DATA PROTECTION

NOTICE

2020-2021

TABLE OF CONTENTS

COMMITMENT TO DATA PROTECTION 3 

THE CONTROLLER 3 

DATA PROTECTION TEAM 3 

PURPOSE OF PROCESSING 4 

YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA BY AIS VIENNA 4 

RIGHT TO ACCESS INFORMATION 4

RIGHT TO OBJECT 4

RIGHT TO RECTIFICATION 4

RIGHT TO ERASURE 5

RIGHT TO THE RESTRICTION OF THE PROCESSING 5

RIGHT TO DATA PORTABILITY 5

COMPLAINTS 5 

ORIGIN OF YOUR FAMILY’S PERSONAL DATA 6 

THIRD PARTY PROCESSORS (SUB-PROCESSORS) 7 

DEFINITION 7

SCHOOL-WIDE SUB-PROCESSORS 7

ELEMENTARY SCHOOL SUB-PROCESSORS

(FOR STUDENTS IN PRE-KINDERGARTEN – GRADE 5) 9

MIDDLE SCHOOL SUB-PROCESSORS

(FOR STUDENTS IN GRADES 6 – 8) 13

HIGH SCHOOL SUB-PROCESSORS

(FOR STUDENTS IN GRADES 9 – 12) 17

INTERNATIONAL BACCALAUREATE (IB) SUB-PROCESSORS

(FOR STUDENTS PARTICIPATING IN THE IB PROGRAMME) 21

The American International School • Vienna Data Protection Notice 2020-2021 Page 2

COMMITMENT TO DATA PROTECTION 

The American International School · Vienna, Salmannsdorfer Strasse 47, 1190 Vienna, Austria (hereinafter “AIS Vienna” or “we”) processes data on its prospective, current and former students and their parents or legal representatives, as part of its everyday

operations of providing educational services.

AIS Vienna handles your personal data according to the General Data Protection Regulation no. 679/2016 in the European Union

(GDPR) and the Austrian Data Protection Regulation (DSG). AIS Vienna acts as the controller with regard to your personal data

and the personal data of students, meaning AIS Vienna establishes the purpose and means of processing personal data.

This notice is to help you understand how and why AIS Vienna collects your personal information and what we do with your

information. It also explains the decisions that you can make about your own information. If you have any questions about this

notice please contact privacy@ais.at.

AIS Vienna reserves the right to make changes to this Notice from time to time, for example in the light of new developments or

new legislation. AIS Vienna will always inform you of such changes in advance. In any event, it is recommended that you consult

this notice regularly.

THE CONTROLLER 

The American International School · Vienna

Salmannsdorfer Strasse 47

1190 Vienna

Austria 

Tel. +43 1 401320 

Email. info@ais.at 

DATA PROTECTION TEAM 

You may contact our data protection team in case you have any questions regarding this document.

Data Protection Team

Salmannsdorfer Strasse 47

1190 Vienna

Austria 

Tel. +43 1 401 320 - EXT 2633 

Email. privacy@ais.at 

AIS is committed to processing data carefully and keeping your personal data secure.

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 3

PURPOSE OF PROCESSING 

AIS Vienna processes personal data that pertain to you or to the students for the following purposes:

● Provision of educational services: application and enrollment process, administration of classes and timetables, teaching

activities, administration of internal and public examinations, assistance regarding the application process to various

universities, issuance of academic records.

● Provision of educational ancillary services: career and personal counselling, library services, athletic and extracurricular

activities, school trips, managing the school’s publications, setting up the virtual learning environment and granting access

to AIS Vienna’s Intranet and Internet network as well as monitoring the use of AIS Vienna’s network.

● Ensuring campus security: monitoring access on campus, performance of video surveillance.

● Provision of the medical care and counselling that students may need.

● School administration: handling student records and other academic documentation, administration of fees and accounts,

internal audits and controls, reporting and statistics creation, implementing school policies, ensuring collaboration with

other schools, archiving, assessing the quality of our services, facilitating research activities.

● School related communications: conveying various messages related to the students and AIS Vienna’s activities by any

communication means.

● Organizing fundraising activities and other school events: performances, shows, tournaments, fairs, etc., including

marketing communications related to the activities organized by AIS Vienna.

