Privacy Policy
This Privacy Policy explains how EduConnect handles personal data — both the data you share with us directly and the data we process on behalf of kindergartens — in line with the GDPR (Regulation (EU) 2016/679) and Romanian Law no. 190/2018.
1. About this policy
This policy covers our marketing website, the demo-request process, and the EduConnect platform used by kindergartens, staff, parents and students. It sits alongside our Cookie Policy, which explains the cookies and similar technologies we use.
2. Our two roles: controller and processor
For data collected through our website and for our own business relationships (for example demo requests and account administration), EduConnect is the data controller. For the personal data that a kindergarten enters into the platform — including children’s and parents’ data — the kindergarten is the controller and EduConnect is the processor, acting only on the kindergarten’s instructions.
3. Data we collect directly from you
When you request a demo or contact us, we collect the details you provide — such as your name, kindergarten, role, email and phone number — and the content of your message. When you visit the website, we process minimal technical data (such as IP address and device type) needed for the site to work securely.
4. Data processed on behalf of kindergartens
As a processor, we host and process the operational data a kindergarten records in the platform: profiles of children and guardians, groups and enrolment, attendance and daily logs, documents, invoices and payments, messages and announcements. We process this data only to provide and support the Service, on the kindergarten’s documented instructions.
5. Children’s personal data
Children’s data receives heightened protection. It is visible only to the kindergarten’s authorised staff and to the child’s parents or legal guardians, is used solely to operate the kindergarten’s services, and is never used for marketing or profiling. The kindergarten is responsible for the lawful basis and any consent required for recording it.
6. How we use personal data
We use the data we control to respond to your enquiries and provide demos, to deliver and administer the Service, to secure and improve it, to handle billing, and — only with your consent — to send you relevant updates. We do not sell personal data.
7. Legal bases
We rely on: your consent (Art. 6(1)(a) GDPR) for demo requests and marketing; the performance of a contract (Art. 6(1)(b)) to provide the Service; our legitimate interests (Art. 6(1)(f)) in securing and improving the Service; and legal obligations (Art. 6(1)(c)) where the law requires us to process data. For children’s data, the kindergarten as controller determines the legal basis.
8. Cookies and similar technologies
We use a small number of cookies and similar technologies to make the site and platform work and, only with your consent, to understand how they are used. Full details are in our Cookie Policy.
9. Who we share data with
We share data with trusted service providers who process it on our behalf under GDPR-compliant agreements — for example hosting, email delivery and payment processing. We may disclose data where required by law or to protect our rights and the safety of users. We do not sell your data or share it with advertisers.
10. International transfers
We store data primarily within the European Economic Area. Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision or the European Commission’s standard contractual clauses.
11. How long we keep data
We keep personal data only for as long as necessary for the purposes described here or as required by law. Demo-request data is deleted within a reasonable period if you do not become a customer. Data we process for a kindergarten is retained according to that kindergarten’s instructions and deleted or returned at the end of the engagement.
12. How we protect data
We apply technical and organisational measures appropriate to the risk — encryption in transit and at rest for sensitive data, role-based access, least-privilege controls, regular backups, and continuous monitoring. Access is limited to authorised staff under confidentiality obligations. In the event of a personal-data breach likely to create a risk to individuals, we notify the ANSPDCP within 72 hours and inform affected individuals where the law requires it.
13. Your rights
Subject to the conditions in the GDPR, you have the right to access, rectify, erase, restrict, object to and port your personal data, and to withdraw consent at any time. To exercise these rights over data we control, write to contact@educonnect.today. Where the data is held on behalf of a kindergarten, please contact that kindergarten, and we will support it as processor.
14. Notifications and marketing choices
The platform may send operational notifications (for example about your account or your child’s activity) that are part of the Service. Marketing communications are sent only with your consent, and you can withdraw that consent or unsubscribe at any time.
15. Third-party links and integrations
Our website and platform may link to or integrate with third-party services. Their processing of your data is governed by their own privacy policies, for which we are not responsible.
16. Changes to this policy
We may update this policy as our Service or the law evolves. We will change the date above and, for significant changes, take reasonable steps to inform you.
17. Contact and supervisory authority
For any question about your data, contact us at contact@educonnect.today. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28–30, Bucharest, www.dataprotection.ro.