Privacy Policy

Last updated: October 27, 2026

This policy covers two services: the website 2811academy.com and the course platform courses.2811academy.com, where people apply to programmes, create an account, take courses and receive certificates.

1. Data Controller

2811 Social Enterprise UG (haftungsbeschränkt), c/o betterplace Umspannwerk GmbH, Paul-Lincke-Ufer 21, 10999 Berlin, Germany. Registered at Amtsgericht Charlottenburg, HRB 217483 B. Managing director: Waldo Soto Bruna. Contact for any privacy matter: academy@2811global.com.

2. Data We Collect

On the website (2811academy.com):

• Contact information you provide through a form, by email or when subscribing to the newsletter: name, email, organisation and the content of your enquiry.
• Usage data collected through Google Analytics (GA4) only if you accept analytics cookies: pages visited, time on site, device type and approximate location at country or city level.

On the course platform (courses.2811academy.com):

• Applications to programmes with a selection process: name, email, phone (optional), country, organisation, professional role, subject you teach or work on, motivation and experience, and the link or campaign through which you arrived.
• Account: name, email, password (stored only as an irreversible hash by our authentication provider), and optionally phone, country, short biography and profile picture.
• Learning records: courses you are enrolled in, lessons completed, quiz answers and results, survey answers, comments in course discussions and your preferred language.
• Certificates: name, course, issue date and a verification code.
• Payments for paid courses: amount, currency and status. Card details are entered on Stripe and never reach our servers.
• Email records: which service emails we sent you (confirmations, welcome, progress, password recovery) and whether they were delivered.

3. Purpose and Legal Basis

• Reviewing applications and selecting participants (Art. 6(1)(b) GDPR, steps taken at your request before a contract).
• Providing the course: account, access to content, progress tracking, certificates and the emails that go with them (Art. 6(1)(b) GDPR, performance of a contract).
• Reporting to funders of grant-funded programmes, such as the European Commission under Erasmus+: aggregated or pseudonymised figures on participation, country, role and completion (Art. 6(1)(f) GDPR, our legitimate interest in meeting funding obligations). We do not share your contact details with funders.
• Answering enquiries and quotes (Art. 6(1)(b) GDPR).
• Newsletter (Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time).
• Website analytics (Art. 6(1)(a) GDPR, your consent through the cookie banner).
• Security of the platform: preventing abuse and keeping access logs (Art. 6(1)(f) GDPR, legitimate interest).

4. Service Providers

We use the following providers, who process data on our behalf under data processing agreements:

Provider	Purpose	Location
Supabase	Database and authentication of the course platform	United States
Vercel	Hosting of the course platform	United States and global edge network
Resend	Delivery of platform emails	United States
Google Workspace	Team email (academy@2811global.com)	United States and EU
Stripe	Payment processing	EU and United States
Hostinger	Hosting of the website and its contact forms	EU
MailerLite	Newsletter	EU
Google Analytics 4	Website analytics, only with consent	United States and EU

5. Who Can See Your Data

• Your account, applications and learning records are visible to you and to the 2811 Academy team that runs the course. Other participants cannot see them.
• Your name and profile picture are visible to other participants of the same course if you post in a course discussion.
• Anyone who has your certificate code or link can verify it and will see your name, the course and the issue date. This is what makes the certificate verifiable. You decide who you share it with.

6. Cookies and Local Storage

Name	Where	Purpose	Duration
sb-*-auth-token	Course platform	Keeps you signed in. Strictly necessary.	Session, renewed while you use the platform
Language preference	Course platform (local storage)	Remembers the interface language	Until you clear it
_ga, _ga_*	Website	Analytics, only if you accept	2 years

The course platform does not use analytics or advertising cookies. On the website you can accept or decline analytics in the cookie banner and change your mind in your browser settings.

7. Data Retention

• Applications that are not selected: deleted 24 months after the call closes.
• Account and learning records: kept while your account exists. If you ask us to delete your account, we delete them within 30 days.
• Certificates: kept so they remain verifiable, unless you ask us to revoke and delete them.
• Payment records: kept for the period required by tax law (10 years in Germany).
• Email records and enquiries: 24 months.
• Analytics data: 14 months (GA4 setting).

8. Your Rights

Under the GDPR and applicable law you have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You can edit most of your profile directly on the platform. For everything else, email academy@2811global.com and we will answer within 30 days.

You also have the right to lodge a complaint with a supervisory authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

9. International Transfers

Some providers process data in the United States. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the Standard Contractual Clauses adopted by the European Commission.

10. Security

The platform runs over HTTPS only. Access to data is restricted at database level so that each participant can only read and change their own records, and only the course team can see applications. Passwords are never stored in readable form.

11. Email Communications

Service emails (application confirmation, access, progress, certificates, password recovery) are part of the course and are sent while you take part. Newsletters and announcements are sent only with your consent or to contacts with a prior direct relationship with 2811, and every one includes a link to unsubscribe.

12. Changes

If we change this policy in a way that affects how we use your data, we will publish the new version here with a new date and, for account holders, notify you by email.