ODS collects and processes the following types of data: identification and contact data (and also, if you do a survey, some educational, professional and/or behavioural data), which will be used by us to contact you and other purposes set out below.
We maintain the security and confidentiality of your data in accordance with applicable law and will not make your personal data public.
By completing and submitting your personal data to ODS via any online registration or other forms presented on our Website, you declare to have read and accepted the terms of this Policy. Without prejudice to the foregoing, you expressly and unequivocally consent to the collection and processing of your personal data (as identified below) by us in accordance with the indicated purposes and this Policy.
You may revoke consent at any time by writing to firstname.lastname@example.org accompanied with a proof of your identity (copy of ID card or passport). We are supervised by the Spanish Data Protection Agency.
If you tick the corresponding box or specifically provide us your email for commercial communication purposes, you consent to receiving commercial communications from us regarding our and other services (see below). If later you do not wish to receive commercial Information about us and other services (defined below), you can expressly opt out by sending a notification to email@example.com or by clicking the unsubscribe link in our email communications.
1. DATA CONTROLLER
The entity responsible for your registration data is Our Dream School S.L., domiciled at Calle Enrique Granados, nº 7, 08007 Barcelona and with CIF B66974932. All communications regarding the processing of your personal data shall be directed to our Privacy Manager indicated below. Contact person: Chief Operating Officer, firstname.lastname@example.org.
2. PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT
2.1 Data we collect and process
We collect and process the data you provide us through our contact forms (identification and contact data), when you register on our blog or on our platform (registration data), when you create your profile (identification, contact and experience data), when you answer to our surveys (opinions), register for an activity (interests), send us your CV (personal data and experience) or visit our website (technical and cookie data).
It is important that the personal data we hold about you is accurate and current. You are responsible for the accuracy of the information you provide to us and you are expected to update any information you provide us with.
2.2 Prohibited data
In all events, it is forbidden to submit to us or upload any data that contains sensitive personal data that is related to identifiable persons such as: your and/or a third party's racial origin, membership of a trade union, religion, ideology or sexual life; your and/or a third party's health; or your and/or a third party's commission of criminal offences or involvement in criminal proceedings, and associated penalties or fines.
2.3 Data use/purpose and legal basis
We use your data for the purposes set forth in the table below, and we base our processing activity on the legitimate basis as described below:
Type of data: Contact data
Data use / purpose:
- Contact you and manage any request you make from us
- Keep you up-to-date with our educational programmes and other product and service offerings including our community activities, and to send you information, offers, promotions or commercial communications in general, relating to our activities, products and services
- Legitimate interest
- Express consent
Type of data: Register on our blog
Data use / purpose: To register you on our blog
Legal basis: Performance of a contract
Type of data: Register on our Platform
Data use / purpose: To register you on our platform and create your profile
Legal basis: Performance of a contract
Type of data: Survey Data
Data use / purpose: Understanding our clients, potential clients and other persons accessing our Website, in order to improve our offer of services.
Legal basis: Legitimate interest
Type of data: Application data
Data use / purpose: Evaluate your profile in order to work with us
Legal basis: Legitimate interest
Type of data: Navigation data
Data use / purpose: Understand our web users and improve our Website and Platform
Legal basis: Legitimate interest
Type of data: Register for a programme or activity
Data use / purpose: Register you for the programme or activity you choose
Legal basis: Legitimate interest
In certain circumstances, we may process your data to comply with a legal or regulatory obligation to which we are subject.
3. DATA DISCLOSURE
We keep your personal data confidential in accordance with the applicable legislation, so unless stated otherwise here, your personal data will not be provided to third parties. ODS does not sell or assign to third parties lists with personal data, nor of any other type, nor generates any type of income from third parties for the data collected from these pages.
We can however disclose certain personal data as follows:
- We can give access to your personal data to our service providers under contracts for the provision of services in favour of the company. We require that all third parties respect the security of your personal data and treat them in accordance with the law. We do not allow our external service providers to use your personal data for their own purposes and we only allow them to process your personal data for specific purposes and in accordance with our instructions.
- We can make the personal data available to any company interested in buying or buying the Company or a part of the business and, consequently, give access to any national or international auditors to carry out their "due diligence".
- We can make the data available to the authorities to investigate suspicions of fraud, harassment or other violations of any law, rule or regulation, or the policies of the Website.
- We can share your data with the other company of our business group, namely Learn Space S.L.U.
4. INTERNATIONAL TRANSFERS (THIRD PARTY SERVICE PROVIDERS)
We use third-party services to provide our Services, some of which are located in the US, a country that does not provide adequate general guarantees for the protection of personal data, we signed an agreement with said suppliers with the contractual guarantees required by law, such as the so called “standard contract clauses” approved by the EU Commission. You can contact us to consult or obtain copies of these agreements.
For your information, we currently use the services provided by the following third parties:
- Google L.L.C., USA.
- Facebook Inc., USA.
- HubSpot Ireland Limited.
- Stripe Payments Europe, Ltd.
5. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, apart from longer periods required to satisfy any legal, accounting, or reporting obligations. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use and retain this information indefinitely without further notice to you.
6. SECURITY MEASURES
We implement security measures and personal data protection schemes as required by law to maintain the confidentiality and integrity of your data and protection against unauthorised access, modification or destruction. These measures are in accordance with the guidelines set by the National Data Protection Commissioners.
7. YOUR RIGHTS
Under the General Data Protection Regulation 679/2016 (GDPR) you have rights in relation to your personal data. You have the right to request access to your personal data (commonly known as a "data subject access request"); request correction of the personal data that we hold about you; request erasure of your personal data; object to processing of your personal data where we are relying on a legitimate interest (or that of a third party); request restriction of processing of your personal data; request the transfer of your personal data to you or to a third party (right to data portability); withdraw consent at any time where we are relying on consent to process your personal data.
The aforementioned rights may be effective by contacting us at email@example.com or at Our Dream School, S.L., Calle Enrique Granados, nº 7, 08007 Barcelona, Spain, provided that you include a digital copy of your identification document such as your ID card or passport.
You also have the right to make any complaint to the competent authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/. Jorge Juan, 6, 28001 Madrid, Spain.
From time to time, the Company may organise online or presential public events. This Annex A explains how we process the data collected in the context of the event.
Data Controller: the data controller of the data is Our Dream School S.L., domiciled at Calle Enrique Granados, nº 7, 08007 Barcelona and with CIF B66974932.
Data Collected: we collect and process: your identification and contact data, the organisation you work for and your role, and any other data we ask you to indicate in the registration form (Registration Data). We will also collect, during the event, information linked to you through your interventions, which may include your background and experience and express your opinions and views, as well as any other information disclosed or expressed in those interventions. If the event is recorded (you will be informed), we may also collect your image and voice (collectively, Event Data).
Furthermore, you will be able to create your public profile, indicating the data and information that you want other participants to know about you. Remember that your profile is public, and both other attendees and speakers can access it and see the information you included.
Purposes: we collect and process your Registration Data for (a) providing you with the ticket for the event or the link to remotely connect, (b) if you give us your consent, sending you commercial communications about us and our services, (c) sending you any news or communication about the event you registered to (any change in the schedule, new speakers, etc.) (d) sending you follow-up email after the event, (e) in relation to your contact data, sharing the data with participants at the event and our sponsors. We collect and process your Event Data in order to be able to host and provide the event, organise the sessions, record and publish the content (in whole or part), share the content among participants, provide feedback and further interactions relating to you, your work and your interventions, and build our [Re]Learn community.
Legal basis: (a) the performance of the contract for granting you the access to the event and providing the event, (b) your consent for receiving commercial communications, (c) your consent to sharing contact data with other participants, and (d) our legitimate interest in contacting with you to inform you about any changes or providing you with further details about the event you subscribed to and further events organised by us.
Note: Other participants at online events may record your interventions. We are not responsible for the processing by these people of your data.
The following clauses apply to the processing of personal data in the context of hackathons and other events specifically dedicated to schools (“Events for Schools”).
Data Controller: the data controller of the data is Our Dream School S.L., domiciled at Calle Enrique Granados, nº 7, 08007 Barcelona and with CIF B66974932. The data will be communicated to other entities, as set out below, that will act as data controllers in their own rights.
Data Collected: we collect and process the following personal data related to the persons representing schools participating to any Event for Schools: your identification and contact data and those of any other staff (teachers, teaching assistants) involved in the project, the name of your school and your role, and any other data we may ask to indicate in the registration form (Registration Data). We may also collect, during the Events for School, information linked to teachers through their interventions, which may include background and experience and express opinions and views, as well as any other information disclosed or expressed in those interventions. If the event is recorded (you will be informed), we may also collect your image and voice (collectively, Event Data).
We won’t ask for any students’ personal data, if a teacher submits any students’ personal data (e.g. in a submission), he/she will do that under the teacher’s and school’s own responsibility. We prefer you to identify the submission by School and a number.
Purposes: We collect and process the Registration Data for (a) providing you and your staff with access to the event or the link to remotely connect, (b) managing the teachers’ and schools’ participation to the Event for Schools. (c) if he/she gives us his/her consent, sending commercial communications about us and our services, (d) sending news or communication about the Event for Schools he/she you registered to (any change in the schedule, new speakers, etc.) (e) sending you follow-up email after the event, (f) sharing the data with the sponsors of the event identifies in our website. We collect and process your Event Data in order to be able to host the Event for Schools and, when applicable, to record and publish the content (in whole or part), and build our [Re]Learn community.
Legal basis: the legal basis that allow us processing the Registration Data and Event Data are: (a) the performance of the contract for granting the school the access to the event it subscribed to, (b) the consent for receiving commercial communications, (c) the performance of the contract for sharing the data with the sponsors indicated in our website that provide the Events for Schools, and (d) our legitimate interest in contacting with the schools to inform it about any changes or providing it with further details about the Event for Schools it subscribed to and further events organised by us, as well as for follow-up activities.