GDPR & Data Protection

Data controller

Gaarsia Academic Advisory · CVR 32964192 · Murergade 5, 2200 Copenhagen, Denmark · hello@gaarsia.com

Categories of data subjects

Website visitors, registered candidates, paying subscribers, assigned advisors, Gaarsia staff, and individuals who contact us for support or sales enquiries.

Personal data categories

Identification and contact data, account credentials, questionnaire responses, uploaded application documents, subscription and billing metadata, communications, technical logs, and cookie identifiers where consented.

Special categories

We do not intentionally request special-category data. If you include sensitive information in uploaded documents (for example health, ethnicity, or religious references in a motivation letter), you do so voluntarily and should share only what is necessary for your application pathway.

Automated decision-making

Pathway scores, tier bands, and Pathway Pro roadmap report drafts are produced by automated assessment logic from your submitted data. These outputs inform preparation; they do not determine legal rights or university admission decisions. You may request human review by contacting hello@gaarsia.com.

Subprocessors

Current categories include cloud hosting (Vercel, Supabase), payments (Stripe), email (Resend), and analytics (Google Tag Manager / Vercel Analytics, where consented). A current list is available on request at hello@gaarsia.com.

Security and breach notification

We maintain technical and organisational measures appropriate to the risk, including access controls and EU-hosted infrastructure where configured. If a breach is likely to affect your rights, we will notify you and regulators as required by law.

Exercising your rights

Email hello@gaarsia.com with your request and enough information to identify your account. We respond within one month unless extension is permitted. You may also contact Datatilsynet: datatilsynet.dk.

Last updated: 11 August 2026