● Promotion of the school: publication of pictures and video insofar as the use is limited to educational and extracurricular

activities and promotion of the school via publications, the yearbook, the school website, social media, and other

marketing activities. (Images will be removed at first request of the student/parent/guardian.)

● Dispute resolution and litigations.

YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA BY AIS VIENNA 

The GDP regulation provides certain rights related to the processing of personal data, that both you and the students have. In this

respect, please be informed that students that are 16 years or above could exercise the rights listed in this section individually.

AIS Vienna respects all the rights mentioned under the GDPR and is committed to furnishing the appropriate means by which you

can exercise these rights, according to the details mentioned below:

RIGHT TO ACCESS INFORMATION 

A data subject has the right of access to personal data which have been collected concerning him or her, and to exercise that right

easily and at reasonable intervals, in order to be aware of the lawfulness of the processing. AIS shall provide a copy of the

personal data undergoing processing. Where personal data are transferred to a third country or to an international organization,

the data subject shall have the right to be informed. In the situations where you may need to exercise the right of access, please

consider contacting AIS Vienna and requesting confirmation by e-mail at privacy@ais.at. Please consider that there might be

specific situations that are exempted from the right of access, such as information that identifies other individuals or which is

subject to confidentiality obligations.

RIGHT TO OBJECT 

The right to object to the processing of your Personal Data by AIS Vienna, on grounds relating to your particular situation. The right

to object applies to the situations where AIS Vienna relies on the legitimate interest pursued by the School (e.g. using your email

address for conveying fundraising related messages).

RIGHT TO RECTIFICATION 

The data subject shall have the right to obtain from AIS without undue delay the rectification of inaccurate personal data

concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete

personal data completed, including by means of providing a supplementary statement.

The American International School • Vienna Data Protection Notice 2020-2021 Page 4

RIGHT TO ERASURE 

The right to erasure means that in the situations expressly regulated by law, you may request erasure of your personal data.

Please take into account that the cases where the law provides for the possibility of erasure of personal data are situations where

the processing is unlawful, or where the processing is based on your consent and you have subsequently withdrawn such consent.

RIGHT TO THE RESTRICTION OF THE PROCESSING 

The right to restriction of processing, signifying your right to obtain restriction of processing your Personal Data from AIS Vienna’s

part. Please bear in mind that this right can be exercised only in specific situations laid down by the GDPR such as when you

challenge the accuracy of your Personal Data. During the period necessary for us to rectify your data, you may ask us to restrict

the processing of your Personal Data.

RIGHT TO DATA PORTABILITY 

The right to data portability implying your right to receive the personal data in a structured, commonly used and machine-readable

format and further to transmit such data to another controller. This right to data portability shall be applicable only to the personal

data you have provided to us and where the processing is carried out by automated means based on your consent or for the

performance of the contract you have concluded with AIS Vienna.

COMPLAINTS 

The initial point of contact, in regards to the processing of personal data by AIS Vienna and its subcontractors and the exercising of

the rights described above, is the data protection team. AIS Vienna shall respond to such requests and may or may not act upon

them, in principle within a period of one month, all in accordance with applicable data protection legislation. In addition, you also

have the right to contact or file a complaint with the Austrian data protection authority:

Österreichische Datenschutzbehörde 

Wickenburggasse 8 

1080 Vienna, Austria 

Tel: +43 1 52 152-0 

E-Mail: dsb@dsb.gv.at  

https://www.data-protection-authority.gv.at/contact 

 

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 5

ORIGIN OF YOUR FAMILY’S PERSONAL DATA 

We may collect your personal data in a variety of ways:

● Personal data relating to you or your children can be obtained directly from you or your children, for example via

completing the Application and Health and Consent forms, via information provided through the AIS Vienna Parent Portal,

via meetings with teachers and staff, etc.

● Personal data relating to you or your children can also be obtained via other information channels, such as previous

schools, health professionals, social media channels, etc.

● Personal data relating to you or your children also obtained by actions of AIS Vienna itself or its data processors, e.g.

through evaluations, camera surveillance, access control measures, etc.

