1. Who is responsible for your information
MAKE Institute of Future Industries, Tallinn, Estonia, is responsible for the personal information that is processed through studyatmake.com, through MAKE Institute of Future Industries accounts and through the admissions process. For any privacy question or request, contact admissions@studyatmake.com. We will explain how your request has been handled.
2. Who this notice covers
This notice covers people who visit the website, people who create an account, applicants, and people who contact us about admissions, fees or an application. It does not cover third-party websites or services that you reach through a link from our website. Those services have their own privacy notices.
3. Information we process
Depending on how you use MAKE Institute of Future Industries, we may process the following categories of personal information.
- Contact and account information, such as your name, email address, country of residence, sign-in activity and account settings.
- Application information, such as the School and intake you chose, your education history, your responses and your statement of motivation.
- Identity and supporting documents that you provide or are asked to provide, such as identity documents, certificates, transcripts, mark sheets and translations.
- Communications with MAKE Institute of Future Industries, including messages, support requests and notes of what was discussed.
- Application, admissions, enrolment and payment-record information, such as decision records, offers, invoices and payment references.
- Security, access and audit information, such as sign-in events, device and browser details, IP address and records of who accessed a record and when.
4. Why we use your information
We use personal information for the following purposes.
- To create, verify and protect your account.
- To receive, assess and administer your application, including checking documents and communicating a decision.
- To communicate with you about your application, your account, payments and next steps.
- To issue invoices, record payments and manage refunds where they apply.
- To meet legal, regulatory, accounting and record-keeping obligations.
- To prevent and detect fraud, misuse, duplicate applications and unauthorised access.
- To operate, secure, support and improve the website and the applicant portal.
- To establish, exercise or defend legal claims where this is necessary.
5. Our lawful bases
Where the law requires a lawful basis for processing, we rely on the following.
- Processing that is necessary to take steps at your request before an agreement, or to manage an agreement with you, such as handling your application, an offer or a payment.
- Processing that is necessary to comply with a legal obligation, such as accounting, tax or record-keeping duties.
- Processing that is necessary for our legitimate interests, such as protecting the integrity and security of the admissions process, preventing fraud, and improving our service, balanced against your rights and interests.
- Processing based on your consent, where we ask for it. You may withdraw consent at any time, without affecting processing that took place before the withdrawal.
6. Who can access your information
Access is limited to authorised MAKE Institute of Future Industries staff who need the information for a legitimate purpose, and it is granted on a least-privilege basis. Access to supporting documents is restricted to people who need them for admissions, enrolment, finance or compliance work. We use service providers that support the platform, such as hosting, database, email delivery, file storage and payment providers. They may process personal information only on our instructions and under contract. We do not sell personal information, and we do not share it for advertising purposes. We may disclose information to public authorities, courts or regulators where this is required or permitted by applicable law, including where it is necessary to support an immigration or visa process that you have started.
7. Where your information is held
Your information is stored in the systems that operate the MAKE Institute of Future Industries platform. Where a service provider processes information outside the European Economic Area, we rely on an appropriate safeguard, such as a European Commission adequacy decision or standard contractual clauses, and we limit the information that is transferred to what is necessary.
8. Storage and security
We use a combination of technical and organisational measures to protect personal information, including protected account sessions, email-code sign-in, access controls, private document storage, restricted administrative functions and audit records. No system can be guaranteed to be completely secure. Please keep your email account and your sign-in codes private, and tell us promptly at admissions@studyatmake.com if you believe your account has been accessed without your permission.
9. How long we keep information
We keep personal information only for as long as it is needed for the purposes described in this notice, and then delete it or make it anonymous.
- Application and admissions records are kept while your application and any related offer or enrolment are active, and afterwards for as long as is necessary to evidence how the decision was made and to meet legal obligations.
- Financial and invoicing records are kept for the period required by accounting and tax law.
- Security, access and audit records are kept for a limited period, and longer where they are needed to investigate a security incident or a suspected misuse.
Where information must be kept for a legal or accountability reason, we restrict access to it rather than deleting it, and we delete it when the reason no longer applies.
10. Your choices and rights
Subject to applicable law, you may ask to access, correct, erase, restrict, object to or receive a copy of your personal information, and you may withdraw consent where processing is based on consent. To make a request, email admissions@studyatmake.com. Please describe what you would like us to do. We will respond within one month, and if a request is complex we will tell you why more time is needed. We may need to verify your identity before we act, and some requests may be limited by a legal obligation to keep a record. You also have the right to complain to a data protection authority. In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You may complain there, or with the authority in your own country of residence.
11. Cookies and service technology
We use the technology that is necessary to run the website and the applicant portal. This includes a secure session cookie that keeps you signed in while you complete an application, and technical measures that protect the service against misuse. We do not use advertising or profiling cookies. If optional technologies are introduced in the future, we will provide the appropriate notice and choices before they are used.
12. Decisions and automated processing
We do not make admissions decisions by automated processing alone. Assessments are carried out by people who consider your application, and any automated checks are used only to support completeness, security or document handling.
13. Updates to this notice
We may update this notice when the service, the admissions process or the law changes. The current version is always the version published on studyatmake.com, and it applies from the date it is published. If a change is significant, we will make this clear on the website or by email.
14. Contact
For privacy questions, requests or concerns, contact admissions@studyatmake.com.