Di-S (“Di-S”, “Us”, “We”, or “Our”) understands that your privacy is important to you and that you care about how your Personal Data is used. We respect and value the privacy of everyone who visits this website, www.di-s.org(“Our Site” or “Site”), the Di-S platform (“Our Platform”) and uses the offered services (“Our Services” or “Services”) and will only collect and use Personal Data in ways that are described here, and in a way that is consistent with our obligations and your rights under all relevant data privacy laws. Please read this Privacy Policy carefully and ensure that you understand it. Regardless of what type of user you are as described below Online School Administrator/User, End User and/or Site Visitor, this Privacy Policy creates a legal agreement directly between you and Us and explain the rules governing use of the Platform, Service and Site. If you do not agree with and accept this Privacy Policy, do not access or use our Site and/or Platform or any other aspect of Our business. You will be required to read and accept this Privacy Policy when signing up for a trial account to use Our Platform. We may, from time to time, modify this Privacy Policy. Please check this web-page periodically for updates. We will comply with applicable legal obligations to provide you with relevant notice of changes to this Privacy Policy. Your continued use of the Site, the Platform and Services after any such update constitutes your acceptance of such changes. Definitions and InterpretationAll terms in capitals not defined herein shall have the meaning assigned to them in Our Terms of Service. In this Policy the following terms shall have the following meanings: “Account”means an account required to access and/or use certain areas and features of Our Siteand/or Platform and respective Services;“Cookie”means a small text file placed on your computer or device by Our Site or Platform when you visit certain parts of Our Site or Platform and/or when you use certain features of Our Site or Platform. Details of the Cookies used by Our Site and Platform are set out inPart 13, below.“Cookie Law”means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003.“End-User”means the user that has registered to an Online School.“Online School”means a specialized website created by a User using Our Platform, which shall contain User Content (Free and/or Paid Online Courses) and shall be hosted by Us;“Site Visitors”means visitors of the Website.“User”means a user of Our Site. Information About UsOur Site and Our Platform are owned and operated and our Services are offered by Di-S (CY) Ltd, a limited company registered in Cyprus under company number HE391395. Registered address: Gladstonos 200, Limassol, 3032, Cyprus.VAT number: CY10391285R RRegistered with Information Commissioner’s Office with Reference Number: ZA383105.Email address: gdpr@di-s.org Telephone number: +357 22111615 What is Personal Data?Personal data is defined by the General Data Protection Regulation (EU Regulation 2019/859) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal Data is, in simpler terms, any information about you that enables you to be identified. Personal Data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. What Does This Policy Cover?This Privacy Policy applies only to your use of Our Site, Platform and respective Services. Our Site and Platform may contain links to other websites. Please note that we have no control over how your Personal Data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any Personal Data to them. The Personal Data we collect depends on the context of your interaction and use of our Site, Services and Platform and the choices you make in relation to your privacy settings. If you have questions about Our business operations in connection with providing Services to an Online School, please contact Us, as described in the How Do I Contact You section (Part 14). (i) Online School Administrator If you are or represent a User that utilizes Our Platform to create, edit and host an Online School (“Online School Administrator”), please see below our legal basis and learn how we process your Personal Data. When a User tries, subscribes or uses Our Platform and Services and obtains support for the above under an agreement with Us, We receive data from the User and collect and generate data based on Our legitimate interest to provide the requested Services (including improving, securing, and updating the Service), conduct our business operations, and communicate with the User, carry out business development and marketing activities and for administrative and auditing purposes. The Personal Data provided by the User may include: Name;E-mail;Financial information when you make a subscription ((credit card details, account details, payment information);Identifiable IT information (IP addresses, usage data, cookies data, online navigation data, browser data);Telephone number;Business name;Payment information. The Personal Data we collect while you use our Product and Services include: Web browser type and version;Operating system;A list of URLs starting with a referring site, your activity on Our Site, and the site you exit to;Number of log-ins. (ii) End User If you are an End User of an Online School, please see the terms and conditions and privacy policy of that third