Privacy Policy

1. Data Controller

The data controller is EUQP, based in Italy. For any request related to the processing of your personal data, you can contact us at: support@euqp.app.

2. Personal Data Collected

We collect the following personal data:

Username and email address, provided upon registration or login via the Firebase authentication service (Google LLC).

Anonymous usage data, collected via Google Analytics (Google LLC) to analyse traffic and improve the platform. This data does not allow direct user identification.

Payment data: transactions are handled entirely by Stripe, Inc. EUQP does not directly store or process payment card data.

3. Purposes of Processing and Legal Bases

Data is processed for the following purposes:

• Service delivery (Art. 6(1)(b) GDPR): account management, platform access, quiz history and learning progress. • Contractual obligations (Art. 6(1)(b) GDPR): processing purchases and managing refunds. • Legitimate interest (Art. 6(1)(f) GDPR): platform security and fraud prevention. • Consent (Art. 6(1)(a) GDPR): statistical analysis via Google Analytics.

4. Google Analytics

We use Google Analytics to collect anonymous data about site usage (pages visited, session duration, aggregated geographic origin). Data transmitted to Google is anonymised. You can disable data collection via the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout).

5. Cookies

We use only technical cookies, necessary for the proper functioning of the platform (authentication, session management, theme preferences). We do not use profiling or third-party tracking cookies, except for the technical Google Analytics cookies described in section 4.

6. Data Retention

Personal data is retained for as long as strictly necessary for the purposes for which it was collected, or until the user deletes their account. Anonymous data collected via Google Analytics is retained for 14 months, according to the service's default settings.

7. International Data Transfers

Your data may be transferred to the USA via Firebase (Google LLC) and Stripe, Inc., companies that adhere to the EU-USA Data Privacy Framework or that provide adequate safeguards pursuant to Art. 46 GDPR.

8. Rights of Data Subjects

Under the GDPR you have the right to:

• Access your personal data (Art. 15) • Rectify inaccurate data (Art. 16) • Obtain erasure of your data (Art. 17) • Restrict processing (Art. 18) • Receive your data in portable format (Art. 20) • Object to processing (Art. 21)

To exercise these rights write to: support@euqp.app. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).

9. Changes to this Policy

EUQP reserves the right to update this policy periodically. Changes will be published on this page with the update date. In case of substantial changes we will notify you by email.