PRIVACY POLICY

Effective From: 3 November 2025
Controller: CaseHub OÜ, Prisma 4, Muraste, 76905 Harku vald, Estonia
Contact: info@casehub.pro
Website: www.casehub.pro

1. PURPOSE OF THIS POLICY

This Privacy Policy explains how CaseHub OÜ (“CaseHub”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data in connection with our website, platform, and services.

We are committed to processing personal information transparently and in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Estonian data protection laws.

This Policy applies to:

  • Visitors to our website (www.casehub.pro and its subdomains),
  • Registered Users of the CaseHub Platform, and
  • Company Clients purchasing CaseHub services on behalf of Users.

2. WHO WE ARE

CaseHub OÜ is the data controller responsible for your personal information.
Address: Prisma 4, Muraste, 76905 Harku vald, Estonia
Email: info@casehub.pro

3. DATA WE COLLECT

Personal data you provide

We collect personal information that you voluntarily provide when you:

  • Register an account or start a free trial;
  • Subscribe to a CaseHub program or newsletter;
  • Participate in live sessions, workshops, or assessments;
  • Communicate with us via email or the Platform;
  • Provide feedback or testimonials.

This information may include:

  • Name, email address, job title, and organization;
  • Billing details and payment information (processed securely via Stripe);
  • Profile information (optional bio, picture, or activity data);
  • Content you upload or share within CaseHub programs.

Automatically collected data

When you use our Platform, we collect limited technical information for security and analytics purposes, such as:

  • IP address, browser type, and device information;
  • Date and time of access, pages visited, and usage statistics.

This information is anonymized and used only to maintain service stability and improve the user experience.

Data generated through training activities

As part of using the CaseHub Platform, Users create and share content such as written reflections, experience notes, or solutions to case challenges (“User Contributions”). These contributions form an integral part of the leadership development process and are visible to all registered CaseHub Users within the Platform.

Users are advised not to include confidential company information or sensitive personal data in such contributions. CaseHub moderates contributions as reasonably necessary to maintain a respectful and professional learning environment.

CaseHub also collects and processes data related to Users’ learning progress and engagement, including:

  • completion of training activities and modules,
  • participation in live sessions,
  • summaries of self-assessments, and
  • aggregated results of 360° feedback provided by colleagues.

This data is used to evaluate learning progress, enhance program quality, and provide personalized development insights.

Where a User’s participation is sponsored by their employer, CaseHub may share aggregated or summarized reports with the employer or Client organization, reflecting participation levels, progress, and development trends. These reports do not include the full text of User Contributions or detailed feedback from peers, but may include overall scores, engagement metrics, or learning summaries.

Processing of this data is based on the performance of a contract (delivery of the CaseHub program) and CaseHub’s legitimate interest in improving leadership development services.

Users can contact CaseHub at info@casehub.pro to exercise their data rights or request clarification about how their training-related information is processed.

Session recordings

Live CaseHub sessions may be recorded for educational and quality purposes. Users are informed in advance and may object to the use of any specific part of a recording by notifying CaseHub in writing within seven (7) days of the session (see Terms and Conditions, Clause 9).

4. HOW WE USE PERSONAL DATA

We process your data for the following purposes and legal bases:

Purpose Legal Basis
To create and manage user accounts, deliver programs, and provide support Performance of a contract
To process payments and issue invoices Performance of a contract / legal obligation
To send administrative messages (e.g., updates or policy changes) Legitimate interest
To improve our Platform and develop new services Legitimate interest
To send marketing newsletters and event invitations Consent (you may withdraw at any time)
To maintain the security and integrity of our systems Legitimate interest
To comply with applicable legal obligations Legal obligation

We never sell or rent personal data to third parties.

5. COOKIES AND TRACKING

We use cookies and similar technologies to ensure proper Platform operation and enhance user experience.

Essential cookies are required for functionality; optional cookies (if used) are subject to your consent.

You may adjust cookie preferences in your browser settings.

6. THIRD-PARTY PROCESSORS

We engage trusted third-party service providers who process data on our behalf under GDPR-compliant agreements. These include

  • Stripe Payments Europe Ltd. – for secure payment processing.
  • Zone Media OÜ – for website hosting and server infrastructure (located in Estonia).
  • Docsbot AI – for providing CaseHub’s AI-driven functionality based on publicly available CaseHub materials.
  • Vimeo, Inc. – for hosting, storing, and streaming video content embedded on our website and learning platform.
  • Google LLC (Google Analytics) – for collecting aggregated website usage statistics to help us understand and improve user experience.
  • LinkedIn Ireland Unlimited Company – for managing advertising cookies and analytics to measure and optimize our marketing campaigns.

Each processor acts only on our documented instructions and is bound by confidentiality and data protection obligations.

7. INTERNATIONAL DATA TRANSFERS

All data is primarily stored and processed within the European Union.
If data is transferred outside the EEA (for example, through third-party providers), such transfers occur only with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

8. DATA RETENTION

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law (e.g., accounting obligations).

When data is no longer needed, it is securely deleted or anonymized.

9. DATA SECURITY

We implement organizational and technical measures to protect personal data, including encryption, access control, and secure data hosting.

While we take reasonable precautions, no online service can be entirely risk-free, and Users are encouraged to maintain strong passwords and avoid sharing access credentials.

10. MARKETING COMMUNICATIONS

With your explicit consent, we may send newsletters, leadership insights, and event invitations approximately every two weeks.

You can withdraw your consent or unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us at info@casehub.pro.

Even if you unsubscribe, you may still receive essential service-related communications (e.g., billing, program updates).

11. YOUR RIGHTS

Under the GDPR, you have the following rights:

  • Access – request a copy of your personal data;
  • Rectification – correct inaccurate or incomplete data;
  • Erasure (“right to be forgotten”) – request deletion of your data;
  • Restriction – limit processing in certain circumstances;
  • Portability – receive your data in a structured, commonly used format;
  • Objection – object to processing based on legitimate interest;
  • Withdrawal of consent – at any time, without affecting prior lawful processing.

You can exercise your rights by contacting us at info@casehub.pro.
We will respond within one month as required by law.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or another supervisory authority in your country.

12. CHILDREN’S PRIVACY

CaseHub services are intended for adults (18+).
We do not knowingly collect personal data from minors. If we learn that a minor has registered, we will delete the account and associated data promptly.

13. POLICY UPDATES

We may update this Privacy Policy from time to time to reflect changes in legal, technical, or operational requirements. The latest version will always be available on our website, with the “Effective Date” updated accordingly.

If significant changes occur, we will notify you by email or through the Platform before the new policy takes effect.

14. CONTACT INFORMATION

For privacy-related inquiries, please contact:
info@casehub.pro