Data Privacy Policy

The data controller responsible in accordance with the purposes of theGeneral Data Protection Regulation (GDPR) of the European Union and other dataprotection regulations is:

Tomorrows Education GmbHAm
Orangeriepark
513156 Berlin
Deutschland
+49 1621329265
privacy@tomorrowseducation.com
www.tomorrows.education

Registered in the Berlin-Charlottenburg Commercial Register under HRB 224106 B

The designated data protection officer is:

I. Scope of the processing of personal data
‍
In general, we only process the personal data of our users to the extentnecessary to provide a functioning website with our content and services. Theregular processing of personal data only takes place with the consent of theuser. Exceptions include cases where prior consent cannot be technicallyobtained and where the processing of the data is permitted by law.

II. Legal basis for the processing of personal data

Where consent is appropriate for processing personal data, Art. 6 (1) (1)(a) GDPR serves as the legal basis to obtain the consent of the data subject for the processing of their data. As for the processing of personal data required for the performance of a contract of which the data subject is party, Art. 6 (1) (1) (b) GDPR serves as the legal basis. This also applies to processing operations required to carryout pre-contractual activities. When it is necessary to process personal data in order to fulfil a legal obligation to which our company is subject, Art. 6 (1) (1) (c) GDPR serves as the legal basis. If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (1) (d) GDPR serves as the legal basis. If the processing of data is necessary to safeguard the legitimate interests of our company or that of a third party, and the fundamental right sand freedoms of the data subject do not outweigh the interest of the former, Art. 6 (1) (1) (f) GDPR will serve as the legal basis for the processing of data.

III. Data removal and storage duration

The personal data of the data subject will be erased or restricted as soon as the purpose of its storage has been accomplished. Additional storage may occur if this is provided for by the European or national legislator within the EU regulations, law, or other relevant regulations to which the data controller is subject. Restriction or erasure of the data also takes place when the storage period stipulated by the aforementioned standards expires, unless the reis a need to prolong the storage of the data for the purpose of concluding or full filing the respective contract.

When your personal data is processed, you are a data subject within themeaning of the GDPR and have the following rights:
‍
1. Right to information

You may request the data controller to confirm whether your personal data is processed by them.
If such processing occurs, you can request the following information from the data controller:
·        The purpose for which the personal data is processed.
·        The categories of personal data being processed.
·        The recipients or categories of recipients to whom the personal data have been or will bed is closed.
·        The planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage.
·        The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing.
·        The existence of the right to lodge a complaint with a supervisory authority.
·        Where personal data are not collected from you any available information as to their source.
·        The existence of automated decision-making including profiling under Article 22 (1) and Article22 (4) GDPR and, in certain cases, meaningful information about the data processing system involved, and the scope and intended result of such processing on the data subject.

You have the right to request information on whether your personal data will be transmitted to a third country or an international organization. In this context, you can then request for the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

‍2. Right to rectification

You have a right to rectification and/or modification of the data, if your processed personal data is incorrect or incomplete. The data controller must correct the data without delay.

‍3. Right to the restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:
·        If you challenge the accuracy of your personal data for a period that enables the data controller to verify the accuracy of your personal data.
·        The processing is unlawful, and you oppose the erasure of the personal data and insteadrequest the restriction of their use instead.
·        The data controller or its representative no longer need the personal data for the purpose of processing, but you need it to assert, exercise or defend legal claims; or
·        If you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate interests of the data controller override your interests.

If the processing of personal data concerning you has been restricted, this data may – with the exception of data storage – only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the processing has been restricted according to the aforementioned conditions, you will be informed by the data controller before the restriction is lifted.