What happens to your data in Overdue

Who is responsible

Primux is the data controller

PRIMUX DIGITAL, S.L. (Primux), Fuengirola, Spain. CIF B26636506.

Write to [email protected] about anything on this page.

The waitlist

When you join the waitlist

What we store. Your email, and if you give them, your first name, company and team size. Also who it is for, the language you want mail in, your consent and the date of the consent text, the page you signed up on, the campaign tags in the link you came from, and whether you confirmed.

Where. In the portal's own database. When Kit, our email provider, is connected, also in Kit.

Why. To write to you once, when companies can buy seats, plus the mail that asks you to confirm. The answers about your company tell us who the course is for. The legal basis is your consent. You can take it back at any time with the unsubscribe link in every mail.

How long. Until you unsubscribe, or until we have sent that one mail. Then we delete the waitlist, in the portal and in Kit. To write about anything else, we ask first.

Buying seats

When your company buys seats

What we store. The company's name, country and EU VAT number, a billing email, the buyer's name and email, the number of seats, the payment status, and the campaign tags in the link the buyer came from. The buyer becomes the company's admin and adds the name and email of a sponsor and an access contact, and the AI tool the company allows.

Why. To sell the seats, send receipts and run the company's account. Learners see the access contact's name and email. The legal basis is the contract.

Card details. Stripe takes the payment. We never see or store card numbers.

How long. Invoices and payment records as long as Spanish bookkeeping law requires, 6 years today. The rest while the company has access, and 3 months after.

Taking a seat

When you learn with Overdue

What we store. Your name, email, language and time zone. Your weekly slot: day, time, length, start and end date, and any slot you moved. What you mark in the portal: "I have done this" and when, "I am blocked" with any reason and note, a pause and its end date, whether you want mail about new library modules, and when you last logged in. Each week we log whether the weekly mail was sent or held back, and why.

What we do not store. Your AI conversations, answers, files or any score. The portal only knows what you tap.

Why. To log you in, send your calendar series and the weekly mail, and show your company's admin how far you are. The legal basis is our and your company's legitimate interest in running the course it bought for you.

Who sees it. Your company's admin: whether you finished the foundation, which modules are open, your next slot, any pause, and any open "I am blocked" with its reason. If your calendar replies to the invitation, the portal ignores it and never shows it as attendance.

How long. While your company has access. If your seat is taken back, your login ends, but what you marked stays in the company's history. When the company's access ends, we delete it all within 3 months.

If you reply to one of our mails, Primux reads it and keeps it as long as it takes to answer.

Who handles it for us

The companies we use

Each one processes your data only on our instructions.

• Kit.Sends the waitlist mails and keeps a copy of the waitlist. Kit may also send the portal mails.
• Stripe.Takes the payment for seats and sends receipts.
• Hetzner Online GmbH.The server the portal runs on, where the portal data and the waitlist are stored. We set it up and run it with Laravel Forge.

Kit and Stripe are American companies, so some data may be stored in the US. Where data leaves the EU, it goes under the EU's standard contract terms or the EU-US Data Privacy Framework.

We do not sell your data or share it with anyone else.

Cookies

No cookies on this site today

This site sets no cookies and runs no analytics or tracking. Campaign tags come from the link you clicked, not from a cookie. The portal sets one cookie to keep you logged in. The login needs it, so we do not ask for it.

Your rights

What you can ask us for

• See your data and get a copy.
• Have it corrected or deleted.
• Have us pause using it, or object to how we use it.
• Get it in a file you can take elsewhere.
• Take back your consent. For the waitlist, that is the unsubscribe link.

Write to [email protected]. We answer within a month. If you have a seat, some things are your company's to decide, such as whether you keep the seat. Then we tell you who to ask.

You can complain to the Spanish data protection authority, the AEPD (aepd.es), or to the authority where you live. In Denmark that is Datatilsynet (datatilsynet.dk).