RGR Telugu Education (RGRTE) General Data Protection Regulation accommodation
How do we accommodate the General Data Protection Regulation?
‘The Right to be Informed’ ‘The Right of Erasure’
‘The Right to Portability’ ‘The Right to Object’
‘The Right of Access’ ‘The Right to Rectify’
‘The Right to Restrict Processing’
LAWFUL BASIS AND TRANSPARENCY
We collect very minimal information from students, parents and teachers for a purse.
The information relating to children comes from the respective parent and/or teacher and does not extend beyond their name and grade level.
We do not need their full name at all. We assume parent’s consent to use their child’s data upon paying the required course fee either by them directly or by their teacher.
Data: Client/Student’s first name, surname, email, phone
Clients/Students manage their own accounts. Collecting Clients’/Students’ email/phone enables RGRTE to communicate with them and offer support when needed. To process their online purchases.
Data: Grade level of class and/or products purchased
To set a default grade for resources (students)
Data: Available time
To schedule classes
Data: Teacher’s first name, surname, email, phone
Teachers manage their student accounts. Collecting teachers’ email/phone enables RGRTE to communicate with them and offer support when needed.
Data: Grade level of class
To set a default grade for resources.
Data: Available time
To schedule classes
Child Student Accounts are created by teachers.
Data: First name, Surname (Surname not required. Most teachers add first names only and many use nicknames or code names) RGRTE does not collect student emails.
To personalize each child’s account and to provide students with usernames and passwords. Enables teachers to set tasks, receive reports and manage their student’s accounts.
Data: Student results
Results are used in a point system for student rewards, to indicate completion of activities, and for reports to teachers and parents.
Student Accounts (created by parents):
Data: First name, Surname (Surname not required)
To personalize each child’s account and to provide students with usernames and passwords. Enables parents to set tasks, receive reports, and manage their child’s account.
Data: Student results
Results are used in a point system for student rewards, to indicate completion of activities, and for reports to teachers and parents.
Access to data is allowed only as required with strong directives in our internal policy relating to privacy. RGRTE does not share personal information with any third party.
Data encryption
Secure hosting practices and resources provided by Hosting services provider
Controls on access
Staff training and policies
Data is deleted when requested by a registered user.
Data processing is needed to process online purchases, student records and student progress reports, and general communication with registered users.
Children registered under a parent or teacher account are not considered registered users for communication purposes.
When teachers and parents/guardians register they give consent to the processing of their data by agreeing to terms upon registration.
Student accounts are created by teachers/parents/guardians.
Parents/guardians are prompted to sign up for parent/supervision accounts to oversee their child’s activities and to consent for teachers to access student accounts.
Policies to ensure that users affected are informed in case of a data breach.
Information about data collection and processing is outlined in RGRTE’s Privacy Policy and GDPR policy in a ‘concise, transparent, intelligible and easily accessible form, using clear and plain language’.
Data protection by design and default
Data protection, privacy, and security are our highest priorities and are taken into account at all stages of the development of our site and programs
RGRTE has an internal security, privacy, and data protection policy in place for all Staff.
Encrypt, pseudonymize or anonymize personal data wherever possible
Data is encrypted wherever feasible. Including protection of data while in transit over public networks in web applications and database systems.
Create an internal security policy for team members and build awareness about data protection
Internal measures and policies that ensure that staff are knowledgeable about data security
Confidentiality agreements
Data is only accessible to staff that require access – technical employees
Staff are uniquely identifiable
Password protected devices
RGRTE assessment measured technical and business processes regarding data security and privacy.
Processes to notify authorities and data subjects in the event of a data breach.
ACCOUNTABILITY AND GOVERNANCE
Data protection, privacy, and confidentiality are important to RGRTE. Because of this importance, our Directors/Partners have direct involvement in data security and privacy.
Our hosting services providers are one of the reputed hosting companies in Australia and are certified compliant with a wide range of security and data protection standards. RGRTE backups its data and all student result data is encrypted before storage.
- GDPR compliance officer
- Data processing agreements between RGRTE and third parties that process data – N/A as RGRTE does not share personal data with any third party.
- Data Protection Officer: RGRTE’s Data Protection Officer can be contacted via the Contact Us link on our homepage or privacy@mytelugu.online (attention to Data Protection Officer).
PRIVACY RIGHTS
We do not sell or pass on information to any third party.
All of the information RGRTE holds on any user is available for them to see via their account at RGRTE.
Parents can create free parent accounts to view all of their child’s data.
Most data can be changed by the teacher or parent. For anything that cannot be altered by the user, an email can be sent to privacy@mytelugu.online and we will investigate and change as required.
RGRTE has a deletion process in place. This will result in a complete deletion of all data, However, RGRTE gives a grace period of 30 days after the course duration to facilitate registering into the next level course.
Users have the right to request and receive the information stored about them.
Users can update or correct information stored about them.
Users can request their data be deleted.
Users can request RGRTE to stop processing data about them.
Users can receive a copy of personal data stored about them.
Users can object to the processing of their data.
Users rights are protected by RGRTE.
Contact Privacy Officer. email: privacy@mytelugu.online