1. Parties and Roles
On the platform, schools (institutions) are the data controller, and EduOne OS is the data processor that hosts and processes data on behalf of the school. The collection and purpose of use of student/parent data is the responsibility of the relevant school.
2. Data Processed
- Account data: full name, e-mail, phone, role, school (tenant) identity.
- Student data: name, class, number, parent relationship, absences, grades, homework.
- Kindergarten data: daily report, development observation, photo, health/allergy information.
- Communication data: messages, notifications, announcements.
- Finance data: payment status and amount information (card/bank information is not kept).
- Technical data: session, device and security logs (audit record).
3. Processing Purposes
Data is processed only to run school operations: record management, attendance, timetable, parent communication, scholarship processes, secure check-in/out and reporting. Data is not sold to third parties for marketing purposes.
4. Data Security and Isolation
- Each school's data is logically isolated under a separate tenant.
- Access is restricted by role-based authorization and server-side security rules (Firestore Security Rules).
- Sensitive data (health, counseling, secure handover) is limited to authorized staff and the relevant parent only.
- Data transfer is done over encrypted (HTTPS) channels; management operations are written to the audit log.
5. Retention and Disposal
Data is retained for the duration of the contract with the school and within the scope of legal retention obligations. Some operational records (e.g. check-in/out logs) are automatically purged after a certain period. Upon the school's request, data can be exported or deleted.
6. Rights of the Data Subject
As a student/parent, you must direct your requests for access, correction or deletion of your data first to the school where you are registered. The school, as data controller, evaluates these requests. For your rights under the KVKK, see the Personal Data Protection Notice page.
7. Contact
For your privacy questions regarding the platform: destek@eduoneos.com. You can also review the Terms of Use and Data Processing pages.