Privacy

What this page covers

This privacy notice describes how personal data is processed in Cyravo, for what purposes the data is used and what rights a data subject may have in relation to that processing.

The notice covers learner and administration use of the Cyravo service and related authentication, usage, reporting and support processes to the extent that they involve personal data. At the current stage, the underlying learning environment and the first core course in use is Cyravo Core.

1. Controller and contact details

• ControllerCalesta Digital Productions Oy
• AddressJakarlan puistokatu 17 B 13, 20460 Turku, Finland
• Business ID3106764-6
• Effective date1 April 2026
• Contact emailinfo@calesta3d.com
• Privacy mattersPrivacy-related requests and contacts: info@calesta3d.com

2. What data may be processed

• the user's name, email address and other basic authentication-related details
• information related to organization, tenant, unit, group or role
• usage and log data such as sign-ins, events, course progress and completion data used for reporting
• information related to support requests, error situations and administrative actions to the extent that it contains personal data

3. Processing purposes and legal bases

• Providing the service: identifying users, managing access rights and presenting the correct usage path
• Using the service: processing learning or training completions, saving progress and enabling reporting
• Support and security: investigating error situations, reviewing logs and preventing misuse
• Legal bases: processing may be based on a contract related to delivering the service, the controller's legitimate interest or an applicable legal obligation. The final wording will be confirmed in legal review.

4. Data sources, recipients and transfers

• Data sources: information provided by the user, user data provided by the organization and data created when the service is used
• Recipients: Calesta Digital Productions Oy and the technical and operational service partners needed for authentication, hosting, reporting, maintenance and support
• Transfers: personal data is processed primarily to the extent required to deliver the service. Any transfers outside the EU/EEA, or confirmation that none take place, will be added to the final version.

5. Retention periods and data subject rights

• data is retained only for as long as needed to provide the service, verify usage, enable reporting, ensure security and fulfill legal obligations
• the data subject may have the right to access, rectify, erase or restrict the processing of their data under applicable law
• requests concerning these rights can be sent to info@calesta3d.com. Possible restrictions and supervisory authority details will be added to the final published version.