Your privacy is important for us. We have implemented the necessary security measures that guarantee and protect the confidentiality, integrity and availability of your personal data. EduTeams has been adapted to comply with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons (RGPD), as well as with Law 34/2002, of July 11, of Services of the Information Society and Electronic Commerce (LSSICE or LSSI).

This privacy statement explains who we are, what personal information we collect from our users, how we use them, along with users' rights.

1. Who are we?

• Organisation: The Spanish National Research Council (CSIC)
• NIF/CIF: Q2818002D
• Postal Address: Serrano, 117. 28006 Madrid, Spain
• Data Protection Officer: José López Calvo. Email: jose.lopez.calvo@csic.es

2. What data do we collect from our users?

2.1 Students' Data

We store the following personal data on our servers:

• Student's username
• Student's first and last name
• Student's email
• Student's password
• Student's date of birth
• Student's gender
• Student's preferred Language
• Student's answers to the personality and intelligence questionnaires
• Student's personality and intelligence profiles
• The classrooms to which a student belongs
• The groups to which a student belongs

2.1 Teachers' Data

We store the following personal data on our servers:

• Teacher's username
• Teacher's first and last name
• Teacher's email
• Teacher's password
• Teacher's date of birth
• Teacher's gender
• Teacher's preferred Language
• Teacher's affiliation (school name and address)
• Teacher's classrooms

3. How is the collected data used?

3.1 Students' Data

The collected personal data is used solely for the following purposes:

• To identify the students in EduTeams.
• To inform the students, and their teachers, of their personality traits and skills level.
• To group the students together for a given project/assignment.
• To identify the classrooms and the groups that students belongs to.
• To communicate to the students any incidents or changes in the EduTeams app, privacy policy or terms and conditions.
• For research purposes, where data will be anonymised before it is used for research.

We do not use personal data for any other purpose, other than those described above, unless required or authorised by law.

3.1 Teachers' Data

The collected personal data is used solely for the following purposes:

• To identify the teachers in EduTeams.
• To identify the collaborators of a given project.
• To inform the students who the classroom's teacher is.
• To communicate to the teachers any incidents or changes in the EduTeams app, privacy policy or terms and conditions.
• For research purposes, where data will be anonymised before it is used for research.

We do not use personal data for any other purpose, other than those described above, unless required or authorised by law.

4. Where is data saved and for how long?

The data collected by EduTeams is stored on the CSIC servers at the IIIA-CSIC (iiia.csic.es).

Personal data is stored until the user submits a request to delete their data. As we illustrate shortly, users have the right to delete their data at any time. However, their activity will be backed up in log files that will be maintained for a month from the date of the submitted request for the sole purpose of debugging software and server errors.

5. Consent

We collect and process user data subject to the user's consent. We note, however, that a user's consent automatically covers the use of their data for research purposes.

6. Security

The CSIC values the trust that EduTeams users have placed in it, and confirms that it takes the privacy and security of EduTeams users very seriously. As such, the CSIC has adopted all the technical and organizational measures necessary to safeguard the security of users' personal data, as required by current European regulations.

7. Disclosing personal information

The data collected by EduTeams may be shared, for research purposes only, with other research entities. Shared data will always be anonymised before it is sent to third parties so that EduTeams' users cannot be identified.

Except as provided in this policy, we will not provide your personal information to third parties. Though we may disclose your personal information when required or authorised by law.

8. Use of cookies

EduTeams does not use any cookies.

9. Minors

People under 16 years are expressly prohibited from providing any information to EduTeams without the prior consent and supervision of their parents or legal guardians. If a notification of the violation of this ban is received by a teacher, any data associated with the student in question will be eliminated.

10. Users' Rights

• Right of access: Users have the right to obtain a copy of their personal data.
• Right of rectification: Users have the right to have inaccurate personal data rectified, or completed if it is incomplete.
• Right of erasure / Right to be forgotten: Users have the right to have their personal data erased.
• Right to restrict processing: Users have the right to restrict the processing of their personal data.
• Right to data portability: Users have the right to obtain and reuse their personal data for their own purposes across different services.
• Right to object: Users have the right to object to the processing of their personal data.
• Right to not be a subject of automated individual decision-making: Users have the right to refuse being subject to a decision based solely on automated processing, including profiling. Users also have the right to challenge and request a review of such automated decisions.
• Right to withdraw consent: Users have the right to withdraw their consent at any time.

Exercising one's rights. Users may submit a request to exercise any of their rights by sending a letter to the data protection officer (address provided in Section 1), or sending an email to lopd@csic.es. In both cases, the user should attach a photocopy of their identity card, passport, or any other legal document that identifies them.

Users also have the right to file a complaint with the data protection authority in their country of residence or domicile to challenge the data protection practices offered by EduTeams.

11. Changes in the EduTeams privacy policy

The CSIC reserves the right to modify this privacy policy according to legislative or jurisprudential requirements. EduTeams users will always be informed about any change in the privacy policy.