SeoulNova
Sign in

Who is responsible

The controller is Hyperity AB, company registration number 556911-5719. SeoulNova is the brand under which Hyperity AB runs its Korean courses. Send questions about your data to info@hyperity.com.

The site and your account run on the Tailfold platform, which Hyperity AB also runs. The same company is therefore responsible for your data in the courses and on the platform.

What we keep and why

  • Account: name, e-mail address, phone number if you give one, and your language. You sign in with a one-time code sent to your e-mail, so we hold no password for you. Legal basis: contract.
  • Enrolments: the courses and sessions you enrolled in and their status (awaiting payment, confirmed, on the waiting list, cancelled). We also record when your place was confirmed, when you accepted the terms of purchase and which version, whether you asked for the course to start within the withdrawal period, and when you withdrew from a purchase. If you came through a campaign link, we keep its campaign details (utm_source, utm_medium, utm_campaign). Legal basis: contract, and for the campaign details our legitimate interest in knowing which marketing works.
  • Interest list: if you register interest in a course without booking, we keep your e-mail and, if you give them, your name, level, preferred times and message, and the campaign link you came from (utm_source, utm_medium, utm_campaign). We use them to e-mail you when places open on the course. Legal basis: consent, which you give in the form. Every e-mail has a link that unsubscribes you in one click.
  • Payments: amount, currency, payment method, date, refunds and any disputes, Stripe's references to the payment and the details Stripe returns about it, for example the name, e-mail and country you gave at checkout. We never receive your card number. Legal basis: contract and accounting law.
  • Attendance: whether you attended each lesson. From Zoom we fetch when you joined, when you left and how long you stayed. This is a proposal until the teacher confirms it. Legal basis: contract.
  • Messages: what you write in the course's group chat and to teachers or the school. If the school has switched on its AI assistant, questions may be answered automatically by it. The assistant runs in the EU. Legal basis: contract.
  • Activity log: what has been done with your account and enrolments, for example that you accepted the terms or withdrew from a purchase, and when. Legal basis: our legitimate interest in being able to show what happened with a purchase.
  • Exercises and voice recordings: what you do in the course exercises, your voice recordings and the teacher's feedback. We use the recordings only for your teaching, and in marketing only if you have expressly said yes. Legal basis: contract, and for marketing your consent.
  • App notifications: if you use the Tailfold app, we keep an address for push notifications to your device. Legal basis: contract.
  • Newsletters: we send no newsletters. Apart from e-mails about your courses, you only get e-mails from the interest list, and only if you joined it.

Who processes the data for us

  • Cloudflare runs the site and the platform and counts the visitor statistics. Uploaded files, for example your voice recordings, are stored with Cloudflare in the EU.
  • Neon hosts the database, which is in Frankfurt.
  • Stripe (Stripe Payments Europe, Ireland) takes the payment. For some purposes, for example preventing fraud and complying with anti-money-laundering rules, Stripe is a controller in its own right, and Stripe's own privacy policy then applies.
  • SendGrid (Twilio) sends e-mail from the platform, for example sign-in codes, confirmations and receipts. Processing takes place in the USA.
  • Zoom for the lessons. If a lesson requires registration, we send your name and e-mail to Zoom, and after the lesson we fetch Zoom's participant report. Zoom is a US company.
  • Amazon Web Services (Bedrock) in Frankfurt runs the school's AI assistant, if it is switched on. The data does not leave the EU.
  • Expo sends push notifications to the Tailfold app, if you use it. Processing takes place in the USA.

The providers process the data under data processing agreements with us. When a provider processes data in the USA, the transfer relies on the EU–US Data Privacy Framework if the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

How long we keep it

  • Account, messages, exercises and voice recordings: as long as you have an account. Messages may be removed sooner if the school has set a retention period for the chat.
  • Payments and accounting records: seven years from the end of the calendar year in which the payment was made, as Swedish accounting law requires.
  • Enrolments, attendance and the activity log: as long as you have an account. If you delete your account, they remain without anything that says who you were.
  • Interest list: until you unsubscribe, or until the course you asked about has started without you booking. We always delete an interest sign-up at the latest 12 months after our last contact with you.

Cookies and visitor statistics

The site only uses cookies it needs to work. They are for signing in (tf_site_session and tf_site_pkce on the site, tf_idp_session on the sign-in service auth.tailfold.com) and for your language choice (tf_locale). The site has no analytics or advertising cookies, which is why we do not ask for consent to cookies.

We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and keeps no personal data about you. We only see totals, for example how many people visited a page. Legal basis: our legitimate interest in knowing which pages are used.

Your rights

When you are signed in, you can do this yourself under You:

  • download everything we hold about you with Download my data: account, enrolments, payments, attendance, exercises and messages;
  • change your name and phone number;
  • delete your account with Delete my account. Your name, e-mail and phone number are removed, as are your sign-in, your messages, your exercises and voice recordings, and your interest sign-ups. Enrolments, attendance and payments remain without anything that says who you were, because we must be able to show our accounts. If you are enrolled in a course that has not ended, you first cancel it or contact us.

You also have the right to ask for correction and restriction, and to object to processing based on our legitimate interest. You can withdraw a consent at any time, for example with the unsubscribe link in the interest-list e-mails. Contact us at info@hyperity.com. You can complain to the Swedish Authority for Privacy Protection (IMY), or to the data protection authority where you live.