At Culinary Arts Center of Azerbaijan (CÁSÁ), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, share, and safeguard your personal information, as well as your rights regarding your data.

1.    Who We Are

CÁSÁ, located in Baku, Azerbaijan, is a culinary arts center offering a range of professional programs. As a “data controller,” CÁSÁ is responsible for deciding how we use personal information. This policy applies to all data collected by or on behalf of CÁSÁ.

2.    Data Protection Officer

For any questions or concerns regarding this policy or how your data is handled, please contact our Data Protection Officer (DPO):

                 Email: rahman.piriyev@casa.az

                 Address: Culinary Arts Center of Azerbaijan (CÁSÁ), Level 2, Deniz Mall. 

                                 Mikayil Huseynov Avenue 26b, Baku, Azerbaijan.

We encourage you to reach out to us first if you have concerns. You also have the right to lodge a complaint with a relevant data protection authority.

3.   What Is Personal Data?

Personal data refers to any information about an individual that can identify them. Examples include your name, address, contact details, and payment information. Anonymous data, where identities have been removed, is not considered personal data.

4.   Data Protection Principles

We adhere to the following principles when handling your data:

  • Lawful, fair, and transparent use.
  • Collection for specified and legitimate purposes.
  • Use limited to the purpose for which it was collected.
  • Accuracy and updating of data.
  • Secure storage and appropriate retention periods.

5.   How We Use Your Personal Data

We use your personal data in the following ways:

  • Contractual Obligations: To provide services, such as enrollment in our programs, event participation, or accommodation arrangements.
  • Legal Obligations: To comply with applicable laws and regulations, including visa requirements.
  • Legitimate Interests: For purposes such as improving services, internal business operations, and marketing.
  • Consent: For sending marketing materials and special offers, where you have provided explicit consent.

6.   The Personal Data We Collect

We may collect the following categories of data depending on your interaction with CÁSÁ:

Enquiries

When you contact us for information or to inquire about our services or programs, we use the personal data you provide to respond to your request. This is necessary to ensure you receive the information you need, which is in our legitimate interest.

Application

If you apply to study at CÀSÀ or request accommodation, we may collect the following personal data to evaluate and process your application:

  • Personal contact details (e.g., name, title, address, phone numbers, and email).
  • Identification numbers (e.g., NRIC or passport number).
  • Date of birth.
  • Gender and marital status.
  • Nationality and country of residence.
  • Previous qualifications, education, and employment history.
  • Funding information.
  • Photo and images.
  • Biometrics (if applicable).
  • Family or guardian information and emergency contact details.

This data is collected as part of our legitimate interest to consider and process your application. Additionally, we may ask about any criminal convictions as required by law to fulfill our legal obligations.

Sensitive Personal Data

We may also collect and process sensitive personal data as defined under relevant data protection regulations, including:

  • Race or ethnicity.
  • Religion or belief.
  • Health-related information.
  • Records of misconduct or disciplinary action.
  • Criminal offense records.

This sensitive data is handled with the utmost care and used only for specific purposes. It will not be shared with third parties without your explicit consent unless necessary to protect your interests or comply with legal requirements.

Study and Accommodation

If you enter into a contract with CÁSÁ for study or accommodation, additional personal data may be collected, including:

  • Bank account details.
  • Billing address.
  • Payment information (e.g., credit card details).

This data, alongside the information collected during your application, is used to fulfill our contractual obligations.

We also collect information related to visa applications and immigration status, as required by law.

Throughout your studies, we may gather data about your academic progress and experience. This helps us monitor the quality of our services and fulfill our contract with you.

If necessary, we may collect health information to ensure appropriate arrangements for your welfare, attendance, or accommodation, complying with both legal and contractual requirements.

We may also collect your personal data if you are named as an emergency contact for another individual, as this is in the vital interests of that person.

For safety and security, CCTV is in use across CÁSÁ's premises.

If you use an agent to arrange your application and study with us, we may receive the above data from the agent.

Marketing

With your explicit consent, we may use your personal data to:

  • Share updates about new or existing programs and special offers.
  • Send surveys or questionnaires to understand your needs better.

You can opt out of marketing communications at any time by following the unsubscribe links or contacting us directly.

Internal Business Purposes

Your personal data may also be used for internal purposes to help us operate, monitor, and improve our services. Where possible, data is anonymized. For further details, please contact us using the information provided in this notice.

Automated Technologies

When you interact with our website, we may collect technical data about your device, browsing behavior, and patterns through cookies and similar technologies. For more information, refer to our Cookie Policy.

Failure to Provide Personal Data

In cases where providing personal data is a legal or contractual requirement, failure to do so may prevent us from delivering the requested services. If this occurs, we will inform you at the time.

For any further questions or concerns regarding the collection and use of your personal data, please contact CÁSÁ’s Privacy Officer.

7.   When and How We Share Your Personal Data

Your personal data may be shared with:

  • Service Providers: For services like payment processing or IT support.
  • Agents: If you engage with CÁSÁ through an authorized agent.
  • Business Partners: For program-related services.
  • Regulators and Authorities: To comply with legal obligations.
  • Group Entities: Within CÁSÁ or affiliated entities for operational purposes.

8.   International Data Transfers

As an international organization, your data may be transferred to and processed in countries outside Azerbaijan. We ensure appropriate safeguards are in place to protect your data in such instances.

9.   Data Security

We implement robust technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

10.  Storage and Retention

Your personal data will be retained only as long as necessary for the purposes for which it was collected or as required by law.

11.  Your Rights

As a data subject, you have the right to:

  • Access your personal data.
  • Request corrections to inaccurate data.
  • Request deletion of your data, subject to legal obligations.
  • Restrict or object to the processing of your data.
  • Withdraw consent where applicable.
  • Lodge complaints with a supervisory authority.

12.  Changes to This Privacy Policy

CÁSÁ reserves the right to update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will be available on our website.

 

For the complete Personal Data Protection (PDPA) Notice, click here to find out more: