Privacy Notice and Register Information Document
This is the privacy notice and register information document of Digital Teaching Tools Finland Ltd (Finnish business identity code 3154884-5) and it is drafted in accordance with the EU GDPR regulation.
Digital Teaching Tools Finland Ltd (Whiteboard.fi) is certified through iKeepSafe.org for FERPA, COPPA and CSPC.
Created on 18th Nov 2020
Updated on 16th May 2023
|FERPA Certified||COPPA Safe Harbor||California Student Privacy Certified|
Digital Teaching Tools Finland Ltd
Tammisaarentie 68, 10320 Karjaa
Whiteboard.fi user register.
The Lawfullness and Purpose of Processing Personal Data
The legal basis for the processing of personal data is: Consent of the data subject, contract and benefits to the date subject.
The purpose of the processing of the personal data is to provide the Whiteboard.fi service to the users.
The data will not be used for automated decision making or profiling.
Description of the Data Visibility
Whiteboard.fi doesn’t require registration to be used. If Whiteboard.fi is used without registration, no data is persisted from the user outside of the session. Students do not need to create an account to be able to participate in the class, The student name or nickname is collected and visible to the teacher, together with what the student draws on the whiteboard. This information is only visible to the teacher and not to other students.
Students cannot post or save any information to the service, and cannot view any other students’ content or communicate with other students.
Description of the Data Content
If the teacher wants to register and benefit from all features, the following information is collected and stored: user’s name, e-mail, teaching subjects, IP addresses, images of what is drawn on the whiteboards.
This information is only stored for internal use and is not shared with third parties.
Regular Sources of Information
The data is received through the registration process of the web-service Whiteboard.fi.
Regular Disclosure of Data and Transfers of Personal Data to Third Countries
The data is not disclosed regularly to third parties. The data is stored within the United States or within the European Union, depending on the choice of the user.
Third-Party Service Providers
Whiteboard.fi utilizes the services of third party service providers to assist in providing access to the Site.
Amazon Web Services (AWS) for backing up and serving Whiteboard.fi images for the website.
Upcloud for providing application and database servers.
Like any other website, Whiteboard.fi uses 'cookies'. These cookies are used to store information including
visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is
used to optimize the users' experience by customizing our web page content based on visitors' browser
type and/or other information.
Whiteboard.fi uses only strictly functional cookies that are necessary for the operation of the service. No third party cookies are used. The cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to using the service, such as joining a session, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.
The following cookies are used:
whiteboardfi_session: information about the current active session or user.
__cflb: information about which load balancer and data center to use.
xsrf_token: information about the current user to prevent cross-site request forgery.
Principles of Register Protection
If Whiteboard.fi becomes aware of a systems security breach by an unauthorized party or that any user data was used for an unauthorized purpose, we will comply with relevant state and other data breach laws. We will notify users of any breach resulting in unauthorized release of data electronically, at minimum, and without unreasonable delay so that you can take appropriate steps. The notification will include: date of the breach, the types of information that were subject to the breach, general description of what occurred, and steps Whiteboard.fi is taking to address the breach.
Right of Access and Right to Rectification
The register is treated confidentially. The register is adequately protected from third parties.
When storing data using cloud services, adequate processes are implemented to provide data security.
The personal data is only accessible for those employees of the company who require the data to conduct the tasks relating to the purposes described in this document.
All data subjects shall have the right to obtain personal data concerning the data subject. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning the data subject. Requests to obtain personal data and/or rectification should be addressed to the registrar via email.
Other Rights of the Data Subject
The data subject shall have the right to obtain from the controller the erasure of personal data concerning the data subject (“right to be forgotten”). The data subject shall have all the other rights specified in the EU General Data Protection Regulation. Any request under these rights should be addressed to the registrar via email.
We keep personal information until it is deleted, or until we no longer need it to provide you with the Service. We will not retain student personal information for any longer than is necessary for educational purposes and legal obligations, or to provide the Service for which we receive or collect the student personal information. In addition, we only keep student personal information for as long as the student's account is active, unless we are required by law or the student's school to retain it, or need it to protect the safety of our users. Note that some content may be kept after an account is deleted for school legal compliance reasons (e.g. maintenance of "education records" under FERPA or "student records" under various state student privacy laws).
Student data, that is created at the service without a student account, is removed when the teacher deletes the whiteboard session or removes the student from the session. For free users, the session length is limited to 2 hours whereafter the data is automatically deleted. Customers subscribed to a subscription plan can choose the expiration of the sessions for up to 365 days.
Children’s or student’s data, including, personally identifiable information, cannot be sold or released for any commercial or marketing purposes by Whiteboard.fi. Children’s or student’s data, including, personally identifiable information, may only be used by Whiteboard.fi for purposes that are deemed to be legitimate educational purposes and within the intended purposes of the Site.
Parents and Eligible students have the right to inspect and review all data, including, personally identifiable information, which are subject to Data Handling by Us regarding a student.
Parent and Eligible students have the right to seek amendment of all data, including, personally identifiable information, regarding a student, that is believed to be inaccurate, misleading or otherwise in violation of a student’s privacy rights.
Parent and Eligible students have the right to seek deletion of all data, including, personally identifiable information, regarding a student.
Should you have any need for exercising any of the above rights, including those as to inspection and review, amendment or deletion of data, including, personally identifiable information, you should as a first level of support, contact the administrator at the Educational Entity. If your concerns are not addressed by the administrator at the Educational Entity, you should, as a second level of support, contact us.
Parents and Eligible students are identified as such by the Educational Entity in cooperation with Whiteboard.fi support.
Change of Control
In the unlikely event that Whiteboard.fi goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third-party.
Digital Teaching Tools Finland Ltd
Address: Tammisaarentie 68, 10320 Karjaa | Finland