De inzet van Lightspeed Systems voor uw privacy
Uw privacy is van cruciaal belang voor Lightspeed Systems. We hebben dit privacybeleid ontwikkeld om te beschrijven hoe we uw informatie verzamelen, gebruiken, vrijgeven, overdragen en opslaan. Lightspeed Systems zet zich volledig in voor de veiligheid en bescherming van uw privacy.
Lightspeed Systems provides a variety of services (“Services”) to securely manage technology users, internet-enabled devices, and internet access. Our Services include technology management solutions, content filtering, safety monitoring, anonymous reporting tools, and more. We understand the importance of privacy to our online visitors, to schools who register for our Services, (“Schools”) and to students and staff (“End User”) whose information we may access on behalf of a School.
Onze toewijding:
We zullen altijd transparant zijn in de gegevens die we verzamelen en hoe deze worden gebruikt.
- We oefenen dataminimalisatie uit en verzamelen alleen de gegevens die nodig zijn voor de oplossingen en functies die de school heeft aangeschaft / gecontracteerd.
- We zullen die gegevens altijd met de grootst mogelijke veiligheid en privacy behandelen.
- We zullen nooit persoonlijke informatie van studenten verkopen; we zullen het nooit delen zonder de schriftelijke toestemming van de softwarelicentiehouders, en we zullen het nooit gebruiken om te proberen advertenties aan studenten te verkopen.
Toepasselijkheid van dit privacybeleid
Dit privacybeleid is van toepassing op onze Diensten en onze websites en beschrijft de stappen die we nemen om uw gegevens te beschermen. Het beschrijft de voorwaarden rond ons gebruik van de persoonlijk identificeerbare informatie die we verzamelen, en onze praktijken voor het verzamelen, gebruiