Classroom Terms & Rules

Videoconference Stream Recording

Now from time to time the tutor takes photos or videos of the activities inside the classroom. The focus is on the subject matter, rarely on the students themselves. Also, sometimes we like to capture the student’s activities to share with our parent community.

You decide whether your children are recognisable on the media material by giving us permission or prohibition during the registration process.

From time to time the media (local newspapers, TV) may be in a Junior Coding Club’s classroom to cover various functions. On occasion, while covering these events, children are interviewed and/or photographed and/or filmed.

You can withdraw consent to photo and video recordings at any time by contacting our data protection officer directly. E-Mail: privacy@educody.com.

Photo and video recordings

Now from time to time the tutor takes photos or videos of the activities inside the classroom. The focus is on the subject matter, rarely on the students themselves. Also, sometimes we like to capture the student’s activities to share with our parent community.

You decide whether your children are recognisable on the media material by giving us permission or prohibition during the registration process.

From time to time the media (local newspapers, TV) may be in a Junior Coding Club’s classroom to cover various functions. On occasion, while covering these events, children are interviewed and/or photographed and/or filmed.

You can withdraw consent to photo and video recordings at any time by contacting our data protection officer directly. E-Mail: privacy@educody.com.

Video Recording for internal Training

It is our goal to provide the best possible experience and education. Thus, Junior Coding Club may occasionally record part of or a full class for quality assurance and training purposes. Such a recording, if performed, would be stored in a company controlled account and accessible only to authorised supervisors. The recording would be used purely for internal class quality review or for training of new instructors. No video, audio, still images or quotes from such recording would be used outside of such purpose. Any recording would be kept for a maximum of one year and then will be permanently deleted, with the exception of any short segment that would be included into internal training. None of the recordings would include names of the participants. This consent is valid for any current and future programs you or your child participate in with Junior Coding Club.

Media Capture

I hereby authorise Junior Coding Club to publish photographs taken of me and/or my registered minor children for use in Junior Coding Club’s printed publications and websites. I release Junior Coding Club from any expectation of confidentiality for my registered minor children and myself. I acknowledge that participation in publications and websites produced by Junior Coding Club confers no rights of ownership. I release Junior Coding Club and its employees from liability for any claims by me or any third party in connection with my participation or the participation of the registered minor children.

Classroom Visiting Policy

Parents/Guardians of our students are more than welcome to sit in on classes to observe; We ask that observers maintain a quite by-stander perspective. If the presence of the parents are distracting to the students or the class, we reserve the right to ask the parent to wait in the reception area until class is over.

If we have to cancel a class

In the event we do not meet our minimum enrollment count for a camp or live-online course, we will cancel the activity & notify you of an alternate class based on availability or the choice of a refund of the class that was cancelled.  If in the unlikely event the Junior Coding Club has to cancel a camp or live-online course, refunds will be processed within 5-7 business days from the date of cancellation if an alternate class is not chosen or available.  If a class is canceled midway (for reasons beyond our control), we will provide a prorated refund for the remaining classes.

Accident and Medical Release

By registering for classes with the Junior Coding Club you agree, except as expressly identified by you, (the student, parent or guardian),  in the check out registration form, that you are not aware of any health or medical conditions the student may have that would suggest to you that the student should not be a participant in the classes operated or provided by the Junior Coding Club.  You have not been advised by a qualified health care provider, or otherwise, that the student should not participate in any of our classes or activities.
As a result of enrolling in classes with the Junior Coding Club, all efforts will be made to educate and protect the students, while under our care.  We will watch over them, as if they were our own.  However, by enrolling student(s) in classes with Junior Coding Club and selecting the – I’ve read and accept the terms & conditions – checkbox during the check out process, you hereby and irrevocably waive, release and discharge Junior Coding Club, including all of its employees, directors, officers, agents, trustees, representatives, contractors, sub-contractors, volunteers, other participants and/or members, predecessors, successors and assigns these “Releasees”, for and from any and all injury, harm and/or damages of any kind, howsoever caused or arising, including those arising from the Releasees’ own negligence, as well as any and all liability arising from, or related to, directly or indirectly, the student’s death, disability, personal injury, property damage or property theft, and any other claims for damages the student or you may have now or in the future, including those related directly or indirectly to the student’s participation in the classes.  I understand that these terms will be used against you in any proceeding in which you make any claim of any kind against the Releasees, on your own or on behalf of, or as a representative of, the student.

Bullying Policy

“Bullying” means any written, verbal, graphic, or physical act that a student or group of students exhibits toward other particular student(s) and the behavior causes mental or physical harm to the other student(s); and is sufficiently severe, persistent, or pervasive that it creates an intimidating, threatening, or abusive educational environment for the other student(s).
In the event, a representative of Junior Coding Club, witness bullying with our own eyes, we address it instantly. We have a “3 Strikes and Your Out” policy. The first strike, we will pull the children aside and have a talk with all parties involved finding out the facts. On the 2nd bullying incident, we will ask the parents to pick the child up. If your child is the aggressor, we ask the parents to encourage their child to write a note to the victim, which includes an apology, bring it to class next time, hopefully with a fist pump, hand shake or hug to make everything all good. If there is a 3rd incident, the instigator of the bullying be asked to leave the premises where the classes are held and will be banned from attending any future Junior Coding Club classes. A prorated refund will be given for any remaining classes the student did not attend, excluding the day the last bullying incident occurred.

Third-Party Service Provider List

What is a third-party service provider?

To support the Junior Coding Club in delivering its services, the operator Educody engages third party service providers to assist us with its data processing activities and as defined in our services agreement.
When we work with these service providers in our capacity as a data processor for our user’s personal data, the General Data Protection Regulation (GDPR) calls these third-party service providers a sub-processor. Sub-processors are service providers who have or potentially will have access to or process personal data on behalf of Educody.

The Junior Coding Club uses different types of service providers to perform various functions. We want to be as transparent as possible about the service providers we use. The list below does not mean they are all utilized for the services you use as a customer, but the idea is to give you an overview of the types of service providers we utilize, where they are located, and a description of the work they carry out.

Due Diligence

Before engaging any service provider, we perform due diligence, including a vendor security assessment. All of our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to the Junior Coding Club and in accordance with our commitments to Users and applicable data protection laws.

List of third-party service providers

The below list of third-party service providers are third parties the Junior Coding Club works with across its products and services. Click on the name of the service provider to view their privacy policy.

Name Data Purpose of Processing Location
Microsoft Corporation Student data: first and last name, group id, pedagogic data, communication data. Post content, such as topics, text, videos, and other material. It may include first name, email address, and audio, image and video.​ Cloud service provider, collaboration and office tools, classroom management, video conference system Germany (EU)
Scratch Student data: first name, email Coding and classroom management tool USA
codeSpark Academy Student data: first name Coding and classroom management tool USA
Sphero, Inc. Student data: first name, email Coding and classroom management tool USA
Google Workspace for Education Student data: first name, email Cloud service provider, collaboration and office tools, classroom management USA
Flipgrid Post content, such as topics, text, videos, and other material. It may include first name, last name, email address, and audio and image included within a video. Collaboration and learning outcome USA
Debitoor Customer data: Name, Email, Address, Phone Finance accounting Irland (EU)
Marketcircle Inc. Customer data: Name, Email, Address, Phone CRM platform Germany (EU)
Paypal Customer data: name, email, postal address, phone Payment processing Luxembourg (EU)
Stripe Cardholder name, PAN, CVV, expiration date Payment processing Irland (EU)

Updates

Our business needs may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services. We will periodically update this page to reflect additions and removals to our list of service providers.

For more information on Educody’s privacy practices, please consult our Privacy Policy.

Child Protection Compliance Policy

General

The protection, care, and welfare of children within the Junior Coding Club are obviously of paramount importance. As part of this duty of care, it is essential that all those entrusted with the oversight of the system (which includes those involved in the appointment of staff and the management of school) do everything they can do to ensure that everyone working with the pupils is fit to do so, and that the pupils have as safe and secure an educational environment as possible.

This document guidelines for good practice in those areas of the Junior Coding Club which have a bearing on children’s safety, health, and physical, emotional and spiritual well-being.

Principles

It is essential to ensure that all pupils will be guaranteed the same level of security and care through our appointment procedures and the way we check all staff.
The ethos should be founded on a basis of mutual respect between all members of the Junior Coding Club community, in order to encourage the self-respect of the pupils and to preserve their right to emotional and physical privacy. In any conflict between disclosure and privacy it is the rights and protection of the child which must be paramount.

The personal freedom and the right to human dignity is a fundamental constitutional right of everyone, including all participants in education, giving rise, among others, to the prohibition of not only physical but also mental aggression against and humiliating punishment of students.

The validity of these rights is not dependent on whether pupils meet their obligations at the Junior Coding Club; the human rights of pupils may not be associated with the fulfilment of the pupils’ obligations.
It is to be ensured, that any information that raises concerns about the welfare and protection of a child is transmitted to the appropriate staff/the head tutor who informs, if necessary, national authorities, and, that any allegation must be treated as a matter of utmost seriousness.

It must be understood and respected that sensitivity and understanding in dealing with a child protection case is of extraordinary importance.

Staff

Staff who have access to children in the Junior Coding Club will be asked to provide a criminal record document (or equivalent documentation from the country the individual is a citizen of or has been in employment so far) before beginning the employment.

The Junior Coding Club is responsible for ensuring that all recruited staff are fit to be in contact with children, and that the German legislation (particularly child protection legislation) is observed.

All those employed in a school who have unaccompanied access to children should be checked against the appropriate legislation, and if none is applicable, steps should be taken to ensure as far as possible that these people are clear.

 The Junior Coding Club will exercises all reasonable means to ensure that unauthorised persons cannot gain entry and that unauthorised visitors can be easily identified.

