Neurokool

Version dated 4 November 2026

Privacy and personal data

This notice explains what information we need to answer enquiries and organise training, who can access it and how to exercise your rights.

The controller is GP Training Center OÜ, registry code 16809287, VAT number EE102652055. Neurokool is its training brand. Address: Vabaduse väljak 2, 10146 Tallinn, Estonia. For data questions: andrei.gritskov@gmail.com, +372 521 2999.

  • From the form and correspondence: your name, business contact details, company, number of participants, selected programme, language, enquiry and the address of the enquiry page. Do not include personal identification numbers, health information, passwords or confidential client information in the message field.
  • When arranging training: necessary customer and participant details, attendance, assignments, assessments and issued training documents. Information comes from the participant or their employer. We request an identification number separately only when needed for a training document or legal obligation.
  • To operate and protect the website, the server processes technical request information such as an IP address and browser details. If you consent to analytics, Google Analytics receives information about pages visited, website interactions, device information and cookie identifiers.
  • Answering an enquiry, preparing an offer and arranging training: steps before entering a contract or performing a contract where you are the contracting party (GDPR 6(1)(b)). For company representatives and employees trained under an employer's contract, we rely on GP's and the employer's legitimate interests in business communication and arranging training (6(1)(f)).
  • Training records, issuing documents and accounting: performance of a contract and applicable legal obligations (6(1)(b), 6(1)(c)); the legitimate interest above also applies to employee information under an employer's contract.
  • Security, preventing misuse and protecting rights: our legitimate interest in running a reliable service and protecting legal claims (6(1)(f)). Website analytics: your separate, voluntary consent only (6(1)(a)). An enquiry is not consent to marketing messages.

Website enquiries are received by the CRM on GP Training Center OÜ's server. Authorised staff and, where necessary, trainers and technical or accounting support specialists may access the information needed for their work, not for their own advertising.

The employer receives necessary information about its employees' attendance and the outcomes of the agreed training. We share information with Töötukassa, other funders and public authorities only where there is an applicable basis and only to the extent necessary.

Google Analytics starts after consent. Google may process analytics information outside the European Economic Area. Google's processing terms and international transfer mechanisms are published below; you can also ask us for the applicable information. Do not send secret information through the form.

If you follow a link to Telegram, YouTube or another external service, that service's rules also apply. You do not have to use those services to contact us: the form, email and telephone are available.

  • Enquiries that do not lead to a contract are kept for up to 12 months after the last substantive contact, then deleted or anonymised. Information needed for a dispute may be retained until the dispute is resolved and the applicable claims period expires.
  • Accounting records and business documents needed to explain a transaction are kept for 7 years from the end of the relevant financial year. Statutory rules determine the period for documents relating to long-term rights and obligations.
  • Training documents and evidence of participation and results are retained only to the extent and for the period necessary to verify training, issue or correct documents and meet applicable legal or funder requirements. Course-specific requirements are communicated to the participant and employer when the course is arranged; the information is not used indefinitely for marketing.

Google Analytics is not loaded without consent. If you consent, _ga and _ga_* analytics cookies are used for visitor statistics and last for up to 12 months. Your analytics choice is stored in the browser's local storage for up to 12 months so that we can respect your decision.

You can enable or disable analytics using “Analytics settings”. Refusing does not prevent you from using the website or sending an enquiry. Withdrawing consent stops further analytics in this browser and does not affect the lawfulness of earlier processing. You can also delete cookies in your browser settings. Information already received by Google is handled according to the service's applicable settings and terms; contact us about deletion requests.

You may request access, correction, deletion or restriction, object to processing based on legitimate interests and obtain portable information where the law provides for it. You may withdraw consent at any time. Deletion can be limited by recordkeeping obligations and the need to protect legal claims.

Email andrei.gritskov@gmail.com. We may request information necessary to verify your identity and normally respond within one month. You may complain to Estonia's Data Protection Inspectorate (AKI). Required form fields are marked with an asterisk (*): they are needed to process the enquiry and prepare an offer. Other fields are optional. Decisions producing legal or similarly significant effects are not made solely by automated means.