Last updated: August 4, 2026
HOLA25 SRL lets you exercise the rights provided by Regulation (EU) 2016/679 (the "GDPR") and Romanian Law No. 190/2018. These rights apply to data we control; some requests may be limited by another person's rights or by a legal obligation.
The privacy notice gives you information. Reading or accepting it does not mean you consent to every processing activity. We request separate consent only for purposes that require it, such as marketing or optional cookies. Withdrawing such consent does not stop processing required for a contract, security, or the law. Live-lesson recording is a mandatory product characteristic, separately accepted before checkout; that acceptance proves notice and is not presented as the GDPR ground by itself. The grounds are explained in the Privacy Policy.
You may ask us to confirm processing, provide a copy, and explain purposes, categories, recipients, sources, retention, and transfers.
You may correct inaccurate data and complete incomplete data. You can also edit eligible profile fields in account settings.
You may request erasure when Article 17 GDPR applies. The right is not absolute: we may restrict and retain data required by law, a legal claim, fraud prevention, or another participant's rights.
Live-lesson recordings: in the product, the teacher and participants authorised for a segment may access the file under the product rules, while authorised Hola25 personnel may review it only for safety, refunds, or disputes. Authenticated payer-parent access is determined from the technical association among payer, child, booking or seat, and available records. The file may cover a wider or narrower interval than actual attendance, may contain delays, gaps, or errors, and in a group lesson may include other authorised participants. Report any access or boundary that appears incorrect immediately. The teacher, attendee, or person validly exercising that attendee's rights may request a copy or early erasure, subject to the rights of other participants and assessment of the request. The ability to access, play back, internally review, or publish the file through Hola25 expires automatically no later than 90 days after the lesson, and the file becomes unavailable. The technical process then attempts deletion; if deletion is not confirmed, the file remains blocked and inaccessible while the operation is retried and escalated. A dispute or legal duty does not extend retention of the file in the current configuration. Separate acceptance, attendance, payment, refund, and dispute evidence may remain restricted for longer, without access to the audio-video file. We do not currently intentionally extend retention of the video file beyond the 90-day maximum and do not apply a legal-hold mechanism to it. Such a mechanism may be introduced later for litigation, investigations, legal duties, or the defence of rights only after technical activation and an update to the applicable notice and terms, and acceptance where required; it would not extend ordinary participant access, and internal access would be limited to authorised people with a need to review it. In a group, each segment's authority is fixed when it starts for the accepted participants present then. If a new participant joins later, the current segment stops and a new one starts for the cohort then present; the new participant is notified before inclusion and receives no access to the earlier segment. A person who is already authorised may leave or reconnect without that event alone rotating the segment or expanding its authority, and remains authorised for the entire existing segment until a later rotation. The shared segment may include authorised participants' image, voice, and contributions and must not be redistributed. Any copy is provided while protecting their rights. Only audio, video, and screen streams you enable are captured; the camera may remain off where the room permits. A technical error may prevent the recording from starting, continuing, synchronising, or being saved. Processing may take time, and there may be offsets of a few seconds, gaps, interruptions, or incomplete files. Hola25 does not guarantee exact synchronisation, completeness, or availability of a recording. The status shown in the room is the applicable status; if the product requires recording and the system cannot confirm it, the lesson may be stopped and there may be no playable file. Report any problem without delay through the support channel. Joining the lesson and accepting recording does not authorise public or advertising use: that requires separate express permission from every identifiable person and, for a minor, their parent or legal guardian where applicable.
Transcript and AI summary: you may request a copy of the transcript and published version concerning you, rectification or restriction of an inaccurate summary, and early erasure where GDPR applies. We may redact another person's data. We do not provide the transcript to a delegated parent through this function. Access to the temporary artifact expires no later than 90 days, when its objects become unavailable. Subsequent erasure is handled according to the data category, the applicable request, and any legal duty or dispute. A separately published copy in the student file follows deletion of that file or event. A dispute or legal duty may preserve only the necessary restricted evidence, without reopening access to the temporary content.
You may ask us to limit use of data, for example while we verify its accuracy or assess an objection. Restricted data is marked and available only to authorised roles.
For data you provided that is processed automatically on consent or contract, you may request a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests. An objection to direct marketing takes effect without justification; you can also change that preference in account settings.
Where a purpose relies on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful beforehand.
You may request human intervention and challenge a solely automated decision that produces legal or similarly significant effects. Eligibility rules, security or fraud signals, moderation tools, search, ordering, and recommendations may involve automated processing and, where applicable, profiling. A technical or payment check may automatically stop an operation; you may request an explanation and, where Hola25 owns the decision, human review. We do not use an automated result as a final decision with legal or similarly significant effects without the applicable safeguards and rights. The summary draft is generated automatically, but publication requires teacher review; we do not use the transcript or summary for grades, ranking, protected-trait inference, or solely automated decisions.
A parent may request their own data and data for a child account they manage after we verify the relationship. We distinguish the adult actor and payer from the child beneficiary. We do not disclose another person's data or information that would unjustifiably harm the rights of the child or teacher.
For conversations, lessons, reviews, and disputes involving several people, we may provide a redacted copy and anonymise, rather than erase, the history needed by the other participant.
A request to Hola25 covers our systems and data we manage through the infrastructure, payment, app-store, and file services identified in the Privacy Policy recipient register. For the video room, we use the Live Lesson Service identified in that register. We may ask for details needed to find a transaction or booking and will instruct the relevant processor where it handles data for us.
If a teacher received and retained data outside Hola25 after a tutoring listing contact, that teacher handles the request for their independent system. We can help identify the channel but cannot erase data from a teacher's separate system.
On account deletion, we assess each category and erase or anonymise operational data that is no longer needed. A receipt acknowledgment or response does not mean that every permitted erasure or anonymisation operation is complete; we explain the status and any applicable limitation without describing pending work as completed. The following categories may be locked from ordinary use and remain available only to authorised personnel:
A legal or fiscal hold temporarily overrides erasure. Held data is not used for marketing or recommendations and is erased or anonymised when the legal basis ends.
Email contact@hola25.com, preferably from your account address. State the right you are exercising and the account, child, booking, or transaction concerned. We request only what is necessary and proportionate to verify identity; do not send identity-document copies unless we ask through an appropriate channel.
Submit a GDPR requestWe respond without undue delay and no later than one month. For a complex or numerous request, we may extend by up to two further months and notify you within the first month of the extension and its reasons. If we do not act on the request, we communicate the reasons, the right to complain, and the available judicial remedy within one month. Requests are free, subject to the GDPR's limited exception for manifestly unfounded or excessive requests.
If you are dissatisfied, you may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro, or to the authority in the Member State of your habitual residence, place of work, or the alleged infringement, without losing your right to a judicial remedy.