The head teacher and all other staff who work with children undertake a Stewards of Children training by Darkness to Light to equip them to carry out their responsibilities for child protection effectively.

Security, Health and Comfort

It is essential that safe, healthy and comfortable environment is provided for all working in the Junior Coding Club. We will provide rapid agreed response to accident or illness, including designation and training of teachers or non-teaching staff as “first-aiders” (so long as this does not contravene local law), and keeping an accident register. The parents will provide information about children with allergies and special medical conditions on a ‘need to know’ basis, taking into account medical advice and parents’ wishes and appropriate confidentiality.

For camp activities we will verify that pupils’ welfare is guaranteed. In all such activities tutors accompanying the students will be involved in an appropriate risk assessment.

Parents will be fully informed about all aspects of the camp activities in which their children are involved.

Implementation and procedures

Regular and agreed procedures are essential in the Junior Coding Club and should be appropriate to the needs and should cover the needs of the full age range. It is essential that all partners of the Junior Coding Club are aware of and support the following guidelines:

  • Promotion of reasonable and safe behaviour during home schooling and during camp activities;
  • Efficient monitoring of attendance, absence and truancy with appropriate follow up action; including information on consequences of poor attendance, non regular work and misbehaviour;
  • Awareness of tutor and all other members to the importance of serving as good role models.

The Junior Coding Club provide a respectful environment for pupils and all employees ensuring respectful class and out of class communication between tutors and pupils and protecting the pupils against any form of discrimination, therefore any stereotyping of pupils based on their nationality, gender, sexual orientation, race, handicap, special needs, etc. should be avoided by both tutors and students. In accordance with this goal we will provide education in personal relations, encouragement of respect and opportunities and inclusion for all members of the Junior Coding Club, regardless of race, nationality, religion, sexual orientation, gender, disability and special educational need.

In order to prevent bullying we will enforce:

  • Clear policies and procedures to be followed in case of bullying, whether physical, verbal or indirect (humiliation, rumours, gossip, etc) between pupil/pupil or staff/pupil;
  • Cyber-Bullying as integral part of our educational program to train social behaviour especially in online / digital conditions.
  • Regular training of our tutors, i.e. on pedagogical days, on this topic.

We further develop and and publish a user-friendly and effective complaints handling system which includes:

  • Clear information about how and to whom to complain (usually the class tutor).
  • Agreed procedure for following up complaints, including respect for confidentiality when appropriate but with proper information to the person complained about.
  • Keeping up records of complaints made and action taken.
  • Information to those other members of the Junior Coding Club who need to know.

Procedures for dealing with allegations of abuse include:

  • Agreed response to allegations of abuse, whether verbal, physical, emotional or sexual. (In case of evidence response must comply with legal practice and procedures in Germany.
  • Guidance to staff in relation to recognising the signs and symptoms of child abuse, including physical indicators or behavioural/developmental indicators.
  • Procedures for handling disclosure from children.
  • Responsibilities of any member of staff in relation to Child Protection.
  • Responsibilities in relation to designated persons within the Junior Coding Club.
  • Responsibility to communicate with the authorised National Agencies responsible for Child Protection matters.
  • Restrictions that should apply in relation to investigation of cases in accordance with child protection regulations in force in the country.

Cancellation and Refund Policy

Cancellation

Our top priority is to provide great experience to our students and to you as parents. If we fall short, let us know and we will work with you to correct the situation. If minimum enrollment requirements are not met, we may need to cancel the class. In this case, we will make all efforts to switch you to a comparable class and, if no such class is available, a credit or full refund will be provided.

Live-online Courses

You can make changes or request cancellations:

  • No fee: Up to 48 hours prior to start of the course
  • €30 processing fee: 48 hours – to start of the course
  • Students may join late, but the tuition will not be prorated
  • No makeup classes
  • No changes or refunds after start of the course
  • Full refund can be requested after the first session. (We do not offer free trials, since we have a major setup associated with each new student. However, we do offer a full refund after the first session, if you are not satisfied with the course.)

In-person after-school clubs

You can make changes or request cancellations, only if not regulated otherwise by the school:

  • No fee: Up to 48 hours prior to start of the course
  • €30 processing fee: 48 hours – to start of the course
  • Students may join late, but the tuition will not be prorated
  • No makeup classes
  • No changes or refunds after start of the course
  • Full refund can be requested after the first session. (We do not offer free trials, since we have a major setup associated with each new student. However, we do offer a full refund after the first session, if you are not satisfied with the course.)

In-person camps

You can make changes or request cancellations: 

  • No fee: Up to 7 days prior to start of the camp
  • €60 processing fee: 7 days – to start of the camp
  • Students may join late, but the tuition will not be prorated
  • No makeup classes are available for camps
  • No changes or refunds after start of the course
  • Full refund can be requested after the first session. (We do not offer free trials, since we have a major setup associated with each new student. However, we do offer a full refund after the first session, if you are not satisfied with the course.)

