General Data Protection Regulation (GDPR) Compliance

Last Updated: September 11, 2025

Jaskulk ("we," "our," or "us") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and protect your personal data in accordance with GDPR requirements.

1. Data Controller Information

Jaskulk acts as the data controller for personal data collected through our platform. You may contact us regarding data protection matters:

Email: contact@jaskulk.com
Phone: +380512239124
Address: Slobozhanskyi Ave, 1, Dnipro, 49000, Ukraine

2. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

Consent: You have given clear consent for us to process your personal data for specific purposes
Contract Performance: Processing is necessary to fulfill our contractual obligations to you
Legal Obligation: Processing is required to comply with applicable laws
Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

Name and contact details (email address, phone number)
Account credentials (username, password)
Payment information (billing address, transaction data)
Profile information (educational background, preferences)
Course enrollment and progress data
Communications with our support team

3.2 Information Automatically Collected

Device and browser information
IP address and location data
Usage data and interaction patterns
Cookies and similar tracking technologies
Log files and analytics data

4. How We Use Your Personal Data

We process your personal data for the following purposes:

Providing access to educational content and platform features
Managing your account and user profile
Processing payments and maintaining transaction records
Communicating with you about courses, updates, and support
Improving our platform and developing new features
Ensuring platform security and preventing fraud
Complying with legal and regulatory requirements
Sending marketing communications (with your consent)
Analyzing usage patterns to enhance user experience

5. Your Rights Under GDPR

As a data subject, you have the following rights:

5.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

5.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

5.3 Right to Erasure

You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes collected or when you withdraw consent.

5.4 Right to Restrict Processing

You may request restriction of processing your personal data in specific situations, such as when contesting data accuracy or objecting to processing.

5.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

5.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

5.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

6. Exercising Your Rights

To exercise any of your rights, please contact us at contact@jaskulk.com. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

We may request specific information from you to confirm your identity before processing your request.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Account data: Retained while your account is active and for a reasonable period afterward
Transaction records: Retained as required by applicable accounting and tax laws
Marketing data: Retained until you withdraw consent or object to processing
Legal compliance data: Retained as required by applicable laws and regulations

After the retention period expires, we will securely delete or anonymize your personal data.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Employee training on data protection practices
Incident response and breach notification procedures

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by regulatory authorities
Adequacy decisions recognizing equivalent data protection standards
Binding corporate rules for intra-group transfers
Appropriate technical and organizational security measures

10. Third-Party Disclosure

We may share your personal data with third parties under the following circumstances:

Service Providers: Companies that provide services on our behalf (hosting, payment processing, analytics)
Business Transfers: In connection with mergers, acquisitions, or asset sales
Legal Requirements: When required by law or to protect our rights and safety
With Your Consent: When you explicitly authorize disclosure to third parties

We require third parties to maintain appropriate security measures and use your data only for specified purposes.

11. Automated Decision-Making and Profiling

We may use automated processing and profiling to personalize your learning experience and recommend relevant content. You have the right to:

Obtain human intervention in automated decisions
Express your point of view regarding automated decisions
Contest decisions made solely through automated means
Request explanation of the logic involved in automated processing

12. Children's Privacy

Our platform is not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental consent. If we become aware of unauthorized collection of data from children, we will take steps to delete such information promptly.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy.

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in risk to your rights.

15. Updates to This Policy

We may update this GDPR Compliance Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through our platform or via email. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

16. Contact Information

If you have questions, concerns, or requests regarding this policy or our data protection practices, please contact us:

Email: contact@jaskulk.com
Phone: +380512239124
Telegram: https://t.me/+380512239124
Postal Address: Slobozhanskyi Ave, 1, Dnipro, 49000, Ukraine

17. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with GDPR requirements.