help us run the Site, under contracts that require them to protect it:
| Provider | Role | Location |
|---|---|---|
| Stripe | Card payment processing (independent controller for payment data) | EU and USA |
| Cloudflare, Inc. | Website hosting, database and file storage | EU and USA |
| Vimeo, Inc. | Video hosting and playback of the lessons | USA |
| Resend | Sending emails | EU data region, company based in USA |
| SmartBill (Intelligent IT SRL) | Issuing invoices | Romania |
| Our accountant | Bookkeeping and tax obligations | Romania |
We may also disclose data to public authorities when required by law.
6. Transfers outside the European Economic Area
Some of these providers are based in the USA. Where data is transferred outside the EEA, the transfer is based on the EU-US Data Privacy Framework (for certified providers) or on the European Commission’s Standard Contractual Clauses.
7. How long we keep your data
- Account data: while your Account is active, and for up to 3 years after your last course access has expired, unless you ask us to delete it earlier.
- Learning data (lessons watched): 2 years from each view, then deleted automatically. We do not keep your IP address for lesson views.
- Proof of your consent to immediate access (date, time and IP address of the order): for as long as we keep the order, that is for the legal limitation period for claims related to the order and the retention period of the related invoice.
- Error and security logs: 90 days. Login sessions end after at most 30 days and expired sessions and login links are deleted automatically.
- Invoices and accounting records: for the period required by Romanian accounting and tax legislation.
- Marketing preferences: until you unsubscribe. We keep a record of the unsubscribe so we don’t email you again.
- Support emails, complaints and withdrawal requests: up to 3 years after the conversation ends.
8. Your rights
Under Regulation (EU) 2016/679 (GDPR) you have the right to:
- access the data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data, in the cases provided by law;
- restrict the processing of your data;
- data portability, to receive your data in a structured format;
- object to processing based on our legitimate interest, and to object at any time to direct marketing;
- withdraw your consent at any time, where processing is based on consent, without affecting processing done before;
- lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro, where you can also find the complaint form), or with the authority in your EU country of residence.
To exercise your rights, write to office@jemshitmavlyanov.com. We will reply within one month.
9. Cookies and browser storage
The Site uses only cookies that are necessary for it to work:
- a session cookie that keeps you logged in;
- a cookie that remembers the language you chose, set only when you change the language.
Your shopping cart is kept locally in your browser and only reaches us when you check out. We do not use advertising or analytics cookies.
Course videos are played through Vimeo with tracking disabled.
10. Age
The Site is intended for people aged 16 and over. We do not knowingly collect data from children under 16.
11. Changes to this policy
We may update this policy. The current version is always available on the Site, with the date of the last update. If changes are significant, we will let clients know by email.
This policy is available in several languages. In case of any inconsistency between versions, the Romanian version prevails.
12. Contact
QUICK FLOW SRL, office@jemshitmavlyanov.com