Membership (Annual Subscription)

Subscriptions may be cancelled during the first 30 days of the subscription period (30 day trial period). Cancellations made after the first 30 days will not render a refund and will only be used to pause future renewals.

We’d love to know what went wrong and how we can improve, so please include details about the reason for your refund request if you reach out to us directly.
Our website juniorcodingclub.com and our payment process submit the refund immediately and make every attempt to process the refund as quickly as possible. Your financial institution can take up to 20 days for the refund to reflect in your bank account/card. More details can be found via Stripe.com or Paypal.com at Customer refund processing time.

Requesting a Refund

To request a refund:

  1. Go to https://juniorcodingclub.com > Account > Orders
  2. Select the order number of the membership you want to refund.
  3. Select the ellipsis icon (three dots) next to the order total column. This opens a prompt to Request a Refund.
    Note: If you do not see the ellipsis icon, it means the 30-day period has passed.
  4. Click the link to Request a refund. A Refund Request Form displays. Select a refund reason from the drop-down menu and add details about your reason for the refund request.
  5. Select Request Refund. dAn automated response confirming receipt is sent to the email address associated with your account. Once we’ve had a chance to review the request, we will be in touch about the refund process.

Payment Systems and Methods

Duration of the storage of your data

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

Data security

Credit card data is not stored, but is collected and processed directly by our payment service provider. We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons.

To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

Use and application of PayPal

Educody GmbH has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal are usually first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data that are necessary for the processing of the payment. Personal data that is necessary for the processing of the purchase contract is also personal data that is related to the respective order.

The purpose of the transfer of data is payment processing and fraud prevention. Educody GmbH will transfer personal data to PayPal in particular if there is a legitimate interest for the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness.

PayPal may share personal data with affiliated companies and service providers or subcontractors to the extent necessary to fulfil contractual obligations or to process the data on their behalf.

The data subject has the option to revoke the consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

PayPal’s applicable privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use and application of Stripe

When you make a payment via our Services, we do not collect the financial information you provide. Rather, the information is collected by Stripe, Inc., a third party payment platform which collects a user’s name, email, credit card information, and other information a user provides to Stripe. We do not share any Personal Data with Stripe and we do not receive any Personal Data from Stripe. We only receive a confirmation from Stripe that there was a successful transaction completed on Stripe but no Personal Data is transferred between Stripe and Educody GmbH. 

We will share transaction data with Stripe only to the extent necessary for the purposes of allocating your payments. When you initially provide or update your payment information, we transmit it via an encrypted connection to Stripe. Stripe uses and processes your payment information in accordance with Stripe’s Privacy Policy.

Data Processing List

Purpose Stakeholder Groups Data Categories Recipient Transfer third countries Deletion period Technical and organisational measures
Customer service Active and former clients Master data of the parents, master data of the registered child, contract and service data, billing data, correspondence, transaction information such as support requests, payment defaults, etc. Finance accounting, Sales, Support Not planned After expiry of warranty and guarantee obligations Measures according to safety concept, protection level normal. No special measures required according to risk analysis
Service provision a)customers b)former clients c)Employees d)Suppliers to a & b: Master data, Ordering and billing data, Pedagogical task fulfilment, Pedagogical process data, to c & d: Master data, performance records Tutors Not planned After expiry of retention obligations under commercial and tax law.
Accounting a)customers b)former clients c)Employees d)Suppliers to a & b: Master data, order, contract, billing and payment data, bank details to c & d: master data, performance records Finance accounting, Sales, Support Not planned
Provision of evidence under tax and commercial law, financial management a)Customers b)Suppliers c)Employees d)Interested parties Master data, service and billing data Finance accounting, Controlling Not planned
Marketing and Sales a)active and former clients b)interested parties c)website visitors to a & b: Contact and list data, product interests, communication history, creditworthiness information a: Master data and contract data Purchase history to c: Pseudonymised profiles acc. §15TMG (German law) Marketing, sales, external service providers Transmission of pseudonymised tracking data to US service providers to a&b: In the event of revocation by the party concerned or after 2 years after termination of the customer relationship. to c: after 6 months by aggregation

Newsletter

Purpose

On the website of Educody GmbH, users are given the opportunity to subscribe to our company newsletter. By means of a newsletter, we inform our customers, interested parties and business partners at regular intervals about:

  • Product news
  • Practical tips
  • Product recommendations
  • New services
  • Exclusive promotions
  • Vouchers
  • Practical / free services
  • Interesting projects in connection with Educody GmbH
  • Current trends

Subscribe to our newsletter

The personal data transmitted to the controller when the newsletter is ordered is specified in the input mask used for this purpose.

The newsletter of our enterprise can basically only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter mailing. For legal reasons, a confirmation e-mail is sent to the e-mail address registered by a data subject for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email serves to verify whether the owner of the email address as the data subject has authorised the receipt of the newsletter.

Data collection during registration

When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as well as the date and time of registration, which is assigned by the Internet service provider (ISP). The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves as a legal safeguard for the controller.

