Privacy Policy
Privacy Policy
Effective Date: 20 September 2026
Last Updated: 20 September 2026
1. Introduction and Data Controller
This Privacy Policy explains how CERTIFICATES IN AI Sp. z o.o. (“CEAI”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects personal data when individuals visit our website, create an account, purchase or enrol in a learning programme, use our learning platform, complete an assessment, receive or verify a CEAI certificate, contact our support team, or otherwise use our services.
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), applicable Polish data protection laws, and other mandatory legal requirements that apply to the services concerned.
For the purposes of the GDPR, the data controller is:
CERTIFICATES IN AI Sp. z o.o.
ul. Święty Marcin 29/8
61-806 Poznań, Poland
KRS: 0001249929
NIP: 7831956791
REGON: 545078313
Website: https://cerai.eu
Email: support@cerai.eu
Questions about this Privacy Policy, requests concerning personal data, and the exercise of data protection rights may be submitted to support@cerai.eu.
This Privacy Policy applies to the CEAI website, the learning environment operated through WordPress and Tutor LMS, CEAI accounts, online programmes, assessments, certificate issuance and verification, customer support, and related digital services controlled by CEAI.
Where a third party processes personal data independently under its own purposes and terms, that third party may act as a separate data controller. Its own privacy notice will apply to that processing.
2. Personal Data We Collect
Depending on how you interact with CEAI, we may collect:
Identity and Contact Data
Your name, email address, country, billing details, and organization or professional information where applicable.
Account and Learning Data
Your account details, programme enrolment, learning needs, course progress, completed activities, assessment results, feedback, and support history.
Certification Data
Your examination attempts and results, certification status, certificate number or Credential ID, issue date, validity information, and records needed to verify your certificate.
The IAIDL final examination does not require camera monitoring. CEAI does not collect camera recordings or facial images for this examination.
Payment Data
Order, billing, payment-status, invoice, refund, and transaction information. Payments are processed securely by Stripe. CEAI does not store complete payment-card details.
Technical and Communication Data
Your IP address, browser and device information, login and security records, cookie preferences, website usage, support requests, complaints, appeals, emails, and other communications with CEAI.
Children’s Data
Registration for programmes designed for children must be completed by a parent, legal guardian, school, or participating institution. CEAI collects only the information necessary to manage participation, learning, communication, accessibility, safeguarding, and legal requirements.
3. How and Why We Process Personal Data
CEAI collects personal data directly from you when you create an account, enrol in a programme, make a purchase, complete an assessment, request support, submit feedback, or communicate with us.
We may also receive limited data from a parent, legal guardian, participating institution, organizational client, Stripe, or the technologies used to operate our website and learning platform.
We process personal data only when we have a valid legal basis:
- Contract: To create accounts, provide programmes, process payments, administer assessments, issue certificates, and provide support.
- Legal obligation: To maintain accounting, tax, consumer-protection, and compliance records.
- Legitimate interests: To secure and improve our services, prevent misuse, respond to inquiries, maintain certificate-verification records, and manage service quality.
- Consent: To send optional marketing communications, use non-essential cookies, or process voluntarily provided information where consent is required.
Where processing is based on consent, you may withdraw your consent at any time without affecting processing completed before the withdrawal.
4. Sharing and International Transfer of Personal Data
CEAI may share personal data only where necessary with:
- Stripe for payment processing.
- Website hosting, IT, security, and backup providers.
- WordPress, Tutor LMS, and related technical service providers.
- Email and communication service providers.
- Analytics providers where consent has been obtained.
- Accountants, legal advisers, auditors, and certification bodies.
- Public authorities where disclosure is legally required.
- Schools, institutions, or organizational clients where the service is delivered through them and the sharing arrangement has been communicated.
CEAI does not sell personal data.
Some service providers may process data outside the European Economic Area. Where required, CEAI uses appropriate safeguards, such as an adequacy decision or European Commission Standard Contractual Clauses, to protect transferred data.
5. Data Retention and Security
CEAI retains personal data only for as long as necessary for the purpose for which it was collected and to meet applicable legal, contractual, accounting, certification, and quality-management requirements.
Retention periods depend on the type of record:
- Account and learning records are retained while the account or programme relationship remains active and for a reasonable period afterwards.
- Financial and transaction records are retained for the period required by Polish tax and accounting laws.
- Assessment and certification records may be retained for as long as necessary to verify the authenticity and status of an issued certificate.
- Support, complaint, and appeal records are retained until the matter is resolved and for any necessary follow-up period.
- Marketing data is retained until consent is withdrawn or the individual unsubscribes.
When data is no longer required, it is securely deleted or anonymized.
CEAI uses appropriate technical and organizational measures to protect personal data, including encrypted connections, access controls, authentication, backups, security monitoring, software updates, and restricted staff access.
No online system can be guaranteed to be completely secure. If a personal data breach occurs, CEAI will investigate it and notify the competent authority and affected individuals where required by law.
6. Your Data Protection Rights
Under the GDPR, you may have the right to:
- Access the personal data CEAI holds about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data where legally permitted.
- Restrict or object to certain processing.
- Receive eligible data in a portable format.
- Withdraw consent at any time.
- Object to direct marketing.
- Lodge a complaint with a data protection authority.
Requests may be submitted to support@cerai.eu. CEAI may request information necessary to verify the requester’s identity and will normally respond within one month, subject to any extension permitted by law.
You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych – UODO) or with the competent supervisory authority in your country of residence.
7. Cookies and Analytics
CEAI uses essential cookies to operate the website, maintain user sessions, support account login, process purchases, and protect platform security.
With the user’s consent, CEAI may also use analytics cookies and tools, including Google services, to understand website usage and improve performance and user experience.
Non-essential cookies should not be activated before consent is obtained. Users can accept, reject, or change their cookie preferences through the cookie-consent tool available on the website.
Further details about the cookies used, their providers, purposes, and duration are provided in CEAI’s Cookie Policy.
8. Marketing Communications
CEAI sends marketing communications only where legally permitted or where valid consent has been provided.
You may unsubscribe at any time by using the link included in the communication or by contacting support@cerai.eu. Withdrawal from marketing does not affect essential communications relating to an account, purchase, programme, assessment, or certificate.
9. Automated Decision-Making
CEAI does not use personal data to make decisions that produce legal or similarly significant effects based solely on automated processing.
Assessment results may be calculated automatically, but applicable reviews, appeals, suspected misconduct, and exceptional cases can be examined by an authorized person.
10. Privacy and Quality Management
CEAI considers the appropriate protection and handling of personal data as part of the responsible management of its learning and professional development services. Personal data processed in connection with enrolment, learning activities, assessments, certification, feedback, complaints, and service administration is handled in accordance with CEAI’s applicable policies, procedures, and legal requirements.
Where personal data is used in connection with the evaluation or improvement of learning services, CEAI applies appropriate safeguards and limits access to authorized persons.
11. Third-Party Websites
The CEAI website may contain links to external websites or services. CEAI is not responsible for the content, security, or privacy practices of those third parties. Users should review the relevant third party’s privacy information before providing personal data.
12. Updates and Contact
CEAI may update this Privacy Policy when its services, technologies, legal obligations, or data-processing activities change. The current version and its “Last Updated” date will be published on this page.
Questions, requests, or complaints concerning personal data may be sent to:
CERTIFICATES IN AI Sp. z o.o.
ul. Święty Marcin 29/8
61-806 Poznań, Poland
KRS: 0001249929
NIP: 7831956791
REGON: 545078313
Email: support@cerai.eu
Website: https://cerai.eu
