Last updated: 4 October 2026

This policy explains what personal data we collect when you visit cadacademy.gr, buy from the store, enroll in a course or contact us, why we need it and what rights you have, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Data controller

Business name: Sokratis Legkikas, son of Panagiotis, trading as “CAD ACADEMY”
Address: 16 Agamemnonos Metaxa St. & 34 Georgiou Bakou St., 115 24 Palaio Psychiko – Nea Filothei, Athens
VAT no.: 139058277 · Tax office: KEFODE Attica · GEMI no.: 136393903000
Phone: 212 101 0625 · Email: info@cadacademy.gr (general), sales@cadacademy.gr (orders)

For any personal data matter, write to us at info@cadacademy.gr.

2. What data we collect

• Order details: full name, email, phone, billing and shipping address, and for invoices, company name, VAT number, tax office and profession.
• Payment details: card details are processed exclusively by the bank; we only receive confirmation of the transaction. For bank transfers, the proof of payment you send us.
• Student or educator status: student ID or certificate, for educational licenses only.
• Student details: account on the learning platform, progress, assignments, class participation, certificates.
• Communication: anything you write to us via forms, email, chat or phone, and applications for the Masterclass.
• Newsletter: email and preferences, only if you subscribe.
• Browsing data: IP address, device, pages visited, through cookies as described in the Cookie policy.

3. Why we use it and on what legal basis

• Order fulfillment (delivery, license activation, course enrollment, support): performance of a contract, Article 6(1)(b) GDPR.
• Invoicing and accounting records: legal obligation, Article 6(1)(c).
• Responding to questions and requests: pre-contractual measures or legitimate interest, Article 6(1)(b) and (f).
• Newsletter and promotional messages: consent, Article 6(1)(a). You can unsubscribe at any time via the link in every email.
• Analytics and site improvement: consent via the cookie banner.
• Security and fraud prevention: legitimate interest.

4. Who we share it with

We don't sell your data. We share it only with partners who help us provide the service and are contractually bound to protect it:

• Alpha Bank / Nexi, for card payments.
• Software manufacturers and distributors (e.g. Robert McNeel & Associates, Trimble, Chaos, Epic Games, Autodesk), when the license must be registered in your name or email.
• Courier companies, for shipping equipment.
• LearnWorlds, for the learning platform.
• HubSpot, for managing contacts, forms, chat and newsletter.
• Google Workspace, for email.
• The site's hosting provider and analytics tools (Jetpack, Hotjar), where you have consented.
• Our accountant and the tax authorities (AADE / myDATA), as required by law.

Some partners (e.g. HubSpot, Google) may process data outside the EU. In that case, the transfer takes place under GDPR safeguards, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long we keep it

• Orders and tax documents: as required by tax law (generally 5 years from the end of the fiscal year, or longer where the law requires).
• Student account and certificates: for as long as you keep access and for 5 years afterwards, so that we can confirm attendance.
• Communication and requests without a purchase: up to 2 years.
• Newsletter: until you withdraw your consent.
• Cookies: as stated in the Cookie policy.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent at any time. Write to us at info@cadacademy.gr· We respond within one month. If you believe your rights are being violated, you can file a complaint with the Hellenic Data Protection Authority (1–3 Kifisias Ave., 115 23 Athens, tel. 210 6475600).

7. Security

The site runs over an encrypted connection (HTTPS). Access to data is limited to those who need it, with separate credentials for each application.

8. Minors

Our services are intended for adults. Persons under 18 may enroll only with the consent of a parent or guardian.

9. Changes

If the policy changes materially, we'll note it on this page with a new date.