GDPR Compliance of EduCloud BVBA

As most modern cloud service providers, user activity and personal data collection cannot be completely avoided. EduCloud BVBA collects the minimum set of user identifiable information to run services. We do our best to protect your privacy and minimize the risk of data misuse.

Data Collection

General

The following information is collected for all users:

  • First name, last name and email address. These items are used to identify users and help users recover their password when needed.
  • (From May 2018) Date of Birth. This is to comply with GDPR to make sure users under 16 have parental consent to use our web service.
Students

The following additional information is collected:

  • Courses registration. This information is accessible to the lecturer of the course and EduCloud BVBA.
  • Course related license information: whether the student has made a payment to access a course, license expiration date, payment IP address, time stamp, and the method of payment. Please notice that EduCloud BVBA does not keep any financial record of a student like debit card number, credit card number, PayPal account, or Stripe account. This information is only accessible to EduCloud BVBA.
  • User activities: when a student accesses a web page, the URL, time stamp, IP address, video playback progress, question answers, test result and user id are collected. These items help students to keep track of their progress. Some of the information, like test result, question answers, test activities, video playback progress, is also accessible by the lecturer(s) of the course for quality control purpose. The IP address of the student is also available to the lecturer when the student’s activity is related to online test. The purpose of showing the IP address is for fraud protection.
Lecturers

The following additional information is collected:

  • When a lecturer created, modify or delete a test or a question, the time stamp, IP address and the action are collected. This helps lecturers keep track of activities. This information is accessible to EduCloud BVBA.
  • When a lecturer makes correction to question answers, the time stamp, IP address and the action are collected, together with how many student answers are reevaluated. This information is accessible to EduCloud BVBA and the lecturer.
  • When a lecturer purchases course access codes to allow students to enroll by themselves, information on whether the lecturer has made a payment, code expiration date, payment IP address, time stamp, and the method of payment is collected. Please notice that EduCloud BVBA does not keep any financial record of a lecturer like debit card number, credit card number, PayPal account, or Stripe account. This information is accessible to EduCloud BVBA.
  • When a lecturer wants to open a course, the lecturer’s mobile number will be verified and saved on our server. This is to prevent misuse of our services. This information is accessible to EduCloud BVBA.

Data Storage and Protection

Data collected by our services are stored on Microsoft Azure Cloud service located in the Netherlands. Necessary precautions are taken to prevent unauthorized access to the data. EduCloud BVBA also never stores financial record of its users, such as payment card number, PayPal account, Strip account and so on. EduCloud BVBA also does not share any identifiable information with any third party, unless requested by law. User created passwords are never saved in our database. We only keep the record of the unrecoverable password hash for user authentication. In some cases, like bulk created users, there will be an initial password that users can change when they log in to EduCloud BVBA web service. All transmissions of data between users and EduCloud web services are encrypted by https protocol.

Data Modification

If a user would like to change the first name, last name, the email address or the date of birth, please send an email to info at educloud4u.com with proof of identification.

Right to Be Forgotten

Students

A student can ask EduCloud BVBA to erase its data given that:

  • There is no active course where they are still enrolled,
  • and permitted by the lecturer of the course or after a retention period required for the course study quality assuance purpose after the course ends.

Lecturers

A lecturer can ask EduCloud BVBA to erase their data given that:

  • There is no active course where students are still enrolled,
  • and after a retention period required for the course study quality assuance purpose when there are courses with student records.

Data Export

If you would like to export your data kept at EduCloud4u.com, please log in to download . Your data will be exported to an Excel file so you can easily download and view it.