Last revised on February 1, 2020
If you are an employee, worker or contractor of EduSynch, the information about how we handle your personal information is available in the EduSynch internal knowledge base. With respect to employees based in Europe, we are committed to cooperating with EU data protection authorities (DPAs) and comply with the advice given by such authorities with regard to human resources data transferred from the EU in the context of the employment relationship.
2. Information We Collect
Through the registration process, you will provide us with your name and email address (or parent’s email address). You will also provide us with your payment transaction information if you choose to pay for EduSynch services.Activity Data
When you use the Service, you will submit information and content to your profile. We will also generate data about your use of our Services including your engagement in educational activities on the Service, or your sending of messages and otherwise transmitting information to other users (“Activity Data”). We also collect technical data about how you interact with our Services; for more information, see Cookies below.Speaking Interviews
When you take a Speaking Interview (primarily for the IELTS platform), we will use your computer’s microphone throughout the lesson to speak to a professor. You also have the option of using your camera to share your video with your professor. EduSynch records these audio and video lessons and retains them until you close your EduSynch account. EduSynch uses this data to help improve the quality of the lessons and for internal research purposes.
EduSynch does not share any of your personal data with the professor. You are completely anonymous to them by default, and you can freely choose whether you show them your video or tell them any personal details such as your name during the conversation. EduSynch only shares some basic skill level information with the tutor, prior to your lesson, so they understand how best to speak to you.Test Data
If you register for the EduSynch CEFR Level Test, if deemed mandatory by the institution or company with which you are affiliated, you must provide a photo of a current, valid driver’s license, passport, or other government issued ID and a take a photo of your face to verify your identity (“Testing ID”).
When you use the Service to take an examination in the EduSynch CEFR Level Test you must provide access to your computer’s webcam and microphone. We will use them to record you and your screen during the entire examination period (“Testing Video”). While using the EduSynch CEFR Level Test, you will submit answers to questions and other information as part of the testing and evaluation process.Third Party Data
We also collect information about you from third parties. For more information, see Information obtained by Third Parties below.Product Research and Development
We may contact you to participate in product research activities. These may include surveys, interviews, and other types of feedback sessions. When you participate in these research activities, the information you provide will be used to test, improve, and develop our products. We will record the video, audio and text transcriptions of this feedback together with any additional contact information you provide and will retain this data for two years.
Please contact us at firstname.lastname@example.org to:
- Request more information about the research activities you have volunteered for.
- Opt out of being contacted for research activities.
- Request a copy of any research related data you have provided to us.
When you enter the Website, we collect your browser type and your IP address (a unique address that identifies your computer on the Internet). When you use our mobile Application, we collect your device type, your device ID, and your IP address.
You can find more information about cookies and how to manage them at http://www.allaboutcookies.org.
4. Information Obtained by Third Parties
To support and enhance the Service, we work with a variety of third party advertising networks, marketing analytics service providers and website analysis firms, such as Google, Facebook, Oath, and Unity (collectively, “Third Party Advertising Service Providers”). These Third Party Advertising Service Providers collect and use personal data about your visits to and use of the Website and mobile Application, as well as other websites in order to serve you with advertisements and content tailored to meet your preferences and likely interests or better understand ad effectiveness. Aggregate demographic and interest data will also be used for market research purposes.
We use Google Analytics which is a web analytics tool that helps us understand how users engage with the Website. Like many services, Google Analytics uses first-party cookies to track user interactions as in our case, where they are used to collect information about how users use our site. This information is used to compile reports and to help us improve our Website. The reports disclose website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.
You can opt-out of receiving personalized ads from advertisers and ad networks that are members of the Network Advertising Initiative (“NAI”) or who follow the DAA Self-Regulatory Principles for Online Behavioral Advertising using their respective opt-out tools. The NAI’s opt-out tool can be found here http://www.networkadvertising.org/choices/ and the DAA’s opt out tool can be found here http://www.aboutads.info/choices/.
In addition, your mobile devices may offer settings that enable you to make choices about the collection, use, or transfer of mobile app information for online behavioral advertising (for example, Apple iOS’ Advertising ID and Google Android’s Advertising ID). Please note that opting out does not prevent the display of all advertisements to you.
5. Use of information obtained by EduSynch
EduSynch may occasionally send you service related and product change announcements through the general operation of the Service. We will send you reminder notifications to support the EduSynch teaching methodology by reinforcing the learning cadence and help maintain your learning streak. We process your data to help provide you with the Service and offer personalized features, to understand and improve our Service and to keep our Service safe and secure.
EduSynch may use or share anonymous data collected through the Service, including Activity Data without limitation. As a business, it is critical that we perform our contract with you with the best service possible, and it is in our legitimate interests to perform these processing functions and to enable service emails by default to keep your data secure and provide our Service. You may opt out of any non-essential service emails at any time.
We may also use your contact information to send you notifications regarding new services, offers and promotions offered by EduSynch if you affirmatively consent to receive such communications.