The personal data collected in the context of a registration for the newsletter are used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances.

No personal data collected as part of the newsletter service will be passed on to third parties.

Revocation of consent at any time

The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking consent, a corresponding unsubscribe link can be found in each newsletter. Furthermore, it is also possible to unsubscribe from the newsletter at any time directly on the website of the controller or to inform the controller of this in another way.

Newsletter-Tracking

The newsletters of Educody GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Educody GmbH may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters are stored and analysed by the data controller in order to optimise the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt-in procedure. After a revocation, this personal data will be deleted by the controller.

Newsletter as product recommendations and practical tips

As a member of the Junior Coding Club or subscriber to our service, you will receive newsletters from us as product recommendations and practical tips. In this case, you will receive the newsletters from us regardless of whether you have subscribed to a newsletter. In this way, we want to inform you about products from our range that might interest you based on your last purchases from us. You will also receive valuable tips on how to use our learning platform.

If you do not wish to receive any more newsletters or promotional messages from us, you can object to this at any time. Please send your objection in text form (e.g. e-mail, fax, letter) to our contact address or unsubscribe with an unsubscribe link on the Newsletter subscription page. Of course, you will also find an unsubscribe link at the end of each newsletter.

The legal basis is Art. 6 para. 1 lit. f DSGVO and § 7 para. 3 UWG.

Rights of the affected individuals

Right of confirmation

Every data subject shall have the right, granted by the European Directive and the Regulation, to obtain confirmation from the controller as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right, he or she may, at any time, contact any employee of the controller.

Right of information

Any person concerned by the processing of personal data has the right, granted by the European Directive and Regulation, to obtain from the controller, at any time and free of charge, information about the personal data stored about him or her and a copy of that information. In addition, the European Directive and Regulation Body has granted the data subject access to the following information:

  • the purposes of the processing
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
  • the existence of the right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or the right to object to such processing
  • the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject: Any available information on the origin of the data
  • the existence of automated decision-making, including profiling

Furthermore, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards in connection with the transfer.

If a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.

Right of rectification

Any person concerned by the processing of personal data shall have the right granted by the European Directive and the Regulation to obtain the rectification without delay of inaccurate personal data relating to him or her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If a data subject wishes to exercise this right of rectification, he or she may, at any time, contact any employee of the controller.

Right to erasure (right to be forgotten)

Any person concerned by the processing of personal data has the right, granted by the European Directive and the Regulation, to obtain from the controller the erasure without delay of personal data concerning him or her, where one of the following reasons applies and to the extent that processing is no longer necessary:

  • The personal data were collected or otherwise processed for such purposes for which they are no longer necessary.
  • The data subject revokes the consent on which the processing was based pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) DS-GVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DS-GVO.
  • The personal data have been processed unlawfully.
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to information society services offered pursuant to Article 8(1) DS-GVO.

If one of the aforementioned reasons applies, and a data subject wishes to arrange for the deletion of personal data stored by the Educody GmbH, he or she may, at any time, contact any employee of the controller. The employee of Educody GmbH will arrange for the deletion request to be complied with immediately.

If the personal data has been made public by the Educody GmbH and our company is responsible pursuant to Art. 17 Para. 1 DS-GVO to erase personal data, Educody GmbH shall implement reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, in order to inform other data controllers which process the published personal data that the data subject has requested from those other data controllers to erase all links to or copies or replications of the personal data, unless the processing is necessary. The employee of the Educody GmbH will arrange the necessary in individual cases.

Right to restrict processing

Any person concerned by the processing of personal data shall have the right, granted by the European Directive and the Regulation, to obtain from the controller the restriction of processing where one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defence of legal claims.
  • The data subject has objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of personal data stored by the Educody GmbH, he or she may, at any time, contact any employee of the controller. The employee of Educody GmbH will arrange the restriction of the processing.

Right of data portability

Any person concerned by the processing of personal data shall have the right, granted by the European Directive and the Regulation, to receive the personal data concerning him or her, which have been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. The data subject shall also have the right to transmit such data to another controller without hindrance from the controller to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising the right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to obtain the direct transfer of personal data from one controller to another controller where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

In order to assert the right to data portability, the data subject may at any time contact any employee of the Educody GmbH.

Right to object

Any person affected by the processing of personal data shall have the right granted by the European Directive and Regulation to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

The Educody GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.

If the Educody GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data processed for such marketing. This also applies to the profiling, insofar as it is related to such direct marketing. If the data subject objects to the Educody GmbH to the processing for direct marketing purposes, the Educody GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her which is carried out by the Educody GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the Data Protection Regulation (DS-GVO), unless such processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the data subject may directly contact any employee of the Educody GmbH or another employee. The data subject is also free to exercise his/her right to object in relation to the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Automated decisions in individual cases including profiling

Any person concerned by the processing of personal data shall have the right, granted by the European Directive and the Regulation, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, provided that the decision (1) is not necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and that such law lays down appropriate measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is made with the data subject’s explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) it is made with the data subject’s explicit consent, the Educody GmbH shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, which include at least the right to obtain the data subject’s involvement on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated decisions, he or she may, at any time, contact our data protection officer directly at any time. E-Mail: privacy@educody.com.

