Privacy Policy

This policy explains what personal data Yacoda BV ("Yacoda", "we", "us") collects when you use www.yacoda.com, why we collect it, who we share it with, and the rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data-protection law.

Who is responsible for your data

The data controller is Yacoda BV, Glabbeeksestraat 37, 3300 Vissenaken, Belgium (company / VAT number BE 0642.979.742). For any question about this policy or your data, contact us at info@yacoda.com.

What we collect, and why

We only collect what a given interaction needs. Depending on how you use the site, that is:

Browsing the website

Our host records standard technical data (such as your IP address, browser type and the pages you request) to serve the site, keep it secure and diagnose problems. A small set of functional cookies remembers your language, timezone and cookie choice — see Cookies.

Contacting us and requesting a quote

When you use the contact form or the "generate a quote" flow, we collect the details you enter — typically your name, email address, and, for a quote, your company name, VAT number and phone number — so we can answer you and prepare the quotation you asked for.

Placing an order

When you buy a course or other item, we collect your name, billing and company details, VAT number and order history. Card payments are handled by our payment processor (Stripe) — we never see or store your full card number.

Course accounts (eLearning)

If you enrol in a course you get an account. We store your login details, profile and course progress so you can access the material and pick up where you left off. Course videos are delivered through a content-delivery network (Bunny), which receives technical connection data such as your IP address in order to stream the video to you.

Signing in with Google or Facebook

You can create an account or sign in using your Google or Facebook account. If you choose this, the provider confirms your identity to us and shares basic profile information (such as your name and email address). We do not receive your password, and using social sign-in is always optional — you can register with an email address instead.

The forum

If you post on the forum, your posts and the public parts of your profile (such as your display name) are visible to other visitors. Please don't post personal data you would not want to be public.

Newsletters and mailing lists

We operate several mailing lists — for example a general newsletter, a CasADi newsletter, and updates for people who have taken our courses. If you subscribe, we store your email address (and your name, if you provide it) to send you the updates you asked for. We send these on the basis of your consent, and every email contains an unsubscribe link, so you can opt out at any time. Our mailing tool may record whether an email was opened or a link clicked, so we can tell which updates are useful.

Our legal grounds for using your data

We rely on the following legal bases under the GDPR:

• Performance of a contract — to fulfil orders, give you access to courses, and handle a quote you have requested.
• Legitimate interests — to operate and secure the site, respond to your enquiries, run the forum and prevent fraud and abuse.
• Consent — where you choose to sign in with Google or Facebook, and for any optional communications you opt into. You can withdraw consent at any time.
• Legal obligation — to keep invoices and accounting records as required by Belgian law.

Cookies

We use cookies to make the site work and, with your consent, to improve it. When you first visit, a cookie banner lets you accept or decline the optional categories, and you can change your choice at any time. Our cookies fall into these groups:

• Strictly necessary — required for the site to function, so these are always active: session_id (login and cart), frontend_lang (language), tz (timezone) and website_cookies_bar (remembers your cookie choice).
• Preferences — remember choices that make the site nicer to use.
• Analytics / interaction — help us understand how the site is used and which campaign or newsletter link brought you (for example utm_source, utm_medium, utm_campaign).
• Advertising / marketing — used to make any marketing more relevant.

Everything other than strictly-necessary cookies is optional and set only if you consent. Our Cookie Policy is the authoritative, up-to-date source — it lists the current categories and the specific cookies in each — and you can withdraw or change your consent there or through the cookie banner at any time.

Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract and only as needed to run the service:

Odoo S.A. Belgium (EU)

Hosts the website, shop, database and email infrastructure (Odoo.sh) in its Europe Hosting region; the exact storage and backup locations for that region are listed in Odoo's privacy policy.

Google (Google Ireland Ltd) Ireland (EU)

Provides our business email (processing correspondence to and from @yacoda.com) and Google sign-in.

Meta Platforms Ireland Ltd Ireland (EU)

Provides Facebook sign-in, if you choose to use it.

Stripe (Stripe Payments Europe, Ltd) Ireland (EU)

Processes card payments for orders.

Bunny (BunnyWay d.o.o.) Slovenia (EU)

Delivers course videos through its content-delivery network.

We may also disclose data where we are legally required to do so.

International transfers

Our providers are based in the EU/EEA. Some of them (for example Google, Meta and Stripe) belong to international groups and may process data outside the EEA. Where that happens, the transfer is covered by an EU adequacy decision or by the European Commission's Standard Contractual Clauses, so your data keeps an equivalent level of protection.

How long we keep your data

• Account and course data — for as long as your account is active, and a reasonable period afterwards.
• Invoices and accounting records — 7 years, as required by Belgian law.
• Enquiries and quotes — for a limited period (generally up to two years) so we can follow up, then deleted.
• Mailing-list subscriptions — until you unsubscribe.
• Forum posts — until you ask us to remove them or delete your account.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where we relied on it.

To exercise any of these, email info@yacoda.com. You also have the right to lodge a complaint with the Belgian supervisory authority, the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be.

Deleting your data

You can ask us to delete the personal data we hold about you at any time. Email info@yacoda.com from the address linked to your account, with the subject "Data deletion", and tell us which account or data your request concerns. If you have an account, you can also ask us to close it.

When you make a request, we delete your personal data from our systems and instruct our processors to do the same, normally within 30 days. If you signed in with Google or Facebook, this includes the profile information (such as your name and email address) we received from them. We may keep a limited amount of data where the law requires it — in particular invoices and accounting records, which we must retain for 7 years — and delete it once that obligation ends. We will confirm to you once your data has been deleted.

How we protect your data

The site is served over HTTPS and hosted on a reputable managed platform, and we apply appropriate technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to keep your data safe and to respond quickly if something goes wrong.

Children

Our services are intended for professionals and are not directed at children. We do not knowingly collect personal data from children under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of the page, and significant changes will be highlighted where appropriate.

Contact

Questions about your privacy or this policy? Write to info@yacoda.com or Yacoda BV, Glabbeeksestraat 37, 3300 Vissenaken, Belgium.