This Privacy Policy explains how Caperia Education processes, uses and protects your personal data in accordance with the GDPR and applicable Austrian data protection legislation.
Data Controller
The controller responsible for the processing of personal data is:
Caperia Education
Owner: Stefanie Aspmair, M.A.
Reit 9
6306 Söll
Austria
Email: admin@caperia-education.com
General Information
Caperia Education takes the protection of your personal data seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection legislation.
This Privacy Policy explains what personal data we process, why we process it and what rights you have in relation to your personal data.
Website Hosting
This website is hosted by IONOS.
When you visit this website, technical information required to provide and secure the website may be processed. This may include the requested page or file, browser type and version, operating system, device type, time of access and IP address.
This information is processed for the purpose of ensuring the security, stability and proper functioning of the website.
The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR.
IONOS SiteAnalytics
This website may use IONOS SiteAnalytics for statistical analysis and technical optimisation of the website.
SiteAnalytics may process information such as the referring website, requested page or file, browser type and version, operating system, device type, time of access and an anonymised IP address.
According to IONOS, SiteAnalytics does not use cookies and the visitor’s IP address is anonymised directly after transmission.
The processing is based on our legitimate interest in analysing and improving the performance of our website pursuant to Art. 6(1)(f) GDPR.
SSL/TLS Encryption
This website uses SSL/TLS encryption to protect the transmission of personal data and other confidential information.
An encrypted connection can be recognised by the “https://” prefix in your browser’s address bar.
Contact Form and Enquiries
If you contact us through our website contact form, we process the information you provide, such as your name, email address, programme of study and message, in order to respond to your enquiry and, where applicable, arrange an initial consultation.
The legal basis for this processing is Art. 6(1)(b) GDPR where your enquiry relates to a potential tutoring engagement and Art. 6(1)(f) GDPR for other general enquiries.
We retain enquiry data only for as long as necessary to respond to your enquiry and manage any subsequent communication, unless we are legally required to retain it for longer.
Email Communication
If you contact us by email, we process your email address and any information contained in your message for the purpose of responding to your enquiry and communicating with you.
Our email services are provided by IONOS.
The legal basis for processing is Art. 6(1)(b) GDPR where the communication relates to a potential or existing contractual relationship and Art. 6(1)(f) GDPR for other communications.
Tutoring Services
When you or your child use our tutoring services, we may process personal data necessary to arrange and administer the tutoring service. This may include:
- name and contact details;
- age or school year where relevant;
- language studied and IB programme;
- learning goals and tutoring requirements;
- information relevant to tutor matching;
- lesson arrangements and related communications; and
- billing and payment information.
We process this information primarily for the purpose of arranging and administering tutoring services and fulfilling our contractual obligations pursuant to Art. 6(1)(b) GDPR.
Where necessary for the provision of tutoring services, relevant information may be shared with the tutor assigned to the student. Tutors receive only the information reasonably required to organise and provide the tutoring service.
Online Lessons
Online tutoring sessions may take place using Google Meet or Zoom.
When these services are used, personal data may be processed by the respective service provider. Depending on the service and settings used, this may include names, email addresses, technical connection data and information generated when participating in an online meeting.
These services are used for the purpose of organising and providing online tutoring sessions.
Caperia Education does not record tutoring sessions unless this has been separately agreed and all applicable data protection requirements have been met.
Further information about the processing of personal data is available in the privacy information provided by Google and Zoom.
Payments
Payments for tutoring services may be made by bank transfer or PayPal.
Bank Transfer
Where payment is made by bank transfer, we process the information necessary to identify and administer the payment, including payer information, payment references, transaction amounts and transaction details. The legal basis for this processing is Art. 6(1)(b) GDPR and, where records must be retained for accounting or tax purposes, Art. 6(1)(c) GDPR.
PayPal
Where you choose to make a payment using PayPal, personal data required to process the transaction may be transmitted to and processed by PayPal. This may include information such as your name, email address, payment and transaction details and other information required to process the payment.
PayPal processes personal data in accordance with its own privacy policy. Depending on the circumstances, personal data may also be processed outside the European Economic Area.
We use PayPal for the purpose of processing payments relating to our tutoring services. The legal basis for processing personal data necessary for the payment is Art. 6(1)(b) GDPR. Where we are legally required to retain payment or transaction information for accounting or tax purposes, the legal basis is Art. 6(1)(c) GDPR.
Cookies
This website may use cookies that are technically necessary for the operation, security or functionality of the website.
We currently do not use Google Analytics or other third-party analytics or advertising services requiring tracking cookies.
Should we introduce additional analytics, marketing or other technologies requiring consent in the future, they will only be activated in accordance with applicable data protection requirements and this Privacy Policy will be updated accordingly.
Recipients of Personal Data
Where necessary for the purposes described in this Privacy Policy, personal data may be processed by or shared with:
- IONOS for website hosting, website functionality and email services;
- selected tutors where necessary to arrange and provide tutoring services;
- Google or Zoom where their respective services are used for online tutoring;
- banks, financial institutions and PayPal where necessary for payment processing; and
- public authorities where disclosure is required by law.
Personal data is only shared where necessary for the relevant purpose or where we are legally required to do so.
International Data Transfers
Some service providers used by Caperia Education operate internationally. Depending on the service used, personal data may therefore be processed outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, such transfers will take place in accordance with the requirements of the GDPR and on the basis of an applicable adequacy decision or other appropriate safeguards where required.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Where statutory retention requirements apply, in particular under Austrian tax and accounting law, relevant information will be retained for the legally required period.
Your Rights
Under the GDPR, you may have the right to:
- access your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- receive certain personal data in a portable format; and
- withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact: admin@caperia-education.com
You also have the right to lodge a complaint with the competent supervisory authority. In Austria, the competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Changes to this Privacy Policy
We may update this Privacy Policy where necessary to reflect changes to our services, website, service providers or legal requirements.
The current version of this Privacy Policy is available on this website.