Smart Sundae

Privacy Policy

Effective Date: October 1, 2024

At Sundae Education Technologies, SL. (referred to as "We", "Us", or "Our"), We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how We collect, use, share, and protect your personal data when you use our services, including our website https://www.smartsundae.com/ and associated applications (collectively, the"Service").

Please read this policy carefully to understand our views and practices regarding your personal data and how We will treat it.

1. Data Controller

For the purposes of the GDPR, Sundae Education Technologies, SL. is the Data Controller of your personal data. Our contact details are as follows:

Data Protection Officer

Sundae Education Technologies, SL
Email: contato@getsundae.ai

2. What Personal Data We Collect

We may collect and process the following types of personal data about you:

  • Identity Data: Name, username, school/organization affiliation, and other identifiers.
  • Contact Data: Email address, telephone number, and any other contact details you provide.
  • Usage Data: Information about how you use our website, products, and services.
  • Technical Data: IP address, browser type, device identifiers, and other technology-related information when you interact with our Service.
  • Student Work Data: Any materials or assignments submitted for grading, which may include personal data of students and reference or classroom materials.
  • Financial Data (if applicable): Payment details, such as billing information, where transactions are involved.

3. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Direct Interactions: When you provide data by creating an account, filling in forms, or corresponding with Us by phone, email, or otherwise.
  • Automated Technologies: As you interact with our Service, We may collect technical data using cookies, server logs, and other similar technologies.
  • Third Parties: We may receive personal data about you from third parties (such as your school or organization, in case of educational usage).

4. Purpose of Data Collection

We use your personal data only for specified, legitimate purposes, including:

  • Service Provision: To provide, personalize, and improve our services (e.g., grading student work, managing user accounts).
  • User Communication: To respond to your inquiries and provide support.
  • Quality and Monitoring: To monitor and improve the accuracy and quality of our AI-powered grading and related services.
  • Compliance and Legal Obligations: To comply with applicable laws and enforce our terms.
  • Analytics and Performance: To analyze and improve the functionality of our Service and to better understand user behavior.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Performance of a Contract: Processing your data is necessary for fulfilling the contract you have with Us (e.g., providing grading services).
  • Consent: In cases where We rely on your consent for processing, you can withdraw your consent at any time by contacting Us.
  • Legal Obligation: We may process your data when necessary to comply with a legal obligation.
  • Legitimate Interests: We may process your data to further Our legitimate interests (e.g., monitoring the quality of services), provided that such interests are not overridden by your fundamental rights and freedoms.

6. How We Share Your Personal Data

We will not sell, rent, or share your personal data with third parties for marketing purposes. We may share your data under the following circumstances:

  • Service Providers: With trusted third-party service providers who assist Us in delivering the Service (e.g., hosting, data analysis, customer service). These providers are bound by contractual agreements to protect your data and process it solely in accordance with our instructions.
  • Educational Institutions: If you are using the Service as part of a school or organization, We may share data with the institution to facilitate educational activities.
  • Legal Compliance: If required by law or in response to a lawful request from public authorities, including to meet national security or law enforcement requirements.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a third party. We will notify you of any such transfer and your rights regarding your data.

7. International Data Transfers

As We are based in Spain and all of our data is stored within the European Union (EU), We do not transfer your personal data outside of the EU. We ensure that all data is processed in compliance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws. If, in the future, We need to transfer your data outside the EU, We will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee the protection of your personal data.

8. Data Security

We take appropriate technical and organizational measures to safeguard your personal data against loss, theft, and unauthorized access, including encryption, access control mechanisms, and secure data storage practices. However, please be aware that no method of transmission over the internet or electronic storage is completely secure.

9. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. The retention period may vary depending on the type of data and the specific legal requirements. Once your data is no longer necessary, We will securely delete or anonymize it.

10. Your Rights under the GDPR

As a data subject in the European Union, you have the following rights:

  • Right to Access: You have the right to request access to the personal data We hold about you.
  • Right to Rectification: You have the right to request that We correct any inaccuracies in your personal data.
  • Right to Erasure: You have the right to request the deletion of your personal data under certain conditions.
  • Right to Restriction of Processing: You have the right to request a restriction on the processing of your personal data.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal data in certain situations.
  • Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details provided in the "Data Controller" section above.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically for any updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or our data practices, please contact us at:

Sundae Education Technologies, SL

Email: contato@getsundae.ai