Privacy policy

PRIVACY POLICY
Last updated: 23 February 2026

The Soltesz Institute (operated by PSP Angels Management Limited) ("We", "Us" or "Our") is committed to protecting and respecting Your privacy.

This Privacy Policy explains how We process Your personal data when You:
(i) use Our Website https://www.solteszinstitute.com;
(ii) register for or participate in Our educational programmes, training courses, workshops or events;
(iii) communicate with Us by phone, email, social media or otherwise.

This Privacy Policy should be read together with Our Website Terms and Purchase Terms and Conditions.

We process Your personal data in compliance with Regulation (EU) 2016/679 (“GDPR”) and, where applicable, the UK GDPR and Data Protection Act 2018.

For the purposes of the GDPR and UK GDPR, the data controller is:
PSP Angels Management Limited
Sunset Gardens 102, Exegerseos, Larnaca, 7560, Cyprus
Email: info@solteszinstitute.com

DEFINITIONS
“You” may refer to:
 a visitor of Our Website (“Visitor”);
 an individual registering for or attending Our courses or events (“Participant”);
 a corporate client purchasing educational services (“Client”);
 a speaker, collaborator or business partner (“Partner”).

“Website” means https://www.solteszinstitute.com
“Services” means educational courses, training programmes, workshops, events, digital materials, and related services provided by the Soltesz Institute.

LEGAL GROUNDS FOR PROCESSING
We process personal data on the following bases:
 Performance of a contract (Article 6(1)(b) GDPR);
 Compliance with legal obligations (Article 6(1)(c) GDPR);
 Legitimate interests (Article 6(1)(f) GDPR);
 Consent (Article 6(1)(a) GDPR), where required.

WHAT INFORMATION DO WE PROCESS?
Information You provide
 Name
 Email address
 Telephone number
 Company name and role
 Billing details
 Course preferences
 Correspondence

Payment information
Payments are processed by Stripe Payments Europe Ltd or its affiliated entities (“Stripe”).
Stripe acts as an independent payment service provider and may act as a controller of certain payment data. We do not receive or store full payment card details.

We may receive limited transaction information such as:
 Payment confirmation
 Transaction ID
 Payment status
 Billing name and email

Website usage data
 IP address
 Browser type/version
 Device data
 Pages visited
 Interaction data

Event data
Attendance records and, where applicable, photographs (subject to notice).
We do not conduct credit reference checks or AML screening in the ordinary course of providing educational services.

PURPOSES OF PROCESSING
Provide Services

To register Participants, deliver courses, administer payments, issue invoices, process refunds and manage cancellations or disputes.
Legal basis: Contract.

Legal obligations
Accounting and tax compliance.
Legal basis: Legal obligation.

Service improvement
Website analytics and course development.
Legal basis: Legitimate interests.

Marketing
Professional updates and course information.
Legal basis:
 Consent where required; or
 Legitimate interest for professional/B2B communications, subject to opt-out.

Customer service

Responding to enquiries and complaints.
Legal basis: Legitimate interests.

Recruitment
Assessing job applicants.
Legal basis: Legitimate interests.

COOKIES
Our Website uses cookies to improve functionality and analyse performance. Non-essential cookies are placed only with consent. Please see Our Cookie Policy.

DISCLOSURE OF INFORMATION

We may share personal data with:
 Service providers (IT, hosting, email);
 Stripe for payment processing;
 Professional advisers;
 Event venues or online course platform providers;
 Competent authorities where legally required.

In the event of a payment dispute or chargeback, relevant transaction data may be shared with Stripe and financial institutions solely to resolve the dispute. We do not sell personal data.

INTERNATIONAL TRANSFERS

Some providers (e.g., Stripe or cloud providers) may process data outside the EEA or UK.
Where this occurs, appropriate safeguards are implemented, including:
 Standard Contractual Clauses;
 UK International Data Transfer Agreement;
 Adequacy decisions where applicable.

SECURITY
We implement appropriate technical and organisational measures including SSL encryption and access controls.

DATA RETENTION
We retain data only as necessary:
 Contract and billing data: up to 6 years after termination;
 Marketing data: until consent withdrawn or objection made;
 Recruitment data: up to 6 months;
 Analytics data: in accordance with cookie settings.

YOUR RIGHTS
You have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
Contact: info@solteszinstitute.com
We respond within one month, subject to lawful extensions.

COMPLAINTS
You may lodge a complaint with:
 The Office of the Commissioner for Personal Data Protection (Cyprus); or
 The UK Information Commissioner’s Office (where UK GDPR applies).