Privacy Policy

Last updated: February 02, 2026

1. Introduction

Fobara ("we," "us," or "our") operates an online education platform providing digital learning services. This Privacy Policy describes how we collect, use, and protect your personal information in accordance with Finnish data protection laws, including the Personal Data Act (Henkilötietolaki) and the General Data Protection Regulation (GDPR).

2. Information We Collect

Personal Information:

  • Name, email address, and contact details
  • Educational background and professional information
  • Payment and billing information
  • Profile photos and biographical information

Learning Data:

  • Course enrollment and completion records
  • Learning progress, quiz scores, and assessment results
  • Discussion forum posts and peer interactions
  • Study time and platform usage patterns

Technical Data:

  • IP address, browser type, and device information
  • Cookies and similar tracking technologies
  • Website navigation and interaction data
  • System logs and error reports

3. How We Use Your Information

We process your personal data for the following purposes:

  • Educational Services: Providing online courses, tracking learning progress, and issuing certificates
  • Platform Improvement: Analyzing usage patterns to enhance our educational content and user experience
  • Communication: Sending course updates, educational content, and important platform notifications
  • Support: Responding to inquiries and providing technical assistance
  • Legal Compliance: Meeting Finnish regulatory requirements and maintaining accurate records

4. Legal Basis for Processing

Under Finnish law and GDPR, we process your data based on:

  • Contract Performance: To provide educational services you've purchased
  • Legitimate Interest: For platform improvement and educational analytics
  • Consent: For marketing communications and optional features
  • Legal Obligation: For compliance with Finnish education and tax regulations

5. Information Sharing

We may share your information with:

Educational Partners:

Instructors and educational institutions for course delivery and certification

Service Providers:

Payment processors, cloud hosting, and analytics services operating under strict data agreements

Legal Requirements:

Finnish authorities when required by law or court order

Business Transfers:

In case of merger, acquisition, or sale of business assets

6. Your Rights Under Finnish Law

As a resident of Finland, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Revoke consent for voluntary data processing

7. Data Security and Retention

We implement robust security measures including:

  • End-to-end encryption for data transmission
  • Secure cloud storage with regular backups
  • Multi-factor authentication for staff access
  • Regular security audits and updates
  • GDPR-compliant data processing agreements

We retain your data for as long as necessary to provide educational services and comply with Finnish legal requirements, typically 7 years for financial records and throughout your active enrollment for learning data.

8. International Data Transfers

When transferring data outside the EU/EEA, we ensure adequate protection through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Certification schemes and codes of conduct
  • Binding corporate rules where applicable

9. Cookies and Tracking

Our platform uses cookies for:

Essential Cookies

Required for platform functionality and security

Analytics Cookies

Help us understand how students use our platform

Preference Cookies

Remember your settings and learning preferences

Marketing Cookies

Deliver relevant educational content (with consent)

10. Children's Privacy

In compliance with Finnish law, we do not knowingly collect personal information from children under 13 years old without parental consent. For users between 13-16 years old, we require parental consent for data processing. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or Finnish legal requirements. We will notify users of significant changes through email or platform notifications at least 30 days before the changes take effect.

12. Contact Information

For privacy-related questions, data requests, or to exercise your rights, contact:

Data Protection Officer

Fobara

Email: [email protected]

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) if you believe your data protection rights have been violated.