Privacy policy
Last updated: 9 November 2026
Controller
The controller under the General Data Protection Regulation (GDPR) is:
HansDivisionGroup Pty Ltd
trading as Aegentra
6 Opal Court
Bentleigh East VIC 3165
Australia
Represented by its director, Harry Sidhu. Phone: +61 3 9956 9399. Email: contact@aegentra.de.
For any question about privacy or to exercise your rights, email contact@aegentra.de.
What data we process and why
Enquiries
When you write to us through the contact form or by email, we process the information you give us, such as your name, email address and message, to answer your enquiry. Messages sent through the contact form are delivered by email to our mailbox contact@aegentra.de. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Course orders
When you order a course, we process your name, email address, billing address and the order data (course and format chosen, price, VAT, time of order). We need these data to perform the contract, send you an order confirmation and invoice, and set up your enrolment (Art. 6(1)(b) GDPR). We also keep order and invoice data to meet statutory retention duties (Art. 6(1)(c) GDPR).
Your name, email address and billing address are required to place an order. Without them we cannot conclude the contract.
Payment through Stripe
Payment is handled by the payment service provider Stripe on its checkout page (Stripe Checkout). You enter your card and other payment details directly with Stripe; Stripe processes them and they are not passed to us. Stripe sends us the information we need to handle the order, such as name, email address, billing address, amount, VAT and payment status (Art. 6(1)(b) GDPR). Stripe also processes data for fraud prevention and payment security; Stripe's privacy policy applies to that: stripe.com/privacy.
Enrolment with PECB
Our courses are official PECB courses delivered through the PECB platform myPECB. So that PECB can create your enrolment and exam, we share your name, email address and the course you booked with PECB (Art. 6(1)(b) GDPR). PECB processes your data for the use of myPECB, the exam and certification under its own privacy policy.
Hosting and server logs
This website is hosted by Vercel Inc., a company based in the United States. When you open a page, Vercel processes technically necessary data in server logs, in particular your IP address, the date and time of the request, the address requested, the previous page (referrer) and information about your browser and operating system. This is needed to deliver the website and keep it stable and secure (Art. 6(1)(f) GDPR).
Ahrefs Web Analytics
We use Ahrefs Web Analytics to produce statistics on how this website is used. It sets no cookies and stores nothing on your device. It processes the address of the page visited, the previous page (referrer) and information about your browser and screen. Ahrefs derives an approximate city-level location from your IP address and then discards the IP address. The legal basis is our legitimate interest in measuring use of the website with minimal data (Art. 6(1)(f) GDPR).
Our mailboxes run on Microsoft 365. Emails you send us and messages from the contact form are processed and stored there (Art. 6(1)(b) and (f) GDPR).
Recipients and processors
We share personal data only with the following recipients, and only as far as needed for the purposes above:
- Stripe: payment processing and fraud prevention
- PECB: delivery of the courses through myPECB, enrolment, exam and certification
- Vercel: hosting of this website
- Microsoft (Microsoft 365): email mailboxes
- Ahrefs: cookieless website analytics
Where these providers process data on our behalf, they do so on our instructions under a data processing agreement (Art. 28 GDPR). We pass data to other third parties only where the law requires it.
International transfers
Our company is based in Australia, so your data are also processed in Australia. The European Commission has not adopted an adequacy decision for Australia. We base transfers to Australia on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).
For providers based in the United States, transfers rely on the EU-US Data Privacy Framework where the provider is certified under it (Art. 45 GDPR), and otherwise on Standard Contractual Clauses. For recipients in other countries without an adequacy decision we also use Standard Contractual Clauses. You can ask us for a copy of these safeguards.
How long we keep data
We keep personal data only as long as needed for the purpose concerned. We keep contract, order and invoice records for the statutory retention periods, in Germany up to ten years under section 147 of the Fiscal Code (Abgabenordnung, AO) and section 257 of the Commercial Code (Handelsgesetzbuch, HGB). We delete enquiries once they have been dealt with and are no longer needed, unless a retention duty applies.
Your rights
Under the GDPR you have the right to
- access the data we hold about you (Art. 15 GDPR),
- have inaccurate data rectified (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing (Art. 21 GDPR), and
- withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).
Right to object
Where we process data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds or need the data to establish, exercise or defend legal claims.
To exercise your rights, simply email contact@aegentra.de.
Right to complain
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR). In Germany this is the data protection supervisory authority of the federal state (Land) where you live.
No automated decision-making
We do not make decisions based solely on automated processing, including profiling (Art. 22 GDPR).
Cookies
This website sets no cookies. For details, including cookies on the Stripe checkout page, see our cookie policy.