We operate a platform for pupils or their legal guardians who are looking for support and for tutors. Therefore, on the one hand, platform contracts with pupils or their legal guardians and agency contracts with tutors are concluded via our platform; pupils or their legal guardians and tutors also conclude teacher contracts directly. The tutoring sessions take place on the basis of the teacher contracts between tutors and pupils via Zoom online video conferences (the Zoom service provider sends automated meeting links and automatically collects data on participation in the conferences).
To ensure transparency, this data protection information also includes information regarding the processing of the pupil’s personal data or that of their legal guardians by the tutors with regard to their fulfilment of the teacher contract with the pupils. Since this processing is largely carried out via our platform, we act as a data processor for the tutors. Insofar as ChildOne has to process data in order to fulfil ChildOnes’s contractual obligations, ChildOne acts on its own responsibility. Unless explicitly otherwise distinguished below, the information applies both to the processing by us as the body responsible for data protection and to the processing by the tutors as the person(s) responsible under data protection law.
4.1. What data do we process (including tutors, unless otherwise stated) and where does it come from?We process the personal data that you provide to us as a pupil or their legal guardian about the pupil or yourself for the provision of services. You providing this information is on the one hand contractually necessary to conclude the agreements between you (as a pupil or legal guardian) and us and between you and the tutor for the agreed provision of services and on the other hand legally necessary, in particular to fulfil our accounting obligations. This also includes any data in connection with the payment of our services (see below for our payment service provider). If you do not provide us with your relevant personal data, we cannot enter into or fulfil a contract with you.
In addition, we process personal data that we generate for you as part of our provision of services or from the sources mentioned, namely: - Service provision data for billing purposes (generated by us or meeting participation data generated by Zoom) - Invoice data to fulfil our accounting obligations - Any correspondence and telephone contact (support requests) related to the provision of ChildOne services
4.2. What is the legal basis for data processing?We process your personal data to fulfil our contractual obligations, including support requests, and to comply with any other associated legal obligations, in particular under any corporate and tax law:
To fulfil contractual obligations (Article 6 (1)(b) GDPR)Personal data is processed to fulfil our contractual obligations, in particular to fulfil our contracts with you. The purpose of data processing for the fulfilment of the contract is primarily to process the learning and other service we offer.
To fulfil legal obligations (Article 6 (1)(c ) GDPR)We also process your personal data for the purpose of complying with various legal obligations to which we are subject, in particular under corporate and tax law.
To protect legitimate interests (Article 6 (1)(f) GDPR)We process personal data to protect our legitimate interests, unless your interests in confidentiality override these. In the following cases, data processing is carried out to safeguard legitimate interests: - Advertising and marketing to existing contractual partners
You can object to the processing of personal data on the basis of legitimate interests — see below on data subject rights.
4.3. With whom is your data shared?ChildOne transmits your personal data to the respective tutor as part of the mediation of the tutor agreement.
In addition, we engage data processors if this is necessary to fulfil the service in question. All data processors are contractually obliged to treat your data confidentially and to process it only within the scope of our assignment. We engage the following data processors:
- QSOFT LLC (Kommo CRM): CRM
- Tilda Publishing Ltd, Ireland: Website Platform
- Yandex LLC (Yandex Metrika): traffic analysis
- Zoom Video Communications, Inc. (USA; standard contractual clauses (SCC) concluded): holding the video sessions
- WhatsApp LLC (USA, Standard Contractual Clauses (SCC) concluded): communication channel between tutors on the one hand and between tutors and parents or students on the other hand
- WhatsApp Ireland Limited: communication channel between tutors on the one hand and between tutors and parents or students on the other hand
- SIA Wazzup (Latvia): WhatsApp support tool using omnichannel communication
- Telegram Messenger Inc.: communication channel
- Tesla Telecom Ltd: IP telephony provider
- Altegio Ltd, Cyprus: Online booking and appointment scheduling software
- BMI Telecom Ltd: IP telephony provider
4.4. Payment service providerWe use PayPal Pte. Ltd, Wise, Stripe as payment service providers, which receives the bank details entered by you and the billing data from us to process the payment services. The processing of this data for payment processing then takes place under PayPal Pte. Ltd, Wise own data protection responsibility (see their data protection information on their websites. Any questions can be sent via website
www.paypal.com to PayPal,
www.wise.com to Wise,
www.stripe.com to Stripe.