When you register with EduSynch, some of your information is made public and available on the settings page after logging into https://student.edusynch.com. This will include the data from your EduSynch Profile and Account (Name, Email ID, Profile picture and EduSynch License Status); Your EduSynch account email address is not shown publicly.
Profile information is used by EduSynch to be presented back to and edited by you when you access the Service and to be presented to other users. EduSynch uses this information to provide you with support, to send you essential notifications, to enforce our terms, conditions and policies, to communicate with you, to administer the Services, and for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes. EduSynch’s Terms and Conditions provide the contractual lawful basis for these processing activities.EduSynch CEFR Level Test
When you take a test in the EduSynch CEFR Level Test, we will use your computer’s camera and microphone throughout the test to collect a Testing Video.
We will process information in connection with the EduSynch CEFR Level Test comprising given name(s), email address, a picture or scan of a current, valid driver’s license, passport or other government issued ID, your Testing ID, Testing Video, and answers to questions as part of the testing and evaluation process in order:
- To provide accurate testing results to Score Recipient(s) (as defined below)
- To compare your Testing ID to your Testing Video to ensure that the person who registered for the examination (and whose identity EduSynch has validated) is the same person who took the examination
- To store and review the Testing Video recording to validate that you took the examination without improper assistance
- To evaluate your performance on the EduSynch CEFR Level Test, to report results and to evaluate the usefulness, accuracy and other aspects of the EduSynch CEFR Level Test
- For our research team to validate and improve the examination, in an anonymized format
- To analyze audio recordings of verbal responses to improve our ability to understand the spoken language
- To share your Testing ID with your consent upon initiation of a dispute by a Score Recipient
6. EduSynch’s Terms and Conditions provide the contractual lawful basis for these CEFR Level Test processing activities.
7. Sharing your personal data with third parties
EduSynch shares your personal data only when it is necessary to offer the Service, legally required, or permitted by you.
We will provide personal data to hosting providers such as Amazon Web Services, search engine providers such as Google, analytics providers such as Crashlytics, and support providers such as ZenDesk.
These data processors help us bring you the Service. For example, we may share your information in order to detect where or how you encountered a bug when using our mobile application. In connection with these operations, our service providers will have access to personal data for a limited time. When we utilize service providers for processing any personal data, we implement contractual protections limiting the use of that personal data to the provision of services to EduSynch.
We will be required to access and disclose personal data in response to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. Additionally, we will access and share account or other personal data when we believe it is necessary to comply with law, to protect our interests or property, to prevent fraud or other illegal activity perpetrated through the Service or using the EduSynch name, or to prevent imminent harm. This will include accessing and sharing personal data with other companies, lawyers, agents or government agencies.
EduSynch will share the complete and accurate results of EduSynch CEFR Level Tests with such institutions, including universities, potential employers, or other third parties, (collectively, “Score Recipients”) as specified when you are instructed to take the test as part of an institution. These results may include your test score, photos taken during the test, your recorded submission for the speaking response, and your written responses. Information deemed important by the Score Recipient will vary from case to case. We will also share your full name, email address, and the photo you take of yourself and of your Government Issued ID during the test. We will never share examination results with any party without your approval, except that anonymized examination results will be used by EduSynch and its partners to improve the examination and for research and analysis. We will not share your Testing ID with any Score Recipients, except with your consent upon initiation of a dispute by a Score Recipient.
If the ownership of all or substantially all of the EduSynch business, or individual business units or assets owned by EduSynch that are related to the Service, were to change, your personal data will be transferred to the new owner. In any such transfer of information, your personal data would remain subject to this section.
EduSynch will share aggregate or anonymous data collected through the Service, including Activity Data, for purposes such as understanding or improving the service.
8. Data subject rights and data retention
You also have the following rights in relation to the personal data we hold about you, unless provided otherwise by local law:
You can manage your account settings after logging into the student platform at https://student.edusynch.com to update, amend, and correct your information.
- To request access to, or erasure of, the personal data we hold about you.
- To request us to restrict the processing of the personal data we hold about you.
- To object to us processing personal data relating to you.
- Where you have given us consent to process your personal data, you have the right to withdraw that consent at any time.
- To export the personal data you have provided to EduSynch in a format that can be transferred electronically to a third party.
- To delete your account with EduSynch by following the instructions available through the Service.
EduSynch will retain your data until your account is deleted, after which point we will retain anonymous data collected through the Service, including Activity Data, which may be used by EduSynch and shared with third parties in any manner. Information associated with the EduSynch CEFR Level Test, including examination results and your Testing Video, will be collectively deleted from your EduSynch account after five years have passed from the date you complete your test, but anonymized examination data, including your examination results and Testing Video, will be kept indefinitely by EduSynch to improve the examination and for research and analysis.
