![Page 1: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/1.jpg)
DATA PROTECTION
NOTICE
2020-2021
![Page 2: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/2.jpg)
TABLE OF CONTENTS
COMMITMENT TO DATA PROTECTION 3
THE CONTROLLER 3
DATA PROTECTION TEAM 3
PURPOSE OF PROCESSING 4
YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA BY AIS VIENNA 4
RIGHT TO ACCESS INFORMATION 4
RIGHT TO OBJECT 4
RIGHT TO RECTIFICATION 4
RIGHT TO ERASURE 5
RIGHT TO THE RESTRICTION OF THE PROCESSING 5
RIGHT TO DATA PORTABILITY 5
COMPLAINTS 5
ORIGIN OF YOUR FAMILY’S PERSONAL DATA 6
THIRD PARTY PROCESSORS (SUB-PROCESSORS) 7
DEFINITION 7
SCHOOL-WIDE SUB-PROCESSORS 7
ELEMENTARY SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN PRE-KINDERGARTEN – GRADE 5) 9
MIDDLE SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN GRADES 6 – 8) 13
HIGH SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN GRADES 9 – 12) 17
INTERNATIONAL BACCALAUREATE (IB) SUB-PROCESSORS
(FOR STUDENTS PARTICIPATING IN THE IB PROGRAMME) 21
The American International School • Vienna Data Protection Notice 2020-2021 Page 2
![Page 3: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/3.jpg)
COMMITMENT TO DATA PROTECTION
The American International School · Vienna, Salmannsdorfer Strasse 47, 1190 Vienna, Austria (hereinafter “AIS Vienna” or “we”) processes data on its prospective, current and former students and their parents or legal representatives, as part of its everyday
operations of providing educational services.
AIS Vienna handles your personal data according to the General Data Protection Regulation no. 679/2016 in the European Union
(GDPR) and the Austrian Data Protection Regulation (DSG). AIS Vienna acts as the controller with regard to your personal data
and the personal data of students, meaning AIS Vienna establishes the purpose and means of processing personal data.
This notice is to help you understand how and why AIS Vienna collects your personal information and what we do with your
information. It also explains the decisions that you can make about your own information. If you have any questions about this
notice please contact [email protected].
AIS Vienna reserves the right to make changes to this Notice from time to time, for example in the light of new developments or
new legislation. AIS Vienna will always inform you of such changes in advance. In any event, it is recommended that you consult
this notice regularly.
THE CONTROLLER
The American International School · Vienna
Salmannsdorfer Strasse 47
1190 Vienna
Austria
Tel. +43 1 401320
Email. [email protected]
DATA PROTECTION TEAM
You may contact our data protection team in case you have any questions regarding this document.
Data Protection Team
Salmannsdorfer Strasse 47
1190 Vienna
Austria
Tel. +43 1 401 320 - EXT 2633
Email. [email protected]
AIS is committed to processing data carefully and keeping your personal data secure.
The American International School • Vienna Data Protection Notice 2020-2021 Page 3
![Page 4: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/4.jpg)
PURPOSE OF PROCESSING
AIS Vienna processes personal data that pertain to you or to the students for the following purposes:
● Provision of educational services: application and enrollment process, administration of classes and timetables, teaching
activities, administration of internal and public examinations, assistance regarding the application process to various
universities, issuance of academic records.
● Provision of educational ancillary services: career and personal counselling, library services, athletic and extracurricular
activities, school trips, managing the school’s publications, setting up the virtual learning environment and granting access
to AIS Vienna’s Intranet and Internet network as well as monitoring the use of AIS Vienna’s network.
● Ensuring campus security: monitoring access on campus, performance of video surveillance.
● Provision of the medical care and counselling that students may need.
● School administration: handling student records and other academic documentation, administration of fees and accounts,
internal audits and controls, reporting and statistics creation, implementing school policies, ensuring collaboration with
other schools, archiving, assessing the quality of our services, facilitating research activities.
