Privacy Policy
Data Protection Statement
For Website Usage For Newsletter Subscriptions For Pupils and Their Legal Guardian(s) Regarding Our Services and Our Tutors’ Services, Including Telephone Contact and Accounting For Tutors, Including Their Acceptance Test
1. Data Processing Responsibility
The entity responsible for processing data is: ProStudy GmbH Ernst-Melchior-Gasse 20 1020 Vienna, Austria Commercial register no.: FN 447118 b Email: data-privacy@ostazy.org The language used in this data protection statement is intended to be gender neutral.
2. Website Usage
This statement applies to our websites at the following domains:
- prostudy.org
- prostudy.org/en
2.1 Processed Data and Sources
We process personal data you provide when using the website. This data is required for processing your requests or using the community area. Failure to provide this data will hinder request processing or community area access. Additionally, we process data generated during website or community use, such as date, employee, contents of the enquiry response, and metadata for the community area. Please refer to our cookie tool (https://www.cookiebot.com/) for information on cookies.
2.2 Legal Basis for Data Processing
Processing is based on fulfilling contractual obligations (Article 6 (1)(b) GDPR).
2.3 Data Sharing
We share personal data with authorized data processors as necessary for the stated purposes. Processors are bound by confidentiality and process data only within our assignment.
2.4 Data Retention
We retain your data for:
- Responding to enquiries or claims for damages for three years after response completion.
- Community area usage duration and an additional three years for potential claims.
3.Newsletter Subscriptions
3.1 Processed Data and Sources
We process data you provide for newsletter subscription. Failure to provide data prevents newsletter delivery. Additionally, we process data related to consent, newsletter sending, and your newsletter usage.
3.2 Legal Basis for Data Processing
Processing is based on your consent (Article 6 (1) (a) GDPR), revocable at any time.
3.3 Data Sharing
We share data with authorized processors as necessary for the stated purposes.
3.4 Data Retention
We store/process your data until newsletter cancellation for revocation management or three years from revocation for potential claims.
4. Pupil and Tutor Services
4.1. Processed Data and Sources
We process data provided by pupils or legal guardians for service provision. This includes contractual, accounting, and payment-related data. We also process data generated during service provision and support requests.
4.2. Legal Basis for Data Processing
Processing is based on fulfilling contractual obligations, legal obligations, and protecting legitimate interests (Article 6 GDPR).
4.3. Data Sharing
Data is shared with tutors for service mediation. We engage processors for specific services.
4.4. Payment Service Provider
We use Stripe Payments Europe Limited for payment services.
4.5. Data Retention
We store relevant personal data for at least seven years.
Tutor Services
5.1. Processed Data and Sources
We process data provided by tutors, including quiz data for suitability testing and Enhanced DBS Certificate data.
5.2. Legal Basis for Data Processing
Processing is based on fulfilling contractual obligations, legal obligations, and protecting legitimate interests (Article 6 GDPR).
5.3. Data Sharing
Data is shared with pupils and engaged processors for specific services.
5.4. Payment Service Provider
We use Revolut Ltd. as a payment service provider.
5.5. Data Retention
We store relevant personal data for at least seven years.
Applicants and Employees
6.1. Processed Data and Sources
For applicants, we process application documents. For employees, we process all data related to employment.
6.2. Legal Basis for Data Processing
Processing is based on consent, fulfilling contractual obligations, and legal obligations (Article 6 GDPR).
6.3. Data Sharing
Data is shared with employees, tax authorities, social security institutions, and other relevant authorities.
6.4. Data Retention
We store necessary personal data for at least seven years.
Data Subject Rights
You have rights, including withdrawal, information, correction, erasure, processing restriction, data portability, and objection. Complaints can be lodged with the Information Commissioner’s Office. Contact info@ostazy.org for exercising your rights.
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow, Cheshire, SK9 5AF Great Britain +44 303 123 1113 or +44 162 554 5860 E-mail: icocasework@ico.org.uk