corporate.school

Legal

Terms of Use & Privacy Policy

Last updated: July 2026

Part I - Terms of Use

1. Acceptance of Terms

By creating an account on corporate.school, you agree to these Terms of Use and the Privacy Policy set out in Part II below. If you do not agree with any part of these terms, you may not use our platform.

2. Platform Services

corporate.school provides professional education services including cognitive assessments (Astra Quiz), professional certification courses across 17 career paths, and talent matching with potential employers. Access to certain services may require completion of assessments or payment.

3. Account Registration

You must provide accurate, current, and complete information during registration. You are responsible for maintaining the security of your account credentials. You must verify your email address before accessing platform features. Each person may register only one account.

4. Assessment & Certification

Assessment and quiz results are stored securely. Certificates are issued upon successful completion of course assessments (minimum 90% pass mark) and represent your demonstrated knowledge at the time of testing. Certificates carry a unique credential ID for verification purposes.

5. Payment & Refunds

Course access can be obtained through payment or by successfully completing the Astra Quiz. Certificate prices range from €145 to €349 EUR depending on the career path. Payments are processed securely through Stripe. Refund requests are handled on a case-by-case basis within 14 days of purchase.

6. Exam & Quiz Results - Third-Party Sharing

During registration you may consent to sharing your exam and quiz results with third parties, including potential employers and partner organisations on our platform. This consent is optional and is processed under Article 6(1)(a) of GDPR (consent). You may withdraw this consent at any time from your dashboard settings without affecting the lawfulness of processing carried out before withdrawal. When withdrawn, your assessment data will no longer be accessible to any third party.

7. Data Security

We implement industry-standard security measures including encryption of data in transit (TLS 1.2+) and at rest, secure password hashing (bcrypt), role-based access controls, and regular security reviews to protect your personal information.

Part II - Privacy Policy

In accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR")

8. Data Controller

The data controller for information collected through corporate.school is corporate.school. For all data protection enquiries, contact the Data Protection Officer at [email protected].

9. Personal Data We Collect

We collect the following categories of personally identifiable information (PII):

9.1 Registration Data

  • Full name
  • Email address
  • Password (stored as a secure one-way hash - we never store your password in plain text)
  • Date and time of registration
  • Career aspirations: dream job, dream company, salary expectations (optional)

9.2 Identity & Know-Your-Customer (KYC) Data

  • Phone number
  • Date of birth
  • Gender
  • Nationality
  • Country, city, and residential address
  • Photograph / profile image (if uploaded)

9.3 Education & Professional Data

  • Education level, field of study, university, graduation year
  • Current job title, current company, years of experience
  • Employment status, industry sector
  • Desired job role, desired field of work, work arrangement preferences
  • Key skills, spoken languages, existing certifications
  • LinkedIn profile URL
  • Curriculum Vitae / CV (uploaded document)

9.4 Assessment & Performance Data

  • Astra Quiz cognitive assessment scores (including domain breakdowns and IQ estimates)
  • Course quiz scores, pass/fail status, time taken
  • Certificate credential IDs and issuance dates
  • Course study time logs

9.5 Technical & Behavioural Data

  • IP address (collected at registration and during consent events)
  • Browser type and user-agent string
  • Device information
  • Session and authentication tokens

9.6 Psychological & Motivational Data (optional)

  • Career goals and long-term objectives
  • Motivations, concerns, likes, and dislikes relating to work

10. Legal Bases for Processing (GDPR Article 6)

Article 6(1)(b) - Contractual necessity: Processing of registration, KYC, education, and assessment data is necessary for the performance of our services (issuing certificates, conducting assessments, managing your account).

Article 6(1)(a) - Consent: Sharing your exam/quiz results with third parties (employers and partners) is based on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

Article 6(1)(f) - Legitimate interests: Technical data (IP, user-agent) is processed to maintain platform security, prevent fraud, and ensure service availability.

11. Consent Records & Audit Trail

In accordance with GDPR accountability requirements (Article 5(2) and Article 7(1)), we maintain a timestamped log of every consent given during registration. This log records: the date and time of terms acceptance, GDPR data consent, and exam/quiz third-party sharing consent, along with the IP address and browser information at the time of consent. These records are retained for the duration of your account plus 3 years after deletion.

12. Your Rights Under GDPR

  • Right of Access (Art. 15): You may request a copy of all personal data we hold about you.
  • Right to Rectification (Art. 16): You can update your profile information from your dashboard at any time.
  • Right to Erasure (Art. 17): You may request deletion of your account and all associated data ("right to be forgotten").
  • Right to Restriction (Art. 18): You may request restriction of processing in certain circumstances.
  • Right to Data Portability (Art. 20): You may request your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent (Art. 7(3)): You can withdraw any optional consent (e.g. exam/quiz sharing) at any time without affecting the lawfulness of prior processing.
  • Right to Object (Art. 21): You may object to processing based on legitimate interests.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your EU Member State.

13. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, all personal data is erased within 30 days, except where retention is required by law. Consent logs are retained for 3 years after account deletion for regulatory compliance. Payment records may be retained for up to 7 years as required by applicable tax and financial regulations.

14. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) approved by the European Commission.

15. Contact & Data Protection Officer

For any questions about these terms, this privacy policy, your personal data, or to exercise any of your GDPR rights, please contact our Data Protection Officer at [email protected].