party, and direct your privacy inquiries, including any requests to exercise your data protection rights, to the Online School’s Administrator. We are not responsible for the privacy or security practices of our Online School Administrators, which may differ from those set forth in this privacy policy. However, we process your Personal Data and act as data processors to the Online School Administrator that is the data controller, with whom you have entered into an agreement with. The Personal Data provided by the End User may include: Name.Email Address.Other custom form fields and profile information (occupation or other demographic information, address, job title) subject to the Online School Administrator set-up.End-user’s personal interests or preferences (including purchase history, marketing preferences and publicly available social media profile information subject to the Online School Administrator set-up. The Personal Data we collect while you use our Product and Services may include: Identifiable IT information (IP addresses, usage data, cookies data, online navigation data, browser data).Number of log-ins.Webpages visited.Activity on the said Online School. If you use an Online School Account you can: Control and administer your Account, including controlling privacy-related settings.Access and process your Personal Data, including the interaction data and the contents of your communications and files associated with your account in the Online School.Access and process your End User’s Personal Data as provided by them to offer the agreed services. When you use an Online School, Di-S processing of your Personal Data in connection with that Online School is governed by an agreement between Di-S and the respective User, who administrates the Online School. Di-S processes your Personal Data to provide its Services to your Online School Administrator and you. For Di-S Platform and Services provided by an Online School Administrator to minors, Di-S will: not collect or use such Personal Data beyond that needed for authorized operational purposes and to provide the relevant Services; not sell or rent such Personal Data; not use or share such Personal Data for advertising or similar commercial purposes, such as behavioral targeting of advertisements to minors; not build a personal profile of a minor, other than for supporting authorized educational or school purposes or as authorized by the parent or guardian; and require that our Online School Administrators with whom minors’ Personal Data is shared to deliver the Service, if any, are obligated to implement these same commitments for such Personal Data. (iii) Site Visitors When you visit our Site the following information may be collected: your IP address, which browser version you use, time of your visit, how you use Our website and information about your device (e.g. geographical location, operating system, host name of accessing computer). For details, please read our Cookie Policy below under Part 13. The above mentioned data does not contain additional Personal Data, and cannot be assigned to specific persons. You may choose to voluntarily submit your Personal Data by filling in the form(s) on our website (e.g. registration for a 30-day free trial). Such information shall consist of your email address. (iv) Job applicants When you apply for a position by either populating the application form, by email or by hard copy and whether submitted directly by you or by a third-party recruitment agency on your behalf, we will use such data to evaluate you for the open position that you have applied for or any position that we consider you suitable for at the time you submit your resume or at any later date. The Personal Data processed includes: Your contact information, such as name, email address, mailing address, phone number;any other information you volunteer, including during any interview or your interactions with us and contained in the resume that you submit to us;Personal Data of yours obtained from any third parties we work with in relation to our recruitment activities, including without limitation (and subject to local laws), recruitment agencies and your referees; anddetails of your education, qualifications and employment history, any other Personal Data which is contained in any reference about you that we receive. What Are My Rights?Under the GDPR, you have the following rights, which we will always work to uphold: a)The right to be informed about our collection and use of your Personal Data. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in “How Do I Contact You?”.b)The right to access the Personal Data we hold about you. Part 12 will tell you how to do this.c)The right to have your Personal Data rectified if any of your Personal Data held by us is inaccurate or incomplete. Please contact us using the details in “How Do I Contact You?” to find out more.d)The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have. Please contact us using the details in “How Do I Contact You?” to find out more, response timeframe is within a month.e)The right to restrict (i.e. prevent) the processing of your personal data.f)The right to object to us using your personal data for a particular purpose or purposes.g)The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.h)Rights relating to automated decision-making and profiling. We do not use your Personal Data in this way. For any query in relation to our use of your Personal Data or exercising your rights as outlined above, please contact us using the details provided in Part 15. Further information about your rights can also be obtained from the information commissioner’s office or your local citizens advice bureau. If you have any cause for complaint about our use of your Personal Data, you have the right to lodge a complaint with the information commissioner’s office. How Do You Use My Personal Data?Under the GDPR, we must always have a lawful basis for using Personal Data. This may be because the Personal Data is necessary for providing our Services to you, because you have consented to our use of your Personal Data, or because it is in our legitimate business interests to use it. Your Personal Data may be used for one of the following purposes subject to your relevant consent or request: Providing and managing your Account on Our Platform;Providing and managing your access to Our Site, Platform and relevant Services;Operating our Site, Platform and provide Services;Personalising and tailoring your experience on Our Site and Platform;Supplying Our Platform for your usage and Services to you. Your personal details are required in order for Us to enter into an agreement with you.Personalising and tailoring Our Platform and Services for you upon your request.Communicating with you in order to offer our Services. This may include responding to emails, support tickets or calls from you.Supplying you with information by email that you have opted-in to (you mayunsubscribe or opt-out at any time by submitting a ticket to our Help Center (https://support.di-s.org) or sending an email to gdpr@di-s.org).Analysing your use of Our Site and Platform and gathering feedback to enable us to continually improve Our Site, Platform, Services and your overall user experience.Monitor, detect, prevent, cease prohibited or illegal activities and enforce our terms of service and all other policies. With your permission and/or where permitted by law, we may also use your Personal Data for marketing purposes, which may include contacting you by email or telephone or text message with information, news, and offers on Our Platform and Services. You will not be sent any unlawful marketing content or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out. Third Parties whose digital tools we use on Our Site and Platform may use third-party Cookies, as detailed below in Part 14. Please refer to Part 14 for more information on controlling cookies. Please note that we do not control the activities of such third parties, nor the data they collect and use themselves, and we advise you to check the privacy policies of any such third parties. How Long Will You Keep My Personal Data?We will not keep your Personal Data for any longer than is necessary in light of the reason(s) for which it was first collected. Your Personal Data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept): For as long as you keep a paid or trial Account with Our Platform.For as long as you remain subscribed (have positively opted-in) in our emailing list and wish to receive news and offers from us.If none of the above is, then we will keep your data for maximum period of two years following your initial communication or signup/Personal Data submission.For proper compliance with our legal, accounting and tax obligations. How and Where Do You Store or Transfer My Personal Data?We share your data with external third parties, as detailed below in Part 9, and some are based outside of the EEA. The following safeguards are applied to such transfers: We will only transfer your Personal Data to countries that the European Commission has deemed to provide an adequate level of Personal Data protection. Additionally, we use specific agreements and standard contractual clauses with external third parties that are approved by the European Commission for the transfer of Personal Data to third countries. These specific agreements and standard contractual clauses ensure the same levels of Personal Data protection that would apply under the GDPR. Please contact us using the details below in Part 14 for further information about the particular data protection mechanism used by us when transferring your personal data to a third country. Data Storage All Personal Data that you provide in order to receive the Services and use the Platform and any Online School is stored on secure Google Cloud servers located in Europe and in the U.S.A. Any payment transactions will be encrypted using SSL technology; All payment data is stored by our payment processors and is never stored on our servers. Where we have given you (or where you have chosen) a password that enables you to access your account and the Product, you are responsible for keeping this password confidential. We recommend that you not share your password and that you change it frequently. Data Security: Here at Di-S we take data security and privacy very seriously and we continuously look for opportunities to make improvements. Here are the measures we employ for securely storing the data you entrusted to us: https://www.di-s.org/data-security/. Do You Share My Personal Data?We may sometimes enter into