Student Data Privacy Notice

Effective Date: 16 October 2026

Your privacy is important to us. This notice explains how Bridge Technologies collects, uses, stores, and protects your personal information when you use our software platform.

1. Your Privacy

We are committed to keeping your personal information private and secure. Information you provide through Bridge Technologies will only be accessed and used for legitimate educational, administrative, technical, and support purposes associated with the operation of the platform. We will not sell, rent, or otherwise disclose your personal information to unauthorized third parties.

2. Information We Collect

Depending on how you use the platform, we may collect information such as:

• Your name and student identification information
• Contact information, such as your email address
• Course, class, or program information
• Login and account information
• Information you submit or upload through the platform
• Academic or administrative information necessary to provide the platform's services
• Technical information, such as login dates, device information, and system activity, where necessary for security and platform functionality

We collect only information that is reasonably necessary to provide and maintain the platform and its intended educational services.

3. Who Can Access Your Information

Your information will be accessible only to authorized individuals who require access to perform their assigned responsibilities.

Depending on the purpose of the information, authorized users may include:

• You, as the student or platform user
• Authorized instructors, teachers, or academic staff
• Authorized administrators or designated personnel of EU Business School
• Authorized technical and support personnel who maintain or secure the platform
• Service providers who are contractually required to protect the information and use it only to provide services on behalf of EU Business School

Access to information is limited according to the person's role and responsibilities. Unauthorized individuals, students, or members of the public will not be given access to your personal information unless disclosure is required or permitted by applicable law.

4. Where Your Information Is Stored

Your information is stored electronically on secure servers operated by Amazon Web Services and located in Frankfurt, Germany. Appropriate technical and organizational safeguards are used to protect information stored on these systems against unauthorized access, loss, misuse, alteration, or disclosure. If your information is stored or processed outside your country or jurisdiction, applicable legal and contractual safeguards will be used to protect your information.

5. How We Protect Your Information

We take reasonable measures to protect your information, including appropriate access controls, authentication, security monitoring, encryption, and other safeguards appropriate to the nature of the information. Access to personal information is granted only when necessary and is subject to appropriate confidentiality and security requirements. While we take reasonable measures to protect your information, no electronic system or method of transmitting information over the internet can be guaranteed to be completely secure.

6. How Your Information Is Used

Your information may be used to:

• Provide access to educational and platform services
• Communicate with you about your account, courses, or platform activity
• Support instructors and authorized administrators
• Maintain and improve the security, reliability, and functionality of the platform
• Provide technical assistance and customer support
• Meet applicable legal, regulatory, or institutional requirements

We will not use your personal information for purposes unrelated to the operation of the platform without appropriate authorization or notice.

7. Data Retention

Your information will be retained only for as long as reasonably necessary to provide the services, fulfill legitimate educational or administrative purposes, comply with applicable legal obligations, resolve disputes, and enforce applicable agreements or policies. EU Business School will maintain and apply a data-retention and deletion schedule appropriate to the information collected through the platform.

8. Your Privacy Rights

Depending on applicable law and institutional policies, you may have rights regarding your personal information, including the right to request access to, correction of, or deletion of certain information. To ask questions about your information or exercise applicable privacy rights, please contact:

Privacy Contact: Bridge Technologies Ltd — Privacy (Platform Operator)
Email: privacy@bridgecampus.io
Organization: Bridge Technologies Ltd

9. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes to the platform, our practices, or applicable legal requirements. When significant changes are made, we will provide an appropriate notice to users. By using Bridge Technologies, you acknowledge that you have been provided with this Privacy Notice and understand how your information may be collected, used, accessed, and stored as described above.

Website visitors and demo requests

This section covers the website at bridgecampus.io and its demo-request form. The platform itself is covered by sections 1 to 9 above.

Who is responsible

Bridge Technologies Ltd is the controller for the personal data described in this section. Contact: privacy@bridgecampus.io.

What we collect and why

When you request a demo, we collect your name, work e-mail address and institution, and, if you give them, your role and a message. We need your name, e-mail address and institution to answer the request; the role and message are optional. We use these details only to arrange and hold your demo. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).

When you visit the website, our hosting provider records access logs (including your IP address, the page requested and the time) and our firewall evaluates each request to keep the site and the form secure and to stop spam. The legal basis is our legitimate interest in the security of the website (GDPR Article 6(1)(f)).

The site's firewall keeps records of blocked or flagged requests, including the IP address and request headers, for 30 days on AWS servers in the United States (N. Virginia), where the firewall runs.

The website sets no cookies, uses no analytics and loads nothing from third parties.

Who receives it

Amazon Web Services, as our processor, hosts the website, runs the form and delivers the e-mail. Your request is delivered by e-mail to our mailbox, which is provided by Google Workspace (Google Ireland Limited), also as our processor.

Where it is processed

The website's storage and the form are in Amazon Web Services' Frankfurt, Germany region. Pages are delivered through Amazon CloudFront edge locations in Europe and North America. Our mailbox is hosted by Google Workspace. Transfers outside the European Economic Area are covered by the AWS and Google data processing terms and the European Commission's Standard Contractual Clauses.

How long we keep it

Access logs and firewall records are deleted after 30 days. The website does not store your request: it is sent once, as an e-mail to our mailbox, and the website's own logs record only whether it was delivered, for 30 days. We keep the demo-request e-mail and our correspondence about it for 12 months after our last contact with you, or until your institution becomes a customer, and then delete it.

Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to lodge a complaint with a data protection supervisory authority. To exercise these rights, e-mail privacy@bridgecampus.io; we answer within one month.