Who is responsible for data processing?
The person responsible for data processing is
Tintagel House, 92 Albert Embankment
SE1 7TY London
Company registration number FN 447118 b
What data is processed and where does this data originate?
We process the personal data that we receive from you within the scope of the business relationship.
This personal data included:
- Type of school
- Year group
- Telephone number
- Email address, if provided
- Questions that are put to the community
- Responses returned to the community
- Payment information, if provided
- Profile picture, if uploaded
- Identification data of the device on which the GoStudent app has been installed.
- School subjects in which you like to give a particularly large number of answers, if disclosed
- Profile description, if known
- Information relevant to teaching (such as dates of examinations, grades, learning disabilities etc.), if disclosed
The provider/contractual partner (GoStudent GmbH) is free to make unrestricted use of the services of factor bank(s) with a branch in the European Union (data recipient).
On what legal basis and for what purposes does the data processing take place?
We process your personal data to fulfil our contractual obligations [ 1) Optimal matching between the questioner and answerer, so that they can be processed even better 2) Informing users about updates to the GoStudent app 3) Offering online tutoring 4) Collecting customer support requests to solve disputes and service problems], to fulfil other legal obligations and/or due to legitimate interests (especially cookies, web analysis, use for advertising purposes such as sending newsletters), provided that your interests in maintaining confidentiality are not overridden.
- To fulfil contractual obligations
(Article 6 (1) b GDPR:
The processing of personal data is carried out in order to fulfil our contractual obligations, in particular to fulfil our contracts with you. The purpose of data processing for the fulfilment of the contract is primarily the processing of the learning service offered by us.
- To fulfil legal obligations
(Article 6 (1) c GDPR:
The processing of personal data also takes place for the purpose of fulfilling various legal obligations to which we are subject. Examples of such data processing based on a legal obligation are the keeping of proper accounts.
- To safeguard legitimate interests
Article 6 (1) f GDPR):
We process personal data to protect our legitimate interests, unless your interests in confidentiality outweigh these.
In the following cases, data processing is carried out to protect legitimate interests:
- Advertising and marketing
- Improvement of our offering and our website
You may object to the processing of personal data on the basis of legitimate interests.
To whom will your data will be transmitted?
We transmit personal data to commissioned contract processors (e.g. IT service providers) to the extent that this is necessary to perform the respective service. All processors are contractually obliged to treat your data confidentiality and to only process it within the scope of our assignment.
If there is a legal obligation, we transmit personal data to public bodies and institutions (e.g. law enforcement agencies, courts).
How long will your data be processed and stored?
We process your personal data only as long as this is necessary. As soon as your data is no longer required, it is automatically deleted.
We store the personal data required for the fulfilment of the contract in any case for the duration of the entire business relationship and beyond that in accordance with the statutory storage and documentation obligations (e.g. in accordance with the German Company Code or the German Federal Fiscal Code). In addition, we take into account the statutory limitation periods, which can be up to 30 years in certain cases, e.g. according to the German Civil Code (ABGB).
What rights do you have?
Right of access to information
If we process your personal data, you have the right to be informed about the purposes of the processing, the categories of personal data processed, the recipients of such personal data, the storage period, the rights you are entitled to, the origin of the personal data and the existence of automated decision-making.
Rectification and deletion
You have the right to request the correction of incorrect or incomplete personal data concerning you. You are entitled to request the deletion of personal data concerning you, unless the processing of the data is lawful and there are no legal obligations on our part to oppose deletion.
Restriction of processing
In certain cases, you are entitled to demand that the processing of your data be restricted.
You are entitled to request the transfer of your data which you have provided to us in a structured, common and machine-readable format. You have the right to request that the personal data be transferred directly by us to a person responsible designated by you, insofar as this is technically feasible.
You are entitled at any time to object to the processing of personal data concerning you for reasons arising from your particular situation. If you object, we will not further process personal data concerning you unless we can prove that our reasons for processing outweigh your interests. You may object to the use of your personal data for advertising purposes at any time; in this case we will stop processing your data for advertising purposes. To exercise your rights in relation to your data processed by us, please contact info (at) gostudent.at.
You have the right to contact the Austrian Data Protection Authority
+43 1 531 15-202525
to file a complaint if you believe that your data protection rights have been violated.