Please note that some of these rights are not absolute. In some cases, we may refuse a request to exercise particular rights if complying with it meant that we are no longer able to meet our contractual obligation to provide you with particular products and services. We will keep you informed as to the actions that we can take when you make your request.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
9. Third party websites and links
Please note that you may have cookies placed on your computer by third party websites that refer you to our Service. Although we do not share your personal data with these third party websites unless it is reasonably necessary to offer the Service, they may be able to link certain non-personally identifiable information we transfer to them with personal data they previously collected from you. Please review the privacy policies of each website you visit to better understand their privacy practices. In addition, EduSynch would like to inform you that anytime you click on links (including advertising banners), which take you to third party websites, you will be subject to the third parties’ privacy policies.
10. California privacy rights
Residents of California have the right to:
- Know what personal information we collect about you and from where we collect it.
- Access a copy of the personal information we hold about you.
- Understand how we process your personal information and how it may be shared.
- Opt out of having your personal information shared with certain third parties.
- Request we delete your EduSynch account and personal information.
- To make such a request, please send an email to email@example.com.
11. EU-U.S. Privacy Shield And Swiss-U.S. Privacy Shield
Pursuant to the Privacy Shield Frameworks, EU and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also may correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to firstname.lastname@example.org. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to email@example.com.
EduSynch’s accountability for personal data that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, EduSynch remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless EduSynch proves that it is not responsible for the event giving rise to the damage.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, EduSynch is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, EduSynch may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In compliance with the EU-US and Swiss-US Privacy Shield Principles, EduSynch commits to resolve complaints about your privacy and our collection or use of your personal data. European Union or Swiss individuals with inquiries or complaints regarding this Privacy Statement should first contact EduSynch’s Data Protection Officer at:
Data Protection Officer, Dokimi, Inc., 230 East 73 Street, Apt. 8C, New York, NY, 10021
EduSynch has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgement of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. The services of BBB EU PRIVACY SHIELD are provided at no cost to you.
If your complaint involves human resources data transferred to the United States from the EU and/or Switzerland in the context of the employment relationship, and EduSynch does not address it satisfactorily, EduSynch commits to cooperate with the panel established by the EU data protection authorities (DPA Panel) and/or the Swiss Federal Data Protection and Information Commissioner, as applicable and to comply with the advice given by the DPA panel and/or Commissioner, as applicable with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Complaints related to human resources data should not be addressed to the BBB EU PRIVACY SHIELD.
Contact details for the EU data protection authorities can be found at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
12. Children under age of digital consent
EduSynch provides some features and services intended for use by children. EduSynch uses age-gating to restrict what services are available to children depending on the age of the user and the applicable laws of their country. For example, a 15 year old child in Germany will require parental consent to use the Service, whereas a 12 year old child in the United States of America would receive a restricted service but not require parental consent.Children within the European Union
Each European Union (EU) member state is permitted to legally define its own digital age of consent between 13 and 16. EduSynch checks the age and country of the user to determine if the user is able to consent to the Service. If consent of a parent/guardian is required, the user will input the email address of an adult who will receive a request to approve the child’s account registration. In the absence of a country specific Act of Law, the age of consent will be set at 16.
These EU child users will receive the following service restrictions: they will not be able to use the service until their parent/guardian has provided consent for the child to do so. After the parent/guardian has given consent, they child will be allowed to access the full EduSynch service.
Where EduSynch does make features and services available to children, we recognize that collecting personal data from children requires further privacy protections. Accordingly, EduSynch will: (1) notify parents or guardians about EduSynch’s privacy and information practices regarding children, including what personal data we collection and how we use, share, and protect that personal data; (2) limit our collection of personal data to ensure that we collect no more than is necessary to provide EduSynch’s services; (3) obtain parental consent before collecting personal data from children; and (4) allow parents to request that EduSynch change or delete personal data about their children.Children outside of the European Union
If a child of under 13 years from outside the EU registers for the EduSynch service, upon registration the child will provide an adult’s email address, to whom EduSynch sends a notification.
These child users will receive the following service restrictions:
- Instead of any Personally Identifiable Information about the child, we will only store the email address of their parent/guardian.
- Only family friendly advertisements are shown and these ads do not do behavioral tracking.
- Mature words such as “beer” and “wine” are disabled.
- Social features are disabled, e.g. profiles, forums, clubs, etc.
- They can not enter profile information such as a profile picture or a bio.
At the point when the user is known to have reached the age of 13, the account will automatically be transitioned to be a normal non-restricted account.
At all times EduSynch does not knowingly collect personal information from children in connection with the Service. If we discover that we have unknowingly collected personal information from these children, we will delete it. If you believe we have collected personal information from a child, please contact us at firstname.lastname@example.org.
14. Information security
EduSynch has implemented administrative and technical safeguards it believes are appropriate to protect the confidentiality, integrity and availability of your personal data, Testing ID, User Photo, access credentials, and EduSynch CEFR Level Test results. However, given sufficient resources, a determined attacker could defeat those safeguards and may, as a result, gain access to the data we seek to protect.
15. Do Not Track
The Service is not designed to respond to “do not track” signals sent by some browsers.
16. Contact Us
EduSynch’s headquarters are located within the USA at:Dokimi, Inc. (DBA EduSynch)
230 East 73 Street, Apt. 8C
New York, NY, 10021
United States of America
For all support inquiries, please email email@example.com