Privacy Policy | AI Transition Academy

Data Controller: Torous d.o.o. AI Transition Academy is a brand operated by Torous d.o.o., Croatia.
Glavna 42, 40327 Donji Vidovec, Croatia
Contact: contact@ai-transition.academy

1. Who we are

AI Transition Academy is a brand operated by Torous d.o.o., Croatia. We operate the website at aitransition.academy and are the data controller for all personal data collected through this website, the A.C.T. Cohort enrolment process, and any related educational services.

This policy explains what data we collect, why we collect it, how we use it, and what your rights are under the General Data Protection Regulation (GDPR) and applicable Croatian law.

2. Information we collect

Data	How collected	Purpose	Legal basis (GDPR)
Full name	Application form, contact form	Cohort enrolment, personalised communication	Performance of contract (Art. 6.1.b)
Email address	Application form, contact form, newsletter signup	Cohort communications, replies to enquiries, newsletters and marketing, pre/post-cohort emails	Performance of contract (Art. 6.1.b); Legitimate interest (Art. 6.1.f)
Job title / current role	Application form	Tailoring cohort experience to your actual work context	Performance of contract (Art. 6.1.b)
Payment information	Checkout (processed by LemonSqueezy)	Payment processing — we do not store card details directly	Performance of contract (Art. 6.1.b)
Message content	Contact form	Responding to your enquiry, customer support	Legitimate interest (Art. 6.1.f)
IP address, browser and device information	Automatically when you visit the website	Security, fraud prevention, analytics and performance improvements	Legitimate interest (Art. 6.1.f)
Analytics data (pages visited, session duration, traffic source)	Analytics tools (see Section 4)	Understanding how visitors use the site, improving content and performance	Legitimate interest (Art. 6.1.f) / Consent where required

We don't collect sensitive personal data (health, religion, political views, etc.).

3. Why we collect data

We process personal data for the following purposes:

Delivering products and services — cohorts, educational materials, downloads
Customer support — responding to enquiries and resolving issues
Newsletters and marketing communications — where you've signed up or have an existing relationship with us
Analytics and performance improvements — understanding how the site is used
Business operations — invoicing, accounting, legal compliance
Security and fraud prevention — protecting against misuse

4. Analytics and tracking

We may use analytics and tracking technologies to understand how visitors use our website and to improve our services. These may include:

Google Analytics — website traffic and behaviour analysis
Meta Pixel (Facebook/Instagram) — advertising performance and audience targeting
LinkedIn Insight Tag — LinkedIn advertising measurement and audience insights
YouTube embeds — embedded video content which may set cookies from Google/YouTube

These services may set cookies or use similar tracking technologies. For full details on how we use cookies, see our Cookie Policy.

5. Third-party processors

We use external services that process data on our behalf:

LemonSqueezy — payment processor and Merchant of Record. Payments are securely processed by LemonSqueezy. We do not receive or store your payment card details. LemonSqueezy Privacy Policy →
MailerLite — email marketing platform. Receives your name, email, and job title when you submit the application form. Used for cohort communications and newsletters. MailerLite is GDPR-compliant. MailerLite Privacy Policy →
Beehiiv — newsletter platform. May be used for newsletter delivery and subscriber communications. Beehiiv Privacy Policy →

We don't sell, rent, or share your data with any other parties.

6. Data retention

We retain customer data only as long as necessary for legal, accounting, operational, and security purposes. Specifically:

Cohort participants: for the duration of the cohort plus 2 years, to handle follow-up, guarantee claims, or legal obligations
Enquiries via the contact form: up to 2 years, unless you ask us to delete sooner
Email subscribers: until you unsubscribe
Analytics data: as per the retention settings of each analytics platform

7. Your rights under GDPR

As a data subject in the EU/EEA, you have the following rights:

Right of access — request a copy of the personal data we hold about you
Right to correction — ask us to correct inaccurate or incomplete data
Right to deletion — ask us to delete your data ("right to be forgotten"), where no legal obligation requires us to keep it
Right to restriction — ask us to restrict processing of your data in certain circumstances
Right to portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at contact@ai-transition.academy. We'll respond within 30 days.

8. Complaints

If you believe we've handled your data unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
azop.hr

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. If you're an enrolled cohort participant, we'll notify you by email of any material changes.

10. Contact

For privacy-related enquiries: contact@ai-transition.academy