agreements with the following third parties to be able to offer certain features of Our Site, the Platform and Services under our capacity as data controllers. These may include payment processing, delivery, and marketing. In some cases, those third parties may require access to some or all of your Personal Data that we hold. Chargebee.com (subscription management and invoicing)Braintreepayments.com (online credit card payments)PayPal.com (online payments)FreshDesk (Customer help center and support tickets)Agile CRM (CRM, form handling, appointment scheduling and user analytics)FirstPromoter (registration and tracking of affiliates)Google Analytics (website user analytics)Google Cloud (data transfer and storage)MixPanel (website user analytics)Segment (website user analytics)HotJar (website user analytics)Google AdWords (targeting and tracking of ad campaigns)Facebook (targeting and tracking of ad campaigns)useFOMO (display of user notifications)LeadPages (displaying pop-ups and registration forms)Wistia (showing user videos and tracking analytics) If any of your Personal Data is required by a third party, as described above, we will take steps to ensure that your Personal Data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above in Part 8. If any Personal Data is transferred outside of the EEA, we will take suitable steps in order to ensure that your Personal Data is treated just as safely and securely as it would be within the EU and under the GDPR, as explained above in Part 8. In some limited circumstances, we may be legally required to share certain Personal Data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority. How Can I Control My Personal Data?In addition to your rights under the GDPR, set out in Part 5, when you submit Personal Data via Our Site and Platform, you may be given options to restrict our use of your Personal Data. In particular, we provide you with strong controls on our use of your Personal Data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails, at the point of providing your details, or and by managing your Account). Can I Withhold Information?You may access certain areas of Our Site without providing any Personal Data at all. However, to use all features and functions available on Our Site and Platform you may be required to submit or allow for the collection of certain data for us to be able to offer our relevant Services. You may restrict our use of Cookies. For more information, see Part 13 of this policy. How Can I Access My Personal Data?If you want to know what Personal Data We have about you, you can ask us for details of that Personal Data and for a copy of it (where any such Personal Data is held). This is known as a “subject access request”. All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 14. To make this as easy as possible for you, a subject access request form is available for you to use. You do not have to use this form, but it is the easiest way to tell us everything We need to know to respond to your request as quickly as possible. Please contact us at gdpr@di-s.org and request this form. There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding. We will respond to your subject access request within 21 days and, in any case, not more than one month of receiving it. Normally, We aim to provide a complete response, including a copy of your Personal Data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date We receive your request. You will be kept fully informed of our progress. How Do You Use Cookies?Our Site and Platform may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of Our Site and Platform, and to provide and improve our Services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and Personal Data is protected and respected at all times. By using Our Site and Platform, you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than us. Third-party Cookies are used on Our Site for analytics and for marketing purposes. For more details, please refer to the table below. These Cookies are not integral to the functioning of Our Site and Platform and your use and experience of Our Site and Platform will not be impaired by refusing consent to them. All Cookies used by and on Our Site are used in accordance with current Cookie Law. Before Cookies are placed on your computer or device, you will be shown a banner requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and Service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of Our Site and Platform may not function fully or as intended. Certain features of Our Site and Platform depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are shown in the table below. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings as detailed below, but please be aware that Our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them. (Cookie declaration last updated on 24/05/2018) The following first-party Cookies may be placed on your computer or device: Name of CookiePurposeStrictly NecessaryPHPSESSIDPreserves users states across page requestsYesdebugHelps with the identification and resolution of potential bugsYesdi-s_sessionPreserves User Login information and statesYesXSRF-TOKENPreserves User Login information and statesYeswfvt_#Remembers the user’s submitted data when a comment is submitted in a blog post. The purpose is to auto-populate form fields for subsequent comments, in order to save time for the user.Yes__tld__Cookie used by the Jetpack plugin of WordPressYes and the following third-party Cookies may be placed on your computer or device: Name of CookieProviderPurposewordfence_verifiedHumandi-s.orgUsed by WordFence to verify that interactions are coming from real human users and not botsanalytics/v1/observations/captureapi.leadpages.ioUsed by site’s popups and download forms.centerVisitorIdjs.center.ioUsed by site’s popups and download forms.JSESSIONIDdi-s.agilecrm.orgPreserves users states across page requests5q129tl640cemcatr8a01qfje1-agile-crm-guiddi-s.orgUsed by Agile CRM to preserve user sessions across pages5q129tl640cemcatr8a01qfje1-agile-crm-session_iddi-s.orgUsed by Agile CRM to preserve user sessions across pages5q129tl640cemcatr8a01qfje1-agile-crm-session_start_timedi-s.orgUsed by Agile CRM to preserve user sessions across pages5q129tl640cemcatr8a01qfje1-agile-original-referrerdi-s.orgUsed by Agile CRM to preserve user sessions across pages__cfduidusefomo.comUsed by the content network, Cloudflare, to identify trusted web traffic.Fomo.hstry-count-since-first-event-10271di-s.orgUsed by Fomo for showing user notificationsFomo.hstry-first-timestamp-10271di-s.orgUsed by Fomo for showing user notificationsFomo.snv-10271-53613523di-s.orgUsed by Fomo for showing user notificationsci_sessionrefersion.comPreserves users states across page requestsAWSELBdi-s.refersion.orgUsed to distribute traffic to the website on several servers in order to optimise response timeswistia-http2-push-disabledwistia.comUsed for showing the Wistia video playerlogleveldi-s.orgUsed for showing the Wistia video playermuxDatadi-s.orgUsed for showing the Wistia video playerstatsQueuedi-s.orgUsed for showing the Wistia video playerwistiadi-s.orgUsed for showing the Wistia video player__distillerydi-s.orgUsed for showing the Wistia video player@@History/@@scroll|#di-s.orgUsed for preserving page scroll position Our Site and Platform uses analytics services provided by Google, Mixpanel, Segment, and HotJar. Website analytics refers to a set of tools used to collect and analyse anonymous usage information, enabling us to better understand how Our Site and Platform is used. This, in turn, enables us to improve Our Site and Platform and the products and relevant services offered through them. The analytics services used by Our Site and Platform use Cookies to gather the required information. You do not have to allow us to use these Cookies, however whilst our use of them does not pose any risk to your privacy or your safe use of Our Site and Platform, it does enable us to continually improve Our Site and Platform, making it a better and more useful experience for you. The analytics services used by Our Site and Platform uses the following Cookies: Name of CookiePurposeStrictly Necessary_ga (2x)Google Analytics: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.No_gat (2x)Google Analytics: Used by Google Analytics to throttle the request rateNo_gid (2x)Google Analytics: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.NocollectGoogle Analytics: Used to send data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.Noajs%3AcookiesSegment: Cookie used by Segment for analytics purposesNoajs%3AtestSegment: Cookie used by Segment for analytics purposesNoajs_anonymous_idSegment: Cookie used by Segment for analytics purposesNoajs_group_idSegment: Cookie used by Segment for analytics purposesNoajs_group_propertiesSegment: Cookie used by Segment for analytics purposesNo.ajs_user_idSegment: Cookie used by Segment for analytics purposesNoajs_user_traitsSegment: Cookie used by Segment for analytics purposesNomp_#_mixpanelMixPanel: Cookie used by MixPanel for analytics purposesNo_hjIncludedInSampleHotJar: Determines if the user’s navigation should be registered in a certain statistical placeholderNo Targeting/Marketing cookies are used to track visitors across websites. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers. If you do not allow these cookies, you will experience less targeted advertising. Name of CookiePurposeStrictly Necessaryads/ga-audiencesUsed by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s online behaviour across websites.NofrUsed by Facebook to deliver a series of advertisement products such as real time bidding from third-party advertisersNotrUsed by Facebook to deliver a series of advertisement products such as real time bidding from third-party advertisersNo In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device. You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access Our Site and Platform more quickly and efficiently including, but not limited to, login and personalisation settings. It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings. For more details, please refer to our Cookie Policy which can be found here: https://www.di-s.org/cookie-policy. How Do I Contact You?To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Ms. Julie Tsavdari): Email address: gdpr@di-s.org.Telephone number: +44 11 75750011 .Postal Address: Di-S (CY) Ltd, Gladstonos 200, 3032, Limassol, Cyprus. Changes to this Privacy PolicyWe may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects Personal Data protection. Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.