1. Who is responsible?
On this website, [Company name] is the controller for data submitted through the demo request form.
In the portals, each client school or institution is the controller for its students', families' and staff's data. Scolyne acts as a processor, only on the school's instructions and under a data processing agreement.
2. Data collected
3. Purposes and legal bases
- Responding to a demo request : pre-contractual steps taken at your request.
- Providing the portals : performance of the contract with the school, and public-interest task for public schools.
- Securing the platform : legitimate interest (preventing fraud and unauthorised access).
- Meeting our obligations : legal, accounting and tax obligations.
4. Recipients
Data is only accessible to people authorised by their role (student, parent, teacher, school leadership, supervising institution), to the Scolyne team for technical support, and to our technical processors (hosting, email delivery, payment), who are bound by confidentiality commitments. [State whether data is transferred outside your country or the EU, and under what safeguards.]
5. Retention periods
6. Security
Encryption of data in transit and at rest, role-based access control, protected passwords, daily backups and logging of sensitive actions. In the event of a data breach, the school concerned is informed as soon as possible.
8. Your rights
You have the right to access, correct, erase, restrict, object to and port your data. For school data, contact your school first; we help it respond to your request.