What this site keeps, and why.

Who holds your data

Kureos World AB (organisation number 559223-5237, Sweden) is the controller for the personal data this site processes. Contact: privacy@kureos.com.

Payments by individuals are processed by our payment partner as seller of record. It is an independent controller for the payment data it collects, under its own privacy notice, linked at checkout. Kureos never receives your card details.

What is collected and why

Your email address, and your name if you give it: to sign you in with a one-time code, to deliver the course and its mail, and to issue your certificate. Legal basis: the contract you entered by buying or joining.

Your progress, your answers to the questions in the show and the quiz, your reflections and your commitments: to run the course, resume where you left off, return your own reflections to you, and issue your certificate. Legal basis: contract.

The record of your purchase (what, when, price, country) as passed on by the payment partner: for access, refunds and Swedish bookkeeping law, which requires records to be kept for seven years. Legal basis: contract and legal obligation.

If you join a founding list or tick the box at checkout: your address, to send the messages you asked for. Legal basis: consent, withdrawn at any time by the link in every such message.

Cookies

One cookie, set when you sign in, keeps you signed in. It is strictly necessary and carries no tracking. The site sets no advertising or analytics cookies, and stores nothing else on your device.

How visits are counted

We count visits ourselves, on our own servers, so we can see which pages and which links bring people and where they stop. No cookie is set and nothing is stored on your device, so there is no banner to accept.

When a page loads, your browser tells us the page, the site you came from (its name only, never the page), any campaign tags in the link, and whether you are on a phone, a tablet or a computer. When you join a founding list, sign in, start the show, finish a chapter, answer a question, run a room, take the quiz, receive a certificate or order seats, we note that the step happened, and nothing of what you wrote.

To tell one visitor from two within a day, we combine your IP address and browser name with a random value made fresh each day, and keep only a short scrambled result. Your IP address is never stored. The day's random value is deleted when the day ends, after which nobody, us included, can link that result to you or to your visits on other days. We do not fingerprint your device.

If your browser sends Do Not Track or Global Privacy Control, nothing is counted. Search engines and other automated visitors are left out. The counts are seen only by Kureos. Legal basis: our legitimate interest in knowing how the site is used, with the safeguards above.

Who sees it

Your answers and reflections are private to you. If a company gave you your seat, it sees whether you started and completed the course and whether you passed the quiz. It never sees your answers, reflections or commitments.

Your certificate's verification page is public only when you choose to share its link.

The providers below process data on our instructions under data processing agreements. Where data leaves the EU, it is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long it is kept

Your account and course record are kept while you have access to a course and for 12 months after your last sign-in, then deleted. Purchase records are kept for seven years, as Swedish law requires. Founding-list entries are deleted when the course launches, unless you bought or asked to stay on.

Your rights

You may ask for a copy of your data, correct it, delete it, restrict or object to its use, or take it with you. Write to privacy@kureos.com. You are answered within 30 days.

You may complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the authority in your own country.

The providers that process it