Right to revoke consent under data protection law

Every person affected by the processing of personal data has the right granted by the European Directive and Regulation to withdraw consent to the processing of personal data at any time.

If the data subject wishes to exercise the right to withdraw consent, he or she may, at any time, contact our data protection officer directly at any time. E-Mail: privacy@educody.com.

Coding Club School Account for Children

Student privacy is very important to us. Student Data is used only for educational purposes at the direction of the Junior Coding Club.

If you as a parent or guardian register your child for the Junior Coding Club (abbreviated CC in the following) on this website, we will set up a CC student user and account for your child. This password-protected direct online access is a prerequisite for the use of the learning applications in order to participate in the digital education services of Educody GmbH.

Educody GmbH only shares personal information in a few limited circumstances, described below. We do not sell Children’s personal information or use Children’s personal information to market or advertise to Children, nor do we permit third parties to do so. 

The Junior Coding Club’s online access for students allows the use of a number of curated educational applications suitable for children. We maintain a list of these third-party providers with further descriptions on a separate page.

Who we may share information with:

  • We share information within the Service as needed to perform the Service and/or at the direction of the School. For example, information including Student Data, will be shared between and among authorized School users such as teachers and School administrators. This sharing will depend on the settings and functionality selected by the Junior Coding Club.
  • We may share information with our trusted third party service providers who perform technology services on our behalf (e.g. web hosting and analytics services), but strictly for the purpose of carrying out their work for us. Contractors and service providers who may have access to Student Data in the course of performing their services are subject to confidentiality and data security requirements.
  • We may be required to share information with law enforcement or other third parties when compelled to do so by court order or other legal process, to comply with statutes or regulations, to enforce our Terms of Use, or if we believe in good faith that the disclosure is necessary to protect the rights, property or personal safety of our users.
  • We may share information in an aggregated and/or anonymous form that does not reasonably identify an individual or School. For example, we may use and share aggregate or anonymized data to study and improve our Service, user functionality, and product offerings.

Microsoft 365 Education

We use Microsoft 365 Education and Azure services such as Active Directory for teaching and managing the students of the Junior Coding Club. No account is created for parents. Parents are allowed to add additional data to the student account. The children’s accounts receive a Microsoft 365 Education student licence. This includes the use of a number of Microsoft applications (MS Teams and OneNote as well as Word Online, Excel Online and PowerPoint Online).

We have chosen Microsoft for free reasons and considerations and are not beholden to the company in any way. We would like to inform you as fully as possible about how we handle your child’s data.

The Microsoft school account is created by Educody GmbH and linked to the tenant’s email address (codingclub.cc). In the CC school account, the following data necessary for the administrative and pedagogical operation are collected and processed:

User data (title, name, email address, password change)

Courses purchased

Educody GmbH will transmit the data entered in the fields “First name / Last name” to Microsoft Ireland Operations Limited, Carmanhall Road, Sandyford Industrial Estate, Dublin 18, Ireland (“Microsoft Ireland”).

Microsoft Ireland will only use the data submitted for the purposes of setting up and managing the Microsoft Office 365 account. Furthermore, in addition to setting up your Office 365 account, Microsoft will automatically create a user profile for you in the Microsoft Online Portal. The data entered in the “First name / Surname” fields will be used for this purpose. The fields “Age” and “Gender” are not passed on to Microsoft. The user profile is used to identify and address participants in Microsoft SharePoint Online, which provides for an exchange of information. Our educational institution’s Microsoft 365 Education instance (“tenant”) is configured so that your child’s user profile data cannot be viewed by anyone. Further details can be found here.

The data transferred is stored by Microsoft Ireland in the Dublin and Amsterdam data centres of Microsoft Global Foundation Services, a business unit of Microsoft Corporation, USA, (“Microsoft Corp.”), which subcontracts Microsoft Ireland in this regard. Microsoft Corp. also uses subcontractors for various service activities in the operation of Microsoft 365. Since an adequate level of data protection comparable to the EU standards does not always exist outside Europe, including in the USA, the so-called EU standard contractual clauses have been concluded with Microsoft Corp. which guarantee an adequate level of data protection at Microsoft Corp. Microsoft Corp. concludes a contract with the subcontractors that is similar in content to the EU standard contractual clauses. This ensures that all parties involved commit to the EU data protection standards.
For more details on the topic of data protection and data security in Office 365, visit Microsoft’s website at Trust Center.

Cloud services

As an enrolled member of codingclub.cc, your child can use the free cloud services SharePoint Online, Sway, Forms, Flow, ToDo, PowerApps and Exchange Online in addition to the online-based Microsoft 365 Apps package. 

