Privacy Policy

Last Updated: 10 August 2026


This Privacy Policy is an integral and inseparable part of our Terms of Use.

In this Privacy Policy, all terms that are defined in the Terms of Use shall have the meaning as defined in the Terms of Use.

This Privacy Policy outlines how we collect, process, handle, and share personal data in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; henceforth: GDPR).

By using the Website, the School, the social media pages of the Company or any Content, you acknowledge that you have read, understood and absolutely, explicitly, expressly, unconditionally and irrevocably agree to this Privacy Policy.


1. Data Controller & Processing Information

According to Article 4(7) of the GDPR, the ‘data controller’ is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

We act as data controller in the sense of this Article 4(7) of the GDPR regarding certain personal data collected through the Website, the School, our social media pages or otherwise (for example, if you send an e-mail to us which contains personal data). We are a limited liability company (“korlátolt felelősségű társaság”) organized under Hungarian law. Our legal name, registered address, company register number, tax number and e-mail address are the following:

·       Company name: LAKOS LEARNING Korlátolt Felelősségű Társaság

·       Registered seat: Bem József utca 9. Fsz. 10, 1027 Budapest, Hungary

·       Company register number: 01-09-458411

·       Tax number: 33086701-1-41

·       Contact Email: lakoslearning@protonmail.ch

The Website, the School and part of the Content is hosted on the Teachable online platform (henceforth: “Teachable Platform”), which is provided by Teachable, Inc., a Delaware, USA corporation (address: Convene, 9th Floor, WorkSuite #807, 530 Fifth Avenue, New York, NY 10036, United States of America; website: https://www.teachable.com/; henceforth: Teachable). Personal data that you provide or is otherwise collected on the Teachable Platform is collected by Teachable, and Teachable shares certain information with us to allow us to supply our services to you. Teachable and the Company each act as independent data controllers, as defined in the data processing agreement between Teachable and the Company, and under applicable law, regarding your data collected by Teachable that is accessed by or transferred to the Company. For further information regarding the handling of personal data by Teachable, please carefully review the following documents:

Teachable’s term of use can be accessed on the following website: https://www.teachable.com/legal/terms-of-use

Teachable’s privacy policy can be accessed on the following website: https://www.teachable.com/legal/privacy-policy

Teachable’s cookies policy can be accessed on the following website:

https://www.teachable.com/legal/cookies-policy

The data processing agreement between Teachable and the Company can be accessed on the following website:

https://www.teachable.com/legal/dpa

In addition, the social media pages of the Company are hosted on various social media platforms, including, but not limited to, Facebook, Instagram and LinkedIn. The Company as page administrator and the operator of the corresponding platform (and/or its affiliates) are joint controllers with respect to certain personal data of visitors of these social media pages, also including, but not limited to, personal data used to generate page statistics and other analytics, such as Page Insights on Facebook, 'insights' on Instagram, and LinkedIn Page analytics on LinkedIn.

With respect to Facebook and Instagram, the joint data controller is Meta Platforms, Inc. (address: 1 Meta Way, Menlo Park, CA 94025, United States of America; website: https://www.meta.com/) and/or its affiliates, including but not limited to, Meta Platforms Ireland Limited (address: Block J, Serpentine Avenue, Dublin 4, Ireland) (henceforth collectively: Meta).

For further information regarding the handling of personal data by Meta, please carefully review the following documents:

https://www.facebook.com/privacy/policy/

https://www.facebook.com/legal/terms/dataprocessing

https://www.facebook.com/legal/controller_addendum

https://privacycenter.instagram.com/policy/

With respect to LinkedIn, the joint data controller is LinkedIn Corporation (address: 1000 W Maude Avenue, Sunnyvale, CA, United States of America; website: https://www.linkedin.com/) and/or its affiliates, including but not limited to, LinkedIn Ireland Unlimited Company (address: Wilton Place, Dublin 2, Ireland) (henceforth collectively: LinkedIn).

For further information regarding the handling of personal data by LinkedIn, please carefully review the following documents:

https://www.linkedin.com/legal/privacy-policy

https://www.linkedin.com/legal/l/page-joint-controller-addendum

 

2. Types of Data Collected & Purpose

We process personal data only when we have a valid legal basis under Article 6 of the GDPR. We collect the following personal data:

  • Identity, Contact Data, Billing Data, Purchase Data and Payment Data: Name, email address, address and other billing information, purchases, payment information.
  • Purpose: To provide our services to you, manage accounts, and communicate with you regarding the services rendered to you (Article 6(1)(b) - necessity for the performance of a contract), to comply with our tax, accounting, recordkeeping and other legal obligations (Article 6(1)(c) - compliance with legal obligations), and to defend or enforce our legal rights (Article 6(1)(f) - legitimate interests). If you consent to receive marketing emails from us, we also process your name and email address for direct marketing purposes (Article 6(1)(a) - consent).
  • Your Interaction With Our Content in the School: Enrollments, progress.
  • Purpose: To provide our services to you (Article 6(1)(b) - necessity for the performance of a contract).
  • Technical & Usage Data: IP addresses.
  • Purpose: To provide our services to you (Article 6(1)(b) - necessity for the performance of a contract), to protect system security, and to prevent fraud and other abuse (Article 6(1)(f) - legitimate interests), and to comply with our tax, accounting, recordkeeping and other legal obligations (Article 6(1)(c) - compliance with legal obligations).
  • Messages: Messages that you have exchanged with us, including your name and any personal data that you provide to us in your messages.
  • Purpose: To provide our services to you (Article 6(1)(b) - necessity for the performance of a contract), to be able to address your queries (Article 6(1)(b) - necessity for the performance of a contract), comply with our recordkeeping and other legal obligations (Article 6(1)(c) - compliance with legal obligations), and defend or enforce our legal rights (Article 6(1)(f) - legitimate interests).
  • Public profile information, engagement and interactions on our social media pages, visitor statistics: When you visit or interact with our social media pages, we may collect certain information provided by the platform, such as for example information that you publicly share in your profile (such as your name, public profile picture, public occupational information, public geographical information and other public profile information), your likes or other reactions, comments, posts, shares and other interactions and engagement on our social media pages, and visitor statistics.
  • Purpose: To enable us to communicate with you and address your queries (Article 6(1)(f) - legitimate interests), enable us to conduct marketing activities (Article 6(1)(f) - legitimate interests), comply with our recordkeeping and other legal obligations (Article 6(1)(c) - compliance with legal obligations), and defend or enforce our legal rights (Article 6(1)(f) - legitimate interests).

Please note that the Teachable Platform and the social media platforms may collect and process other personal data, including, but not limited to cookies and pixels. You shall review the terms of use, privacy policy, cookies policy and data processing agreement of the Teachable Platform and the social media platforms for further information.

Please note that as we provide our services via the Teachable Platform and we are subject to several legal obligations which necessitate the collection of certain personal data, we are unable to provide services to you if you fail to provide the required data.

 

3. Payment Processing

We utilize Teachable Payments to handle your payments, which is a native payment gateway provided by Teachable.

Under this payment gateway, Stripe, LLC (registered address: Corporation Trust Center, 1209 Orange Street, Wilmington, New Castle, DE 19801, United States; office address: 354 Oyster Point Boulevard, South San Francisco, California, 94080, United States, website: https://www.stripe.com/) and/or its affiliates (henceforth collectively: Stripe) act as the underlying payment processor to handle credit card/debit card processing and merchant services, and process personal data. The specific Stripe entity or entities involved in processing your personal data may depend on your location. Further information can be found on Stripe’s website.

In any case, we do not get access to your full credit card or debit card details, or raw banking credentials.

 

4. International Data Transfers

As we utilize platforms which are based in the United States, your personal data may be transferred to, and processed in, countries outside of the European Economic Area (EEA), including, but not limited to, the United States.

In order to comply with Articles 44-50 of the GDPR, the data processing agreement between Teachable and the Company refers to so-called standard contractual clauses (SCCs), which are aimed at ensuring compliance with the GDPR.

 

6. Data Retention & Erasure

We only retain your data for as long as necessary to fulfill the purposes outlined above, in accordance with Article 5(1)(c) of the GDPR.

If you have a user account in our School, we retain personal data at least as long as your account remains in existence.

After the deletion of your user account, we retain personal data as long as it is necessary for the purposes for which they were collected or otherwise processed. In general, we retain personal data for the duration of the legal limitation period (mostly 5 years related to tax and civil law matters, but longer periods might apply in certain cases; please note that the limitation period might start from the end of the subject calendar year instead of the exact date of the related event), but we retain certain data for 8 years in order to comply with our accounting recordkeeping obligations prescribed by law.

You also have the right to request that we delete your personal data in accordance with Article 17 of the GDPR when one of the grounds listed therein applies.

 

7. Data Subject Rights

You also have the following rights in accordance with GDPR. Please note that below is only a brief overview of these rights, and in each case, these rights are subject to the restrictions which are detailed in the full text of the GDPR.

  • Right to withdrawal of your consent to data processing in accordance with Article 7(3) of the GDPR
  • Right of access in accordance with Article 15 of the GDPR
  • Right to rectification in accordance with Article 16 of the GDPR
  • Right to erasure (‘right to be forgotten’) in accordance with Article 17 of the GDPR
  • Right to restriction of processing in accordance with Article 18 of the GDPR
  • Right to notification regarding rectification or erasure of personal data or restriction of processing in accordance with Article 19 of the GDPR
  • Right to data portability in accordance with Article 20 of the GDPR

To exercise any of these rights, please contact us via e-mail at lakoslearning@protonmail.ch. We will respond within 30 (thirty) calendar days.

 

8. Right to Lodge a Complaint

We encourage you to contact us first directly and we try our best to resolve any issues related to data protection directly with you. However, in accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Our supervisory authority regarding data protection issues:

Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information)

Address: Falk Miksa utca 9-11, 1055 Budapest, Hungary

E-mail: ugyfelszolgalat@naih.hu

Website: https://www.naih.hu/

 

9. Security of Processing

Several technical and organizational measures (including TLS or SSL encryption provided by Teachable, Stripe, Meta and LinkedIn) have been implemented to ensure a level of security appropriate to the risk.

 

10. Changes to this Policy

We will communicate significant changes to this Privacy Policy by updating the "Last Updated" date at the top of the Privacy Policy published on our Website.