What is GDPR and what should I do about it?

All businesses that offer goods or services (for free or for paid) to EU citizens and process any personal data (e.g name and email address) of individuals must comply with the regulations outlined in GDPR. If your business is not based in the EU but you have users from the European Union whose data you control and process you have to meet the same legal requirements.

If you are not an individual, but a business entity, based on the GDPR you become a Data Controller. This means that you should create your own Privacy Policy that includes what data and why you process that are collected from users.

 iTeach.world already had the option of linking your own Privacy Policy and Terms of Use documents on your virtual school. You can paste the links of the documents in the Contact details menu. They appear at the bottom of your mainpage and all users and visitors can access them.

 

We recently added a new feature to make our clients compliance possible: When school owners link their own Privacy Policy and Terms of Use they will appear instead of the iTeach.world policies. Users can explicitly give consent by clicking the checkbox, they can only proceed with the registration if they accept the linked conditions.

 

Every user that previously registered logs in has to first accept the Privacy Policy to proceed to your site. This ensure all your users acknowledge knowing your data handling activities before using your virtual school.

 

Termsfeed.com and iubenda are dedicated products that help you creating a custom policy for your school with a few clicks.

Paste the link that is generated on the site or upload your document to one of these sites.

 

You have to paste the link to your Privay Policy in the dedicated field within the School environment / Contact details menu and it will appear at the bottom of your site and below the user registration fields. You can modify you Privacy Policy any time, however if there are major changes made be aware that you need to notify your users about it.

 

 You should ask consent from your users for different activities, for example sending your users emails with marketing content. If you are using a separate landing page for creating an email list of your users you can collect this consent upon sign up. If they just signed up through your virtual school, you are not authorized to send them any direct mails.