● School related communications: conveying various messages related to the students and AIS Vienna’s activities by any
communication means.
● Organizing fundraising activities and other school events: performances, shows, tournaments, fairs, etc., including
marketing communications related to the activities organized by AIS Vienna.
● Promotion of the school: publication of pictures and video insofar as the use is limited to educational and extracurricular
activities and promotion of the school via publications, the yearbook, the school website, social media, and other
marketing activities. (Images will be removed at first request of the student/parent/guardian.)
● Dispute resolution and litigations.
YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA BY AIS VIENNA
The GDP regulation provides certain rights related to the processing of personal data, that both you and the students have. In this
respect, please be informed that students that are 16 years or above could exercise the rights listed in this section individually.
AIS Vienna respects all the rights mentioned under the GDPR and is committed to furnishing the appropriate means by which you
can exercise these rights, according to the details mentioned below:
RIGHT TO ACCESS INFORMATION
A data subject has the right of access to personal data which have been collected concerning him or her, and to exercise that right
easily and at reasonable intervals, in order to be aware of the lawfulness of the processing. AIS shall provide a copy of the
personal data undergoing processing. Where personal data are transferred to a third country or to an international organization,
the data subject shall have the right to be informed. In the situations where you may need to exercise the right of access, please
consider contacting AIS Vienna and requesting confirmation by e-mail at [email protected]. Please consider that there might be
specific situations that are exempted from the right of access, such as information that identifies other individuals or which is
subject to confidentiality obligations.
RIGHT TO OBJECT
The right to object to the processing of your Personal Data by AIS Vienna, on grounds relating to your particular situation. The right
to object applies to the situations where AIS Vienna relies on the legitimate interest pursued by the School (e.g. using your email
address for conveying fundraising related messages).
RIGHT TO RECTIFICATION
The data subject shall have the right to obtain from AIS without undue delay the rectification of inaccurate personal data
concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete
personal data completed, including by means of providing a supplementary statement.
The American International School • Vienna Data Protection Notice 2020-2021 Page 4
![Page 5: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/5.jpg)
RIGHT TO ERASURE
The right to erasure means that in the situations expressly regulated by law, you may request erasure of your personal data.
Please take into account that the cases where the law provides for the possibility of erasure of personal data are situations where
the processing is unlawful, or where the processing is based on your consent and you have subsequently withdrawn such consent.
RIGHT TO THE RESTRICTION OF THE PROCESSING
The right to restriction of processing, signifying your right to obtain restriction of processing your Personal Data from AIS Vienna’s
part. Please bear in mind that this right can be exercised only in specific situations laid down by the GDPR such as when you
challenge the accuracy of your Personal Data. During the period necessary for us to rectify your data, you may ask us to restrict
the processing of your Personal Data.
RIGHT TO DATA PORTABILITY
The right to data portability implying your right to receive the personal data in a structured, commonly used and machine-readable
format and further to transmit such data to another controller. This right to data portability shall be applicable only to the personal
data you have provided to us and where the processing is carried out by automated means based on your consent or for the
performance of the contract you have concluded with AIS Vienna.
COMPLAINTS
The initial point of contact, in regards to the processing of personal data by AIS Vienna and its subcontractors and the exercising of
the rights described above, is the data protection team. AIS Vienna shall respond to such requests and may or may not act upon
them, in principle within a period of one month, all in accordance with applicable data protection legislation. In addition, you also
have the right to contact or file a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde
Wickenburggasse 8
1080 Vienna, Austria
Tel: +43 1 52 152-0
E-Mail: [email protected]
https://www.data-protection-authority.gv.at/contact
The American International School • Vienna Data Protection Notice 2020-2021 Page 5
![Page 6: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/6.jpg)
ORIGIN OF YOUR FAMILY’S PERSONAL DATA
We may collect your personal data in a variety of ways:
● Personal data relating to you or your children can be obtained directly from you or your children, for example via
completing the Application and Health and Consent forms, via information provided through the AIS Vienna Parent Portal,
via meetings with teachers and staff, etc.
● Personal data relating to you or your children can also be obtained via other information channels, such as previous
schools, health professionals, social media channels, etc.
● Personal data relating to you or your children also obtained by actions of AIS Vienna itself or its data processors, e.g.
through evaluations, camera surveillance, access control measures, etc.
The American International School • Vienna Data Protection Notice 2020-2021 Page 6
![Page 7: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/7.jpg)
THIRD PARTY PROCESSORS (SUB-PROCESSORS)
DEFINITION
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the
controller.
SCHOOL-WIDE SUB-PROCESSORS
Veracross - (https://www.veracross.com) Data collected: personal and sensitive data - Name, Email, Gender, Age, Grade, Address, Date of birth, Medical information
(allergies, medical needs/concerns, over the counter medicine permission, regular medication, medical
restrictions/accommodation), Parent names, Parent Email, Parent phone numbers
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: duration of AIS Vienna
Google G-Suite for Education - (https://edu.google.com/?modal_active=none) Data collected: personal data - Name, Email, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year after leaving AIS Vienna
WIDA - (https://wida.wisc.edu/) Data collected: personal data – Name, Date of Birth, Gender, Student ID number, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration and historical archiving
Bundesministerium für Bildung, Wirtschaft, und Forschung - Education Documentation Act
(https://bildung.bmbwf.gv.at/ministerium/rs/2004_07.html) Data collected: personal and sensitive data - Applicants for Matura Equivalency / Nostrification: Name, Date of Birth, Transcript
of Grades / Academic Records, Graduation Diploma
Location of Company: Austria
Guarantee: GDPR (here) Retention: no retention
Statistik Austria - (https://www.statistik.at/web_de/ueber_uns/datenschutzinformation/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Address, SV Number, Entry and Withdrawal Dates,
Nationalities, Languages, Student Status ("Ordentlich"), Sports and Other Activities
Location of Company: Austria
Guarantee: GDPR (here) Retention: 1 year after leaving AIS
Bildungsdirektion - (https://www.lsr-ooe.gv.at/home-die-bildungsdirektion/) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry and Withdrawal Dates, Nationality
Location of Company: Austria
Guarantee: GDPR (here) Retention: 1 year
Magistratsabteilung 11 Amt für Jugend und Familie - (https://www.wien.gv.at/info/datenschutz/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry, Nationality
Location of Company: Austria
Guarantee: GDPR (here) Retention: 1 year
Magistratsabteilung 35 Einwanderung - (https://www.wien.gv.at/info/datenschutz/index.html) Data collected: personal data - Name, Date of Birth, Grade Level, City, PLZ, Entry and Withdrawal Dates, Nationality
Location of Company: Austria
Guarantee: GDPR (here) Retention: Archived for retrieval
The American International School • Vienna Data Protection Notice 2020-2021 Page 7
![Page 8: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/8.jpg)
Other Schools
Data collected: personal data - Name, Date of Birth, Grade Levels, Enrollment Dates, Addresses, Nationalities, Subjects /
Courses, Grades, Program Completed
Location of Company: Various Countries
Guarantee: Consent
Retention: duration of AIS Vienna
The American International School • Vienna Data Protection Notice 2020-2021 Page 8
![Page 9: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/9.jpg)
ELEMENTARY SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN PRE-KINDERGARTEN – GRADE 5)
Arcademics - (https://www.arcademics.com/) Data collected: personal data - Name
Location of Company: USA
Guarantee: Statement (here) Retention: 1 year
Book Creator - (https://bookcreator.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: GDPR (here) Retention: depending on longevity at AIS Vienna
Brainpopjr - (https://www.brainpop.com) Data collected: None
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Canva - (https://www.canva.com/) Data collected: personal data - Name
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Class Dojo - (https://www.classdojo.com) Data collected: personal data - Name, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Destiny - (https://www.follettlearning.com/technology/products/library-management-system) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
EduTyping - (https://www.edutyping.com/) Data collected: personal data - First Name, Last Name, Email
Location of Company: USA
Guarantee: FERPA and GDPR (here) Retention: 1 year
Envision Math - (https://www.pearson.com/) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Statement (here) Retention: 1 year
Epic! - (https://www.getepic.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy statement (here) Retention: 1 year
Fix the Factory - (https://www.lego.com/) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 9
![Page 10: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/10.jpg)
Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Fossweb - (https://www.schoolspecialty.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: 1 year
Fountas and Pinnell LLI - (https://www.fountasandpinnell.com/lli/) Data collected: personal data - Name, Grade, Student ID Number
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: Duration of use and historical archiving
Geoboard - (https://www.mathlearningcenter.org/) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Statement (here) Retention: Duration of account
GoNoodle - (https://www.gonoodle.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Grammarly - (https://grammarly.com) Data collected: personal data - Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
Kahoot - (https://kahoot.it/) Data collected: none
Location of Company: USA
Guarantee: European Commission (here) Retention: Duration of account
Magnetic ABC - (https://www.dotnext.it/en/abc-magneticalphabet/) Data collected: personal data - Name, Email
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: Duration of account
Mantra Lingua - (http://www.mantralingua.com/) Data collected: personal data - Name, Email
Location of Company: UK
Guarantee: Privacy Policy (here) Retention: Duration of account
Math Bingo - (http://www.abcya.com/math_bingo.htm) Data collected: personal data - Name, Email
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Math Doodle - (http://www.carstensstudios.com/mathdoodles/mathdoodles.htm) Data collected: None
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 10
![Page 11: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/11.jpg)
Math Facts Pro - (https://mathfactspro.com/) Data collected: personal data - Name, Grade
Location of Company: USA
Guarantee: None (here) Retention: Duration of account
Math Seeds - (https://mathseeds.co.uk/) Data collected: personal data - Name, Date of Birth
Location of Company: UK
Guarantee: GDPR (here) Retention: Duration of account
Mindfullness App - (https://themindfulnessapp.com/) Data collected: personal data - Name, Email
Location of Company: Sweden
Guarantee: GDPR (here) Retention: Duration of account
Newsela - (https://newsela.com/) Data collected: personal data - Name, Username, Password
Location of Company: USA
Guarantee: COPPA and FERPA (here) Retention: Duration of account
Padlet - (https://padlet.com/) Data collected: personal data - Name, Email, Photo
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
PBS Kids - (https://pbskids.org) Data collected: personal data – Email, Username, Password
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Pearson Realize - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Pic Collage - (https://pic-collage.com/) Data collected: personal data – Nothing
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Raz Kids - (https://www.raz-kids.com/) Data collected: personal data - Login credentials
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Reading Eggs - (https://readingeggs.co.uk/) Data collected: personal data - Name, Email, Username
Location of Company: UK
Guarantee: GDPR (here) Retention: Duration of account
SeeSaw - (https://web.seesaw.me) Data collected: personal data – Name, Email
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 11
![Page 12: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/12.jpg)
Splash Learn - (https://www.splashlearn.com/) Data collected: personal data - Name
Location of Company: USA and India
Guarantee: Privacy Policy (here) Retention: Duration of services required
Spelling City - (https://www.spellingcity.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Sushi Monster - (https://learningworksforkids.com/playbooks/sushi-monster/) Data collected: personal data - Name, Email. Username, Gender, Race, Ethnicity
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
TextHelp - (https://www.texthelp.com/en-gb/) Data collected: personal data - Name, Email. Location
Location of Company: Ireland
Guarantee: Privacy Shield and GDPR (here) Retention: Duration of account
WeVideo - (https://www.wevideo.com) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield and COPPA (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 12
![Page 13: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/13.jpg)
MIDDLE SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN GRADES 6 – 8)
Adobe Creative Cloud - (https://www.adobe.com/creativecloud.html) Data collected: personal data – Name, Email
Location of Company: USA
Guarantee: GDPR (here) Retention: duration at AIS Vienna
Actively Learn - (https://www.activelylearn.com) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: depending on longevity at AIS Vienna
ALEKS - (https://www.aleks.com/) Data collected: personal data - Name, School name, Grade
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Big History Project - (https://bighistoryproject.com) Data collected: Name, Username, Password, Email, School Status, Location and Grade
Location of Company: USA
Guarantee: COPPA (here) Retention: year of use
Brain Pop - (https://www.brainpop.com) Data collected: None (school-wide account used)
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Canva - (https://www.canva.com/) Data collected: personal data - Name
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Carolina Science Online - (https://www.carolinascienceonline.com) Data collected: personal data - Name, Email, Username
Location of Company: USA
Guarantee: Children’s Information Privacy Policy (here) Retention: 1 year"
Checkology - (https://get.checkology.org/) Data collected: personal data - Name, Email
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Coach’s Eye - (https://www.coachseye.com) Data collected: personal data - Name, Email, Location
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: 1 year
CODE - (https://code.org/) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Student Privacy Pledge and GDPR (here) Retention: 1 year after account deactivation
The American International School • Vienna Data Protection Notice 2020-2021 Page 13
![Page 14: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/14.jpg)
CODE HS - (https://codehs.com/) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: COPPA (here) Retention: 4 years after account deactivation
Conjuguemos - (https://conjuguemos.com) Data collected: personal data - Name, Email
Location of Company: USA
Guarantee: None (here) Retention: Duration of account
Destiny - (https://www.follettlearning.com/) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Digits - (https://www.pearsonschool.com/index.cfm?locator=PSZwZ5) Data collected: personal data - Name, School name, Grade
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Duo Lingo - (https://www.duolingo.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Ed Puzzle - (https://edpuzzle.com) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Student Privacy Pledge (here) Retention: 1 year
Essential Elements - (https://www.essentialelementsinteractive.com/) Data collected: personal data – Name
Location of Company: USA
Guarantee: GDPR and COPPA (here) Retention: Duration of account
Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
Fluentkey - (https://fluentkey.com/) Data collected: personal data - Name, Email, IP Address
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: Duration of account
Grammarly - (https://grammarly.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
I’m a Scientist - (https://imascientist.org.uk) Data collected: personal data - Name, Email, Grade
Location of Company: UK
Guarantee: GDPR (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 14
![Page 15: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/15.jpg)
Kahoot - (https://www.kahoot.com) Data collected: none
Location of Company: USA
Guarantee: European Commission (here) Retention: Duration of account
Kahn Academy - (https://kahnacademy.org) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Student Privacy Pledge (here) Retention: Duration of account
MathXL - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Mind Meister - (https://www.mindmeister.com/) Data collected: personal data - Name, School name, Email
Location of Company: Germany
Guarantee: GDPR (here) Retention: Duration of purpose
National Geographic - (https://www.nationalgeographic.com/) Data collected: personal data - Browser Data
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Newsela - (https://www.newsela.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
NoodleBib - (https://noodletools.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Pearson Realize - (https://www.pearsonrealize.com/) Data collected: personal data - Name, School Name, Grade
Location of Company: USA
Guarantee: FERPA and COPPA (here) Retention: Duration of account
Pixir - (https://pixlr.com/) Data collected: personal data – Name, Email, Password, Country
Location of Company: Sweden
Guarantee: Privacy Policy (here) Retention: Two years from date of consent
Pinterest - (https://pinterest.at) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: Ireland
Guarantee: GDPR (here) Retention: Duration of use
Prezi - (https://www.prezi.com) Data collected: personal data - Name
Location of Company: Hungary
Guarantee: GDPR (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 15
![Page 16: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/16.jpg)
Quizlet - (https://quizlet.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Soundcloud - (https://www.soundcloud.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Storyboard That - (https://storyboardthat.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Thinglink - (https://www.thinglink.com) Data collected: personal data - Name, Email, Role
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Tinkercad - (https://www.tinkercad.com/) Data collected: personal data - Name, Email, Username and Password
Location of Company: USA
Guarantee: FERPA and COPPA (here) Retention: One year after account deactivation
WeVideo - (https://wevideo.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield and COOPA (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 16
![Page 17: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/17.jpg)
HIGH SCHOOL SUB-PROCESSORS
(FOR STUDENTS IN GRADES 9 – 12)
ACT - (https://www.act.org) Data collected: personal and sensitive data - Name, Email, Gender, Date of Birth, Address
Location of Company: USA
Guarantee: None (here) Retention: Indefinite for assessment scores
Adobe Creative Cloud - (https://www.adobe.com/creativecloud.html) Data collected: personal data – Name, Email
Location of Company: USA
Guarantee: GDPR (here) Retention: duration at AIS Vienna
Amnesty International Youth - (https://amnesty.at) Data collected: personal data - Name, Address, Email, Date of Birth
Location of Company: Austria
Guarantee: GDPR (here) Retention: Duration of membership
Arduino - (https://auth.arduino.cc/login) Data collected: personal data - Name, Email, Username, Address
Location of Company: Austria
Guarantee: GDPR (here) Retention: Two years after deactivation of account
Cialfo - (https://cialfo.co/) Data collected: personal and sensitive data - Name, Preferred name, Email, Gender, Date of Birth, Mobile number, Graduation
year
Location of Company: Singapore
Guarantee: GDPR (here) Retention: Indefinite for assessment scores
CK-12 - (https://www.ck12.org)
Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
Code HS - (https://codehs.com) Data collected: personal data - Name, Email, Password
Location of Company: USA
Guarantee: COPPA (here) Retention: 1 year
College Board - (https://www.collegeboard.org/) Data collected: personal and sensitive data - First Name, Middle Initial, Last Name, Zip Code, Gender, Date of Birth, High
School, Email, Mailing Address, Mobile Phone Number, Username, and Password
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Common App - (https://commonapp.org) Data collected: personal and sensitive data - Name, Address, Email, Date of Birth, Gender
Location of Company: Austria
Guarantee: GDPR (here) Retention: Duration of account
Destiny - (https://www.follettlearning.com/) Data collected: personal data - First Name, Last Name, Email, Grade Level, Homeroom, Parent Email
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 17
![Page 18: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/18.jpg)
DigiExam - (https://www.digiexam.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: Sweden
Guarantee: GDPR (here) Retention: Duration of account
Edinumen - (https://edinumen.es/) Data collected: personal data - Name, Email
Location of Company: Spain
Guarantee: GDPR (here) Retention: Duration of account
Flat - (https://flat.io) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: UK
Guarantee: GDPR (here) Retention: Duration of account
Flipgrid - (https://www.flipgrid.com) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
Geogebra - (https://www.geogebra.org) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: Austria
Guarantee: GDPR (here) Retention: Duration of account
Gizmos - (https://www.explorelearning.com/) Data collected: personal data – First Name, Last Name, Email
Location of Company: USA
Guarantee: FERPA and COPPA (here) Retention: Duration of use
Hy-Tek - (https://activeswim.com) Data collected: personal data - Name, Date of Birth, Nationality, Gender, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 Year
IHT - (https://www.ihtusa.com) Data collected: personal data - Name, Email. Address, Heart rate
Location of Company: USA
Guarantee: GDPR (here) Retention: 1 year
Kahoot - (https://kahoot.com) Data collected: personal data - Name, Date of Birth, Nationality, Gender, Grade
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: 1 Year
Kahn Academy - (https://kahnacademy.org) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Student Privacy Pledge (here) Retention: Duration of account
Kognity - (https://kognity.com) Data collected: personal data - Name, Email
Location of Company: Sweden
Guarantee: GDPR (here) Retention: 1 Year
The American International School • Vienna Data Protection Notice 2020-2021 Page 18
![Page 19: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/19.jpg)
ManageBac - (https://aisat.managebac.com) Data collected: personal data - Name, Email, Username
Location of Company: USA
Guarantee: COPPA (here) Retention: Duration of account
MathXL - (https://www.pearson.com/) Data collected: personal data - Name, School name, Grade
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
Muse Score - (https://musescore.org) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: 1 Year
NearPod - (https://nearpod.com/student/) Data collected: personal data - Name
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
NOVA (PBS) - (https://www.pbs.org/wgbh/nova/labs/lab/cyber/) Data collected: personal data - Name, Username, Password
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of account
Overleaf - (https://overleaf.com) Data collected: personal data - Name, Email, Username
Location of Company: UK
Guarantee: GDPR (here) Retention: 1 Year
Pearson Realize - (https://www.pearsonrealize.com/) Data collected: personal data - Name, School Name, Grade
Location of Company: USA
Guarantee: FERPA and COPPA (here) Retention: Duration of account
Pinterest - (https://pinterest.at) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: Ireland
Guarantee: GDPR (here) Retention: Duration of use
Quizlet - (https://quizlet.com) Data collected: personal data - Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of account
SAT - (https://collegeboard.org) Data collected: personal data - Name, Date of Birth, Gender, Email, Username and Password
Location of Company: USA
Guarantee: GDPR (here) Retention: Duration of use
Scratch - (https://scratch.mit.edu/) Data collected: personal data - Name, Email, Username, Country
Location of Company: USA
Guarantee: Privacy Policy (here) Retention: Legal purpose
The American International School • Vienna Data Protection Notice 2020-2021 Page 19
![Page 20: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/20.jpg)
Tinkercad - (https://www.tinkercad.com/) Data collected: personal data - Name, Email, Username and Password
Location of Company: USA
Guarantee: FERPA and COPPA (here) Retention: One year after account deactivation
Turnitin - (https://www.turnitin.com/) Data collected: personal data - Name, Email, Username and Password
Location of Company: USA
Guarantee: Privacy Shield (here) Retention: Duration of school based account
WeVideo - (https://wevideo.com) Data collected: personal data – Name, Google Single Sign On (SSO)
Location of Company: USA
Guarantee: Privacy Shield and COPPA (here) Retention: Duration of account
The American International School • Vienna Data Protection Notice 2020-2021 Page 20
![Page 21: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/21.jpg)
INTERNATIONAL BACCALAUREATE (IB) SUB-PROCESSORS
(FOR STUDENTS PARTICIPATING IN THE IB PROGRAMME)
IBIS - (https://ibis.ibo.org) Data collected: personal and sensitive data - Name, Date of Birth, Gender, Email, PIN Number
Location of Company: Switzerland
Guarantee: GDPR (here) Retention: 2 years
The American International School • Vienna Data Protection Notice 2020-2021 Page 21
![Page 22: DATA PROTECTION NOTICE · 2020-02-23 · P U R P O S E O F P R O C E S S IN G AIS Vienna processes personal data that pertain to you or to the students for the following purposes:](https://reader034.vdocuments.net/reader034/viewer/2022042114/5e914c7db2bd0954e024ffa8/html5/thumbnails/22.jpg)
THE AMERICAN INTERNATIONAL SCHOOL • VIENNASalmannsdorfer Strasse 47A-1190 Vienna, Austriat. +43 1 40132 0 | f. +43 1 40132 [email protected] | www.ais.at