Privacy Policy
Last Updated: September 2025
Our Commitment to Privacy
Sigma Academy is committed to protecting the privacy and security of personal data entrusted to us by students, prospective students, and website visitors. This privacy policy explains how we collect, use, protect, and share personal information in accordance with the General Data Protection Regulation (GDPR) and Finnish data protection legislation.
We recognize that statistical training involves handling sensitive educational and professional information, and we maintain rigorous safeguards to protect your data throughout your relationship with our institution.
Data Controller Information
Organization: Sigma Academy
Address: Kaisaniemenkatu 13, 00100 Helsinki, Finland
Email: privacy@domain.com
Phone: +358 9 5831 7426
Information We Collect
Contact Information
- Full name and preferred name
- Email address for communication
- Phone number when provided
- Mailing address for enrolled students
- Emergency contact details for program participants
Educational Information
- Academic background and prior statistical training
- Professional experience relevant to course selection
- Program enrollment and completion records
- Assignment submissions and assessment results
- Participation in discussion forums and collaborative projects
Technical Data
- IP address and geographic location
- Browser type and operating system
- Pages visited and time spent on website
- Referral source and navigation patterns
- Device identifiers for authentication purposes
Payment Information
- Billing address and payment method details
- Transaction records for enrolled programs
- Financial assistance applications when submitted
Note: Payment card details are processed securely by third-party payment processors and are not stored on our servers.
How We Use Your Information
Program Delivery and Administration
- Processing course enrollments and managing student records
- Providing access to course materials and learning platforms
- Facilitating instructor feedback and academic assessment
- Coordinating research collaboration opportunities
- Issuing certificates and maintaining completion records
Legal Basis: Contract performance and legitimate educational interests
Communication
- Responding to inquiries about programs and services
- Sending course updates and schedule notifications
- Sharing educational resources and methodology updates
- Notifying you of relevant professional development opportunities
Legal Basis: Legitimate interest in maintaining student relationships and contract performance
Marketing Communications (Optional)
- Information about new programs and course offerings
- Invitations to statistical methodology seminars
- Updates about professional network events
Legal Basis: Consent (you may opt out at any time)
Website Improvement and Analytics
- Understanding how visitors navigate our website
- Identifying popular content and areas for improvement
- Optimizing website performance and user experience
- Analyzing enrollment patterns to improve programs
Legal Basis: Legitimate interest in improving services
Legal Compliance
- Maintaining records for tax and accounting purposes
- Complying with educational reporting requirements
- Responding to legal requests and regulatory inquiries
Legal Basis: Legal obligation
Data Sharing and Disclosure
We do not sell personal information to third parties. We share data only in the following circumstances:
Service Providers
We engage trusted third-party service providers for website hosting, email delivery, payment processing, and analytics. These providers access personal data only as necessary to perform their functions and are contractually obligated to maintain confidentiality and security.
Research Collaborations
Certification program participants may collaborate with Finnish university researchers. In these cases, we share only the information necessary for the specific research project, and collaborating institutions maintain their own data protection obligations.
Legal Requirements
We may disclose personal information when required by law, court order, or regulatory request, or when necessary to protect our rights, property, or the safety of our students and staff.
Business Transfers
In the event of a merger, acquisition, or sale of assets, student records would be transferred to the successor organization, which would remain bound by this privacy policy unless you consent to changes.
Data Security Measures
We implement comprehensive security measures to protect personal data:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest on secure servers
- Access controls limiting data access to authorized personnel only
- Regular security audits and vulnerability assessments
- Employee training on data protection and confidentiality
- Secure backup procedures with encrypted storage
- Incident response procedures for potential data breaches
In the event of a data breach that poses risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.
Data Retention
We retain personal information for the following periods:
Inquiry Records: 3 years from last contact for prospective students who do not enroll
Student Records: 7 years after program completion for enrolled students, including transcripts and certificates
Financial Records: 10 years as required by Finnish accounting regulations
Marketing Consent: Until consent is withdrawn or after 3 years of inactivity
Website Analytics: 26 months from collection
After retention periods expire, we securely delete or anonymize personal data. Some records may be retained longer when required by law or for legitimate archival purposes.
Your Privacy Rights
Under GDPR and Finnish data protection law, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you, including information about how we use it and with whom we share it.
Right to Rectification
Request correction of inaccurate or incomplete personal information in our records.
Right to Erasure
Request deletion of your personal data when it is no longer necessary for the purposes collected or when you withdraw consent for processing based on consent.
Right to Data Portability
Receive your personal data in a structured, commonly used format and transmit it to another organization.
Right to Restrict Processing
Request limitation of how we use your personal data in certain circumstances, such as while we verify its accuracy.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Right to Withdraw Consent
Withdraw consent for data processing based on consent at any time without affecting the lawfulness of processing before withdrawal.
Exercising Your Rights
To exercise any of these rights, contact us at privacy@domain.com or write to our postal address.
We will respond to your request within one month, though complex requests may take up to three months. We may request additional information to verify your identity before processing requests.
International Data Transfers
Our primary data processing occurs within the European Economic Area (EEA). When we use service providers located outside the EEA, we ensure adequate protection through:
- European Commission adequacy decisions recognizing equivalent data protection
- Standard Contractual Clauses approved by the European Commission
- Service providers' participation in recognized privacy frameworks
Children's Privacy
Our programs are designed for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from a minor without appropriate consent, we will delete it promptly.
Changes to This Policy
We review this privacy policy annually and update it to reflect changes in our practices or legal requirements. Material changes will be communicated through:
- Email notification to enrolled students and recent contacts
- Prominent notice on our website for at least 30 days
- Updated "Last Modified" date at the top of this policy
Continued use of our services after notification constitutes acceptance of the updated policy.
Complaints and Supervisory Authority
If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman
P.O. Box 800, FI-00531 Helsinki, Finland
Email: tietosuoja@om.fi
Phone: +358 29 566 6700
Contact Information
For questions about this privacy policy or to exercise your rights:
Privacy Contact:
Email: privacy@domain.com
Phone: +358 9 5831 7426
Address: Sigma Academy, Kaisaniemenkatu 13, 00100 Helsinki, Finland