The data controller responsible for personal data collected on the Site and in connection with training courses is:

TUNYTECH Business SRL
Belgian Limited Liability Company
Company / VAT Number (CBE): BE 0803.477.031 (RPR Namur)
Registered Office: Rue Dewez 27 B02, 5000 Namur, Belgium
Phone: +32 470 88 22 79
Email: contact@tunytech.co
Director / Data Protection Lead: Amir Aouani

We collect only the data strictly necessary for the intended purposes:
• Identification and contact data: full name, email address, phone number, postal address, country of residence.
• Professional and billing data (companies & self-employed): company name, intra-community VAT number, job title / function, billing address.
• Registration and order data: chosen training session, order history, registration certificates, invoices, payment status.
• Educational and certification data (PECB): data required for exam registration, attendance tracking, attendance sheets, exam results, and issued certificates.
• Technical and browsing data: anonymized IP address, session identifiers, connection logs, and browsing data via strictly necessary functional cookies.

Your personal data is processed in accordance with Article 6 of the GDPR based on the following legal grounds:

• Performance of contract (Art. 6.1.b GDPR): managing your registrations, access to educational platforms, sending invitations and course materials, organizing training sessions, and registering for official PECB certification exams.
• Legal compliance (Art. 6.1.c GDPR): issuing invoices, general accounting maintenance, tax and VAT declarations, and retaining supporting accounting documents under the Belgian Code of Economic Law.
• Legitimate interests (Art. 6.1.f GDPR): platform security, prevention of fraud and abusive use, continuous quality improvement of training programs and customer support.
• Consent (Art. 6.1.a GDPR): placement of non-essential analytical cookies or sending informational educational newsletters (revocable at any time).

Your personal data is strictly confidential and will never be sold to third parties. It is only shared with the following authorized recipients:
• Internal team of TUNYTECH Business SRL responsible for educational, administrative, and customer management.
• Official certifying body (PECB): strict transfer of data required for examination enrollment, official course licensing, and certification issuance.
• Hosting and technical infrastructure providers: OVHcloud (secure hosting in France / EU), technical and transactional infrastructure servers.
• Secure payment service providers: PCI-DSS certified banking and payment gateways (e.g. Stripe) processing your encrypted payments directly.
• Administrative and judicial authorities: solely in the event of a valid legal obligation or court order.

Personal data is primarily hosted and processed within the European Union (notably via our hosting partner OVHcloud in France).

In the event that data is transferred to service providers or partners located outside the European Economic Area (for instance for registering international certifications), TUNYTECH Business SRL ensures that such transfers are governed by appropriate legal safeguards, in particular Standard Contractual Clauses (SCCs) adopted by the European Commission or an adequacy decision.

We retain your personal data for periods strictly proportionate to the purposes pursued:
• Billing data and accounting records: 7 to 10 years in compliance with Belgian accounting and tax obligations.
• Customer account data and course records: duration of the contractual relationship, plus 3 years from the date of last contact or training completion.
• Certification records and certificates of achievement: archived for the period necessary for traceability and credential verification by certifying bodies (PECB).
• Connection logs and security records: maximum of 12 months.

In accordance with the GDPR and Belgian law, you have the following rights concerning your personal data:
• Right of access: obtain confirmation as to whether your data is being processed and receive a copy.
• Right to rectification: request the updating or correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): obtain the deletion of your data, subject to statutory retention obligations (e.g. accounting records).
• Right to restriction of processing: request the temporary freezing of the processing of specific data.
• Right to data portability: receive your data in a structured, commonly used, and machine-readable format.
• Right to object: object at any time to the processing of your data on legitimate grounds.

To exercise any of these rights, please send your request along with proof of identity by email to: contact@tunytech.co. We commit to responding within a maximum period of one (1) month.

The Site uses cookies that are essential for the technical operation of the platform (user session management, cart retention, language selection, CSRF security). These cookies do not require prior consent.

If optional analytical or audience measurement cookies are enabled, they are only placed after your explicit consent via our cookie banner, in compliance with Data Protection Authority guidelines.

If, after contacting us, you believe that your rights have not been respected or that the processing of your personal data does not comply with data protection regulations, you have the right to lodge a complaint with the competent supervisory authority:

Data Protection Authority (Autorité de Protection des Données – APD / GBA) in Belgium
Rue de la Presse 35, 1000 Brussels, Belgium
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.autoriteprotectiondonnees.be