GDPR Privacy Policy for www.StudyCard.school
Introduction
www.StudyCard.school (hereafter referred to as “StudyCard” or “we”) is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) of the European Union (EU) and the Algemene Verordening Gegevensbescherming (AVG) of the Netherlands. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
Data Controller
The data controller responsible for processing your personal data is:
StudyCard
privacy@studycard.school
For data protection inquiries, you can contact our Data Protection Officer (DPO) at [DPO Contact Email].
What Data We Collect
Personal Data
We may collect the following personal data:
- Name
- Email address
- Contact information
- Account details (e.g., username, password)
- Academic information (e.g., school, courses, study materials uploaded)
- Payment information (if applicable)
Non-Personal Data
We may collect anonymised or aggregated data, such as:
- Browser type and version
- Device information
- IP address
- Usage statistics
How We Use Your Data
We collect and use your data for the following purposes:
- Service Delivery: To provide access to our platform, including account creation, content sharing, and user interaction.
- Communication: To send important updates, respond to inquiries, and deliver notifications.
- Payment Processing: To process payments securely through trusted third-party payment processors.
- Improvement and Analytics: To analyze usage patterns and improve our services.
- Legal Compliance: To comply with legal obligations and protect against fraudulent or unauthorized use of our platform.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you explicitly consent to specific data processing activities.
- Contractual Necessity: When processing is necessary to perform the services outlined in our terms and conditions.
- Legal Obligation: When we are required to process data to comply with applicable laws.
- Legitimate Interests: When processing is required for our legitimate business interests, provided it does not override your fundamental rights.
Sharing Your Data
- We don’t share your data with others.
- We do not sell your data to third parties.
International Transfers
If your data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as:
- Binding corporate rules (BCRs)
- Standard contractual clauses (SCCs)
- Adequacy decisions by the European Commission
Data Retention
We retain your data only as long as necessary for the purposes outlined in this policy or to comply with legal obligations. When no longer needed, your data will be securely deleted or anonymised.
Your Rights
Under GDPR/AVG, you have the following rights:
- Right to Access: Request access to your personal data.
- Right to Rectification: Correct inaccuracies in your personal data.
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
- Right to Restrict Processing: Request limitation of how we process your data.
- Right to Data Portability: Receive your data in a machine-readable format or have it transferred to another controller.
- Right to Object: Object to certain processing activities.
- Right to Withdraw Consent: Withdraw your consent at any time.
- Right to Lodge a Complaint: File a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your user experience. For detailed information, refer to our [Cookie Policy].
Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no system is entirely secure, and we encourage you to use strong passwords and safeguard your account information.
Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or email notifications.
Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:
StudyCard
privacy@studycard.school
This GDPR-compliant Privacy Policy is effective as of 17th January 2025