The American International School • Vienna Data Protection Notice 2020-2021 Page 6

THIRD PARTY PROCESSORS (SUB-PROCESSORS) 

 

DEFINITION 

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the

controller.

SCHOOL-WIDE SUB-PROCESSORS 

Veracross - (https://www.veracross.com) Data collected: personal and sensitive data - Name, Email, Gender, Age, Grade, Address, Date of birth, Medical information

(allergies, medical needs/concerns, over the counter medicine permission, regular medication, medical

restrictions/accommodation), Parent names, Parent Email, Parent phone numbers

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: duration of AIS Vienna 

Google G-Suite for Education - (https://edu.google.com/?modal_active=none) Data collected: personal data - Name, Email, Grade 

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year after leaving AIS Vienna 

WIDA - (https://wida.wisc.edu/) Data collected: personal data – Name, Date of Birth, Gender, Student ID number, Grade

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration and historical archiving 

Bundesministerium für Bildung, Wirtschaft, und Forschung - Education Documentation Act

(https://bildung.bmbwf.gv.at/ministerium/rs/2004_07.html) Data collected: personal and sensitive data - Applicants for Matura Equivalency / Nostrification: Name, Date of Birth, Transcript

of Grades / Academic Records, Graduation Diploma

Location of Company: Austria

Guarantee: GDPR (here) Retention: no retention 

Statistik Austria - (https://www.statistik.at/web_de/ueber_uns/datenschutzinformation/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Address, SV Number, Entry and Withdrawal Dates,

Nationalities, Languages, Student Status ("Ordentlich"), Sports and Other Activities 

Location of Company: Austria 

Guarantee: GDPR (here) Retention: 1 year after leaving AIS

Bildungsdirektion - (https://www.lsr-ooe.gv.at/home-die-bildungsdirektion/) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry and Withdrawal Dates, Nationality

Location of Company: Austria

Guarantee: GDPR (here) Retention: 1 year

Magistratsabteilung 11 Amt für Jugend und Familie - (https://www.wien.gv.at/info/datenschutz/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry, Nationality

Location of Company: Austria

Guarantee: GDPR (here) Retention: 1 year

Magistratsabteilung 35 Einwanderung - (https://www.wien.gv.at/info/datenschutz/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry and Withdrawal Dates, Nationality 

Location of Company: Austria  

Guarantee: GDPR (here) Retention: Archived for retrieval

 

 

The American International School • Vienna Data Protection Notice 2020-2021 Page 7

Other Schools 

Data collected: personal data - Name, Date of Birth, Grade Levels, Enrollment Dates, Addresses, Nationalities, Subjects /

Courses, Grades, Program Completed

Location of Company: Various Countries

Guarantee: Consent

Retention: duration of AIS Vienna

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 8

ELEMENTARY SCHOOL SUB-PROCESSORS 

(FOR STUDENTS IN PRE-KINDERGARTEN – GRADE 5) 

Arcademics - (https://www.arcademics.com/) Data collected: personal data - Name

Location of Company: USA  

Guarantee: Statement (here) Retention: 1 year

Book Creator - (https://bookcreator.com) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: GDPR (here) Retention: depending on longevity at AIS Vienna

Brainpopjr - (https://www.brainpop.com) Data collected: None

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year

Canva - (https://www.canva.com/) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year

Class Dojo - (https://www.classdojo.com) Data collected: personal data - Name, Grade

Location of Company: USA

Guarantee: GDPR (here) Retention: 1 year

Destiny - (https://www.follettlearning.com/technology/products/library-management-system) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account

EduTyping - (https://www.edutyping.com/) Data collected: personal data - First Name, Last Name, Email

Location of Company: USA

Guarantee: FERPA and GDPR (here) Retention: 1 year

Envision Math - (https://www.pearson.com/) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: Privacy Statement (here) Retention: 1 year 

Epic! - (https://www.getepic.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: Privacy statement (here) Retention: 1 year 

Fix the Factory - (https://www.lego.com/) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: Privacy Policy (here) Retention: Duration of account

 

 

The American International School • Vienna Data Protection Notice 2020-2021 Page 9

Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name

Location of Company: USA

Guarantee: COPPA (here) Retention: Duration of account

Fossweb - (https://www.schoolspecialty.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: Privacy Policy (here) Retention: 1 year 

Fountas and Pinnell LLI - (https://www.fountasandpinnell.com/lli/) Data collected: personal data - Name, Grade, Student ID Number

Location of Company: USA

Guarantee: Privacy Policy (here) Retention: Duration of use and historical archiving

Geoboard - (https://www.mathlearningcenter.org/) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: Privacy Statement (here) Retention: Duration of account

GoNoodle - (https://www.gonoodle.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year 

Grammarly - (https://grammarly.com) Data collected: personal data - Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: Duration of account 

Kahoot - (https://kahoot.it/) Data collected: none

Location of Company: USA

Guarantee: European Commission (here) Retention: Duration of account

Magnetic ABC - (https://www.dotnext.it/en/abc-magneticalphabet/) Data collected: personal data - Name, Email

Location of Company: USA  

Guarantee: Privacy Policy (here) Retention: Duration of account 

Mantra Lingua - (http://www.mantralingua.com/) Data collected: personal data - Name, Email

Location of Company: UK

Guarantee: Privacy Policy (here) Retention: Duration of account

Math Bingo - (http://www.abcya.com/math_bingo.htm) Data collected: personal data - Name, Email 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Math Doodle - (http://www.carstensstudios.com/mathdoodles/mathdoodles.htm) Data collected: None

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account

The American International School • Vienna Data Protection Notice 2020-2021 Page 10

Math Facts Pro - (https://mathfactspro.com/) Data collected: personal data - Name, Grade 

Location of Company: USA  

Guarantee: None (here) Retention: Duration of account 

Math Seeds - (https://mathseeds.co.uk/) Data collected: personal data - Name, Date of Birth

Location of Company: UK  

Guarantee: GDPR (here) Retention: Duration of account 

Mindfullness App - (https://themindfulnessapp.com/) Data collected: personal data - Name, Email

Location of Company: Sweden  

Guarantee: GDPR (here) Retention: Duration of account 

Newsela - (https://newsela.com/) Data collected: personal data - Name, Username, Password

Location of Company: USA

Guarantee: COPPA and FERPA (here) Retention: Duration of account

Padlet - (https://padlet.com/) Data collected: personal data - Name, Email, Photo 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

PBS Kids - (https://pbskids.org) Data collected: personal data – Email, Username, Password

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Pearson Realize - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade 

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account 

Pic Collage - (https://pic-collage.com/) Data collected: personal data – Nothing

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Raz Kids - (https://www.raz-kids.com/) Data collected: personal data - Login credentials 

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account 

Reading Eggs - (https://readingeggs.co.uk/) Data collected: personal data - Name, Email, Username

Location of Company: UK  

Guarantee: GDPR (here) Retention: Duration of account 

SeeSaw - (https://web.seesaw.me) Data collected: personal data – Name, Email 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

The American International School • Vienna Data Protection Notice 2020-2021 Page 11

Splash Learn - (https://www.splashlearn.com/) Data collected: personal data - Name

Location of Company: USA and India

Guarantee: Privacy Policy (here) Retention: Duration of services required

Spelling City - (https://www.spellingcity.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Sushi Monster - (https://learningworksforkids.com/playbooks/sushi-monster/) Data collected: personal data - Name, Email. Username, Gender, Race, Ethnicity 

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account 

TextHelp - (https://www.texthelp.com/en-gb/) Data collected: personal data - Name, Email. Location

Location of Company: Ireland

Guarantee: Privacy Shield and GDPR (here) Retention: Duration of account

WeVideo - (https://www.wevideo.com) Data collected: personal data – Name, Google Single Sign On (SSO)

Location of Company: USA  

Guarantee: Privacy Shield and COPPA (here) Retention: Duration of account 

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 12

MIDDLE SCHOOL SUB-PROCESSORS 

(FOR STUDENTS IN GRADES 6 – 8) 

Adobe Creative Cloud - (https://www.adobe.com/creativecloud.html) Data collected: personal data – Name, Email

Location of Company: USA

Guarantee: GDPR (here) Retention: duration at AIS Vienna

Actively Learn - (https://www.activelylearn.com) Data collected: personal data – Name, Google Single Sign On (SSO)

Location of Company: USA  

Guarantee: GDPR (here) Retention: depending on longevity at AIS Vienna

ALEKS - (https://www.aleks.com/) Data collected: personal data - Name, School name, Grade

Location of Company: USA

Guarantee: COPPA (here) Retention: Duration of account

Big History Project - (https://bighistoryproject.com) Data collected: Name, Username, Password, Email, School Status, Location and Grade 

Location of Company: USA  

Guarantee: COPPA (here) Retention: year of use

Brain Pop - (https://www.brainpop.com) Data collected: None (school-wide account used)

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year

Canva - (https://www.canva.com/) Data collected: personal data - Name 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account

Carolina Science Online - (https://www.carolinascienceonline.com) Data collected: personal data - Name, Email, Username

Location of Company: USA

Guarantee: Children’s Information Privacy Policy (here) Retention: 1 year"

Checkology - (https://get.checkology.org/) Data collected: personal data - Name, Email

Location of Company: USA

Guarantee: GDPR (here) Retention: 1 year

Coach’s Eye - (https://www.coachseye.com) Data collected: personal data - Name, Email, Location

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: 1 year 

CODE - (https://code.org/) Data collected: personal data – Name, Google Single Sign On (SSO)

Location of Company: USA

Guarantee: Student Privacy Pledge and GDPR (here) Retention: 1 year after account deactivation

The American International School • Vienna Data Protection Notice 2020-2021 Page 13

CODE HS - (https://codehs.com/) Data collected: personal data – Name, Google Single Sign On (SSO)

Location of Company: USA

Guarantee: COPPA (here) Retention: 4 years after account deactivation

Conjuguemos - (https://conjuguemos.com) Data collected: personal data - Name, Email 

Location of Company: USA  

Guarantee: None (here) Retention: Duration of account 

Destiny - (https://www.follettlearning.com/) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account

Digits - (https://www.pearsonschool.com/index.cfm?locator=PSZwZ5) Data collected: personal data - Name, School name, Grade

Location of Company: USA

Guarantee: COPPA (here) Retention: Duration of account

Duo Lingo - (https://www.duolingo.com) Data collected: personal data - Name, Google Single Sign On (SSO)

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Ed Puzzle - (https://edpuzzle.com) Data collected: personal data – Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Student Privacy Pledge (here) Retention: 1 year 

Essential Elements - (https://www.essentialelementsinteractive.com/) Data collected: personal data – Name

Location of Company: USA

Guarantee: GDPR and COPPA (here) Retention: Duration of account

Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: Duration of account 

Fluentkey - (https://fluentkey.com/) Data collected: personal data - Name, Email, IP Address

Location of Company: USA

Guarantee: Privacy Policy (here) Retention: Duration of account

Grammarly - (https://grammarly.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: Duration of account

I’m a Scientist - (https://imascientist.org.uk) Data collected: personal data - Name, Email, Grade 

Location of Company: UK  

Guarantee: GDPR (here) Retention: Duration of account 

The American International School • Vienna Data Protection Notice 2020-2021 Page 14

Kahoot - (https://www.kahoot.com) Data collected: none

Location of Company: USA  

Guarantee: European Commission (here) Retention: Duration of account 

Kahn Academy - (https://kahnacademy.org) Data collected: personal data – Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Student Privacy Pledge (here) Retention: Duration of account 

MathXL - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account

Mind Meister - (https://www.mindmeister.com/) Data collected: personal data - Name, School name, Email

Location of Company: Germany

Guarantee: GDPR (here) Retention: Duration of purpose

National Geographic - (https://www.nationalgeographic.com/) Data collected: personal data - Browser Data

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account

Newsela - (https://www.newsela.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account 

NoodleBib - (https://noodletools.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Pearson Realize - (https://www.pearsonrealize.com/) Data collected: personal data - Name, School Name, Grade

Location of Company: USA

Guarantee: FERPA and COPPA (here) Retention: Duration of account

Pixir - (https://pixlr.com/) Data collected: personal data – Name, Email, Password, Country

Location of Company: Sweden

Guarantee: Privacy Policy (here) Retention: Two years from date of consent

Pinterest - (https://pinterest.at) Data collected: personal data – Name, Google Single Sign On (SSO) 

Location of Company: Ireland 

Guarantee: GDPR (here) Retention: Duration of use 

Prezi - (https://www.prezi.com) Data collected: personal data - Name

Location of Company: Hungary  

Guarantee: GDPR (here) Retention: Duration of account 

The American International School • Vienna Data Protection Notice 2020-2021 Page 15

Quizlet - (https://quizlet.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Soundcloud - (https://www.soundcloud.com) Data collected: personal data - Name, Google Single Sign On (SSO)

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Storyboard That - (https://storyboardthat.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Thinglink - (https://www.thinglink.com) Data collected: personal data - Name, Email, Role

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

Tinkercad - (https://www.tinkercad.com/) Data collected: personal data - Name, Email, Username and Password

Location of Company: USA

Guarantee: FERPA and COPPA (here) Retention: One year after account deactivation

WeVideo - (https://wevideo.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Privacy Shield and COOPA (here) Retention: Duration of account 

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 16

HIGH SCHOOL SUB-PROCESSORS 

(FOR STUDENTS IN GRADES 9 – 12) 

ACT - (https://www.act.org) Data collected: personal and sensitive data - Name, Email, Gender, Date of Birth, Address

Location of Company: USA  

Guarantee: None (here) Retention: Indefinite for assessment scores

Adobe Creative Cloud - (https://www.adobe.com/creativecloud.html) Data collected: personal data – Name, Email

Location of Company: USA

Guarantee: GDPR (here) Retention: duration at AIS Vienna 

Amnesty International Youth - (https://amnesty.at) Data collected: personal data - Name, Address, Email, Date of Birth 

Location of Company: Austria  

Guarantee: GDPR (here) Retention: Duration of membership

Arduino - (https://auth.arduino.cc/login) Data collected: personal data - Name, Email, Username, Address

Location of Company: Austria

Guarantee: GDPR (here) Retention: Two years after deactivation of account

Cialfo - (https://cialfo.co/) Data collected: personal and sensitive data - Name, Preferred name, Email, Gender, Date of Birth, Mobile number, Graduation

year

Location of Company: Singapore  

Guarantee: GDPR (here) Retention: Indefinite for assessment scores 

CK-12 - (https://www.ck12.org) 

Data collected: personal data - Name, Google Single Sign On (SSO)

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account

Code HS - (https://codehs.com) Data collected: personal data - Name, Email, Password 

Location of Company: USA  

Guarantee: COPPA (here) Retention: 1 year 

College Board - (https://www.collegeboard.org/) Data collected: personal and sensitive data - First Name, Middle Initial, Last Name, Zip Code, Gender, Date of Birth, High

School, Email, Mailing Address, Mobile Phone Number, Username, and Password

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account

Common App - (https://commonapp.org) Data collected: personal and sensitive data - Name, Address, Email, Date of Birth, Gender 

Location of Company: Austria  

Guarantee: GDPR (here) Retention: Duration of account

Destiny - (https://www.follettlearning.com/) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account 

The American International School • Vienna Data Protection Notice 2020-2021 Page 17

DigiExam - (https://www.digiexam.com) Data collected: personal data - Name, Google Single Sign On (SSO)

Location of Company: Sweden  

Guarantee: GDPR (here) Retention: Duration of account 

Edinumen - (https://edinumen.es/) Data collected: personal data - Name, Email

Location of Company: Spain

Guarantee: GDPR (here) Retention: Duration of account

Flat - (https://flat.io) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: UK  

Guarantee: GDPR (here) Retention: Duration of account 

Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name

Location of Company: USA  

Guarantee: Privacy Shield (here) Retention: Duration of account 

Geogebra - (https://www.geogebra.org) Data collected: personal data - Name, Google Single Sign On (SSO)

Location of Company: Austria  

Guarantee: GDPR (here) Retention: Duration of account 

Gizmos - (https://www.explorelearning.com/) Data collected: personal data – First Name, Last Name, Email

Location of Company: USA

Guarantee: FERPA and COPPA (here) Retention: Duration of use

Hy-Tek - (https://activeswim.com) Data collected: personal data - Name, Date of Birth, Nationality, Gender, Grade 

Location of Company: USA 

Guarantee: GDPR (here) Retention: 1 Year

IHT - (https://www.ihtusa.com) Data collected: personal data - Name, Email. Address, Heart rate

Location of Company: USA  

Guarantee: GDPR (here) Retention: 1 year 

Kahoot - (https://kahoot.com) Data collected: personal data - Name, Date of Birth, Nationality, Gender, Grade 

Location of Company: USA 

Guarantee: Privacy Shield (here) Retention: 1 Year 

Kahn Academy - (https://kahnacademy.org) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Student Privacy Pledge (here) Retention: Duration of account 

Kognity - (https://kognity.com) Data collected: personal data - Name, Email 

Location of Company: Sweden 

Guarantee: GDPR (here) Retention: 1 Year 

The American International School • Vienna Data Protection Notice 2020-2021 Page 18

ManageBac - (https://aisat.managebac.com) Data collected: personal data - Name, Email, Username 

Location of Company: USA  

Guarantee: COPPA (here) Retention: Duration of account 

MathXL - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade

Location of Company: USA

Guarantee: GDPR (here) Retention: Duration of account 

Muse Score - (https://musescore.org) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA 

Guarantee: Privacy Shield (here) Retention: 1 Year 

NearPod - (https://nearpod.com/student/) Data collected: personal data - Name

Location of Company: USA

Guarantee: Privacy Shield (here) Retention: Duration of account

NOVA (PBS) - (https://www.pbs.org/wgbh/nova/labs/lab/cyber/) Data collected: personal data - Name, Username, Password

Location of Company: USA

Guarantee: Privacy Shield (here) Retention: Duration of account

Overleaf - (https://overleaf.com) Data collected: personal data - Name, Email, Username 

Location of Company: UK  

Guarantee: GDPR (here) Retention: 1 Year 

Pearson Realize - (https://www.pearsonrealize.com/) Data collected: personal data - Name, School Name, Grade

Location of Company: USA

Guarantee: FERPA and COPPA (here) Retention: Duration of account 

Pinterest - (https://pinterest.at) Data collected: personal data – Name, Google Single Sign On (SSO) 

Location of Company: Ireland 

Guarantee: GDPR (here) Retention: Duration of use 

Quizlet - (https://quizlet.com) Data collected: personal data - Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: GDPR (here) Retention: Duration of account 

SAT - (https://collegeboard.org) Data collected: personal data - Name, Date of Birth, Gender, Email, Username and Password 

Location of Company: USA 

Guarantee: GDPR (here) Retention: Duration of use 

Scratch - (https://scratch.mit.edu/) Data collected: personal data - Name, Email, Username, Country

Location of Company: USA

Guarantee: Privacy Policy (here) Retention: Legal purpose

The American International School • Vienna Data Protection Notice 2020-2021 Page 19

Tinkercad - (https://www.tinkercad.com/) Data collected: personal data - Name, Email, Username and Password

Location of Company: USA

Guarantee: FERPA and COPPA (here) Retention: One year after account deactivation

Turnitin - (https://www.turnitin.com/) Data collected: personal data - Name, Email, Username and Password

Location of Company: USA

Guarantee: Privacy Shield (here) Retention: Duration of school based account

WeVideo - (https://wevideo.com) Data collected: personal data – Name, Google Single Sign On (SSO) 

Location of Company: USA  

Guarantee: Privacy Shield and COPPA (here) Retention: Duration of account 

 

   

The American International School • Vienna Data Protection Notice 2020-2021 Page 20

INTERNATIONAL BACCALAUREATE (IB) SUB-PROCESSORS 

(FOR STUDENTS PARTICIPATING IN THE IB PROGRAMME) 

IBIS - (https://ibis.ibo.org) Data collected: personal and sensitive data - Name, Date of Birth, Gender, Email, PIN Number

Location of Company: Switzerland  

Guarantee: GDPR (here) Retention: 2 years

 

The American International School • Vienna Data Protection Notice 2020-2021 Page 21

THE AMERICAN INTERNATIONAL SCHOOL • VIENNASalmannsdorfer Strasse 47A-1190 Vienna, Austriat. +43 1 40132 0 | f. +43 1 40132 5info@ais.at | www.ais.at