Privacy Policy (GDPR-Compliant)

_Last updated: [Insert Date]_

1. Introduction

This Privacy Policy describes how [Your Application Name] (“the Application”, “we”, “us”, “our”) collects, uses, and discloses personal data in connection with a web-based platform that enables students to log and publicly display in-class participation.

We are committed to ensuring compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

2. Data Controller

[Legal Entity Name]

[Address]

[Contact Email]

3. Categories of Personal Data Collected

• **User Identifiers** (username or chosen identifier, publicly visible)
• **Participation Data** (timestamps, course context)
• **Course Association Data**
• **Instructor Information**
• **Technical Data** (IP address, browser type)

4. Purpose and Legal Basis

### Core Functionality

• Recording and displaying participation
• Associating users with courses

**Legal basis:** Art. 6(1)(b)

### Public Display

• Public participation logs tied to identifiers

**Legal basis:** Art. 6(1)(a), 6(1)(f)

### Security

• Monitoring and abuse prevention

**Legal basis:** Art. 6(1)(f)

5. Public Data Disclosure

• Participation records are publicly accessible
• Identifiers are user-chosen
• Instructor-course links are public

Users should avoid real names unless intended.

6. Data Minimization

• Only necessary data collected
• Pseudonyms allowed

7. Data Retention

Data retained while account active or needed for course history.

8. User Rights

• Access, rectification, erasure
• Restriction, portability, objection
• Withdraw consent

Contact: [Contact Email]

9. Consent

Use implies consent to public display under chosen identifier.

10. Security

• HTTPS
• Access controls

11. Transfers

Data processed in EEA; safeguards used if transferred.

12. Third Parties

Hosting / analytics providers under GDPR agreements.

13. Updates

Policy may change; updates posted.

14. Contact

[Contact Email]

15. Supervisory Authority

Users may lodge complaints with their authority.