  1. SharePoint Online
    Coding Club participants have access to a personal, file-encrypted online data storage of 1 TB in size. In this storage, which is called OneDrive, students* can store your data, such as your documents, and synchronise it with your personal devices and Coding Club devices. You can share the storage with other users of the same tenant – these are usually the members of codingclub.cc. This allows these users to access the data you have shared. In addition, news feeds and hashtags can be defined and shared interactively with other users.
    Please note that your data stored in Sharepoint Online or OneDrive will be irrevocably deleted 1 year after your membership expires.
    For more details on the additional collection, data controller and use of your data by Microsoft Ireland, the locations of the servers and the subcontractors used, please refer to our general privacy notices for the Microsoft 365 Apps package.
    Further details on the topic of SharePoint Online as well as data protection, security and transparency in Office 365 can be found on the Microsoft website under SharePoint Online, Data Protection.
  2. Teams
    Functions such as IP telephony, IP video conferencing or instant messages are available to Coding Club participants. Among other things, they can send instant messages to all users of the same tenant – these are usually the members of codingclub.cc.
    For teams, a participant database is stored in order to find other users of the Coding Club via a search mask and to connect with them. This participant database is compulsorily linked to the Teams Online service. It is possible to block unwanted communication participants at any time. However, it is not possible to remove your account name from the database. All users of the Coding Club (administration, teachers and students) can therefore find your child’s account name via the search mask.
    For more details on the additional collection, processing and use of your data by Microsoft Ireland, the locations of the servers and the subcontractors used, please refer to our general data protection information on the Microsoft 365 Apps package.
    Further details on the topic of Teams as well as data protection, security and transparency in Office 365 can be found on the Microsoft website under Teams and Data Protection.
  3. Exchange Online
    An electronic mailbox including calendar function is available to Coding Club participants. The Exchange Online email address is the same as your account name, which is made up of the letters and characters you entered in the portal at the beginning in the “First Name” and “Last Name” fields, and the domain name. We process this data to be able to generate your Exchange e-mail address. A subscriber database is stored for Exchange Online in order to find other users of your Office 365 tenant and to be able to communicate with them. This subscriber database is linked to the Exchange Online service. Further details on Exchange Online and data protection, security and transparency in Office 365 can be found on the Microsoft website under Exchange Online or Data Protection.
  4. Other cloud services
    Coding Club participants also have access to other cloud services. These include, for example, Sway, a variant of Word Online with automatic layout function, Microsoft Forms, another variant of Word Online for creating surveys and simple multiple-choice tests, Flow and PowerApps, an extension of Sharepoint Online for creating automated functional processes or small applications that can be used device-independently.
    You can share data created with Sway or Forms with other users – these are usually the members of codingclub.cc. This allows these users to access the data you have shared. By default, the sharing and notification functions are deactivated. For more details on the topic of these further cloud services, data protection, security and transparency in Office 365, please visit Microsoft’s website under Sway, Forms, and Data Protection.
  5. Administrative rights
    As only the system administrator can set or change the setting changes mentioned in the previous clauses, we as administrator collect, process and use the data required for this purpose in order to enable this facility. This also requires the encrypted transmission of this data to Microsoft Ireland Operations Limited, Carmanhall Road, Sandyford Industrial Estate, Dublin 18, Ireland (“Microsoft Ireland”) by us. Further details on the collection, processing and use of your data by Microsoft Ireland, the locations of the servers and the subcontractors used can be found in our general privacy notices for the Microsoft 365 Apps package.
    Please note that your data stored in these services will be irrevocably deleted 1 year after the membership expires.
Further details on the collection, processing and use of your data by Microsoft, the locations of the servers and the subcontractors used can be found here.

.

In the event of a change of control

If we sell, divest or transfer our business, we will not transfer personal information of our customers unless the new owner intends to maintain and provide the Service as a going concern, and provided that the new owner has agreed to data privacy standards no less stringent than our own. In such case we will provide you with notice and an opportunity to opt-out of the transfer of personally identifiable Student Data.

How Student Data is shared 

In addition to the actions described above, Educody GmbH may facilitate the sharing of Student Data with third parties, though only when instructed and authorized to do so on behalf of the Junior Coding Club. Some elements of our Service enable the Junior Coding Club to interact with parents, students, teachers and third party applications, for the benefit of the student’s education. Educody GmbH does not facilitate the sharing of any Student Data with third parties on the Service except on behalf of the Junior Coding Club after the School has authorized a third party or application to access Student Data through the Service. Please remember that this Privacy Policy applies to the Educody GmbH and Junior Coding Club Services, and not other services or third party applications, which may have their own privacy policies. Parents should carefully read the privacy practices of each third party application before agreeing to engage with the application through the Service.

How we store and protect your information

We store our data in Germany and the United States and we take strong measures to keep data safe and secure.

Any information collected through the Service is stored and processed in Germany and in the United States. If you use our Service outside of Germany or the United States, you consent to have your data transferred to Germany and the United States. 

Educody GmbH maintains strict administrative, technical and physical procedures to protect information stored in our servers, which are located in Germany. Access to information is limited (through user/password credentials and two factor authentication) to those employees who require it to perform their job functions. We use industry-standard Secure Socket Layer (SSL) encryption technology to safeguard the account registration process and sign-up information. Other security safeguards include but are not limited to data encryption, firewalls, and physical access controls to building and files.

Access to the CC School account is only possible after entering the student’s personal password. Students should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you are sharing the computer with others.

Students are encouraged to log out at the end of the lesson if they are using applications on digital devices that are shared by multiple users, usually other students. 

To prevent unauthorised access to your personal data by third parties, the connection is encrypted using TLS technology.

Unauthorized disclosure 

If there is any disclosure or access to any personally identifiable Student Data by an unauthorized party, we will promptly notify the affected Parents and will use reasonable efforts to cooperate with their investigation of the incident.

Your choices about your information

Account information and settings

Parents may update account information and modify Services by signing into the Parents account. Parents and other website visitors can opt-out of receiving promotional email from us by clicking on the “unsubscribe” feature at the bottom of each email. Sorry, you cannot unsubscribe from Service-related messaging.

If you have any questions about reviewing or modifying account information, contact us directly by visiting our Help Center.

Access to Student Data 

Student Data is provided and controlled by the Junior Coding Club. If you have any questions about reviewing, modifying, or deleting personal information of a student, please contact us directly.

Termination of the CC School Account

If a contractual relationship between you as a customer and Educody GmbH expires or is terminated, we deactivate the CC School Account so that it is no longer usable and accessible. As many parents only pause the contractual relationship and re-register their child at a later point in time, e.g. for the participation of holiday camps, we delete the CC School Account completely and irrevocably after a blocking period of 12 months.

If you as a customer do not wish to have the password-protected CC School Account paused / deactivated, you can of course cancel it at any time. Please send us a request in text form (e.g. e-mail, letter) to our contact address.

How long we keep User Content

Following termination or deactivation of a Junior Coding Club account, Educody GmbH may retain profile information and content for a commercially reasonable time for backup, archival, or audit purposes, but any and all Student Data associated with the Junior Coding Club will be deleted promptly. We may maintain anonymized or aggregated data, including usage data, for analytics purposes. If you have any questions about data retention or deletion, please contact us by visiting our Help Center.

We do not collect any information from students without consent.

Educody GmbH does not knowingly collect any information from children under the age of 13 unless and until the Junior Coding Club has obtained appropriate parental consent for the student to use the Service. Because Educody GmbH collects and uses Student Data at the direction of and under the control of the Junior Coding Club, Educody GmbH relies on the Junior Coding Club to provide appropriate notice to parents of the School’s use of third party service providers such as Educody GmbH, and for the Junior Coding Club to provide consent, if necessary, and authorisation for Educody GmbH to collect Student Data, as permitted by the Children’s Online Privacy Protection Act (COPPA). Please contact us at privacy@codingclub.cc if you believe we have inadvertently collected personal information of a child under 13 without proper consent so that we may delete such data as soon as possible.

Links to other websites and services

We are not responsible for the practices employed by websites, applications or services linked to or from our Service. We will always review the privacy policies of other applications before authorising a third party to access data through the Service.

How to contact us

If you have any questions about this Privacy Policy or the Service, we recommend contacting us by visiting our Help Center.

If you have any questions about the processing of your personal data, you can contact our data protection officer directly at any time. E-Mail: datenschutz@educody.com Phone: +49 69 21009822

If you are not satisfied with our response, you can contact the iKeepSafe Safe Harbor Program’s dedicated consumer complaint department at: coppaprivacy@ikeepsafe.org

If a Student contacts the Junior Coding Club with a question about our Service, we will collect personal information from that Student only as necessary to respond to the Student’s request and we will then delete or anonymize the personal data of the Student after providing our response.

Customer Account for Parents

Purpose

If you register your child for the Coding Club on this website, it is necessary for the conclusion of the contract that you enter your personal data or transfer it from the already existing customer account. We need the data you provide to process your order. Mandatory data required for the processing of the order are marked separately, other data are voluntary.

We will set up a password-protected direct online access to your inventory data stored with us in your customer account. In your customer account you can view and possibly manage the following data:

  • User data (title, name, address, e-mail address, telephone, preferred language, password change, …).
  • Current news
  • Orders
  • Invoices
  • Payment Methods
  • Membership of your children (see
    Coding Club School Account for Children)
  • Coding club school account data of your children (first name, last name, age, gender)
  • Computer equipment in your household (optional)
  • Special medical conditions such as allergies (optional)

Termination of the customer account

If you as a customer do not want to have a password-protected customer account, you must terminate the contractual relationship with Junior Coding Club. Then please send us a request in text form (e.g. e-mail, fax, letter) to our contact address.

Data security

Access to your customer account is only possible after entering your personal password. You should always treat your access information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

To prevent unauthorised access to your personal data by third parties, the connection is encrypted using TLS technology.