Privacy

Last updated: 30 August 2026. This policy explains how IPMERC ("we") handles personal data when you use ipmerc.com and the IPMERC platform. We process personal data in line with the EU General Data Protection Regulation (GDPR). Who is responsible IPMERC is the controller for the data described here. For questions or requests, use the contact page. We respond within one month. What we collect - Account and application data: name, email address, phone number, country, organisation, role and chosen plan. - Contact data: what you send us through the contact form. - Usage data: sign-ins, training results, content you enter in the platform, and technical logs such as IP address and browser type. Why we process it - To provide the platform and your account (performance of a contract). - To respond to questions and applications (legitimate interest). - To secure, maintain and improve the service, including abuse prevention (legitimate interest). - To send service messages about your account. Marketing is sent only with your consent, which you can withdraw at any time. We do not sell personal data and we do not use it for automated decision-making with legal effect. Your employer's logo If you sign up with a work email address, we ask separately whether IPMERC may show your employer's logo on the public site as a place where the platform is used. The question is optional and stays off unless you tick it. The answer is stored with your account, with the date you gave it, and the legal basis is your consent (article 6(1)(a) GDPR). You can withdraw it at any time in your account settings, which ends any further use; a withdrawal does not undo use before that moment. A company logo is not itself personal data, but the permission you gave is part of your account record. We ask the organisation before a logo goes up and we take it down on request. Retention We keep personal data no longer than needed for the purposes above. Account data is kept while your account is active and deleted or anonymised within a reasonable period after closure, unless the law requires longer retention. Sharing and transfers We use a small number of service providers (hosting, database, email and similar) that process data on our behalf under processor agreements. Where a provider is located outside the EEA, we rely on appropriate safeguards such as the European Commission's standard contractual clauses. Cookies The site uses functional cookies only: a session cookie to keep you signed in and a preference cookie for your language. We do not use tracking or advertising cookies. The cookie statement names every cookie, says what it does and how long it lasts, and is where you accept or withdraw optional cookies. Your rights Under the GDPR you can request access, correction, deletion, restriction, objection and data portability, and you can withdraw consent at any time. Use the contact page to exercise a right; we may ask you to verify your identity. You can also lodge a complaint with your data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens. Security We protect personal data with technical and organisational measures such as encrypted connections, access control and hashed credentials. Changes We may update this policy. The latest version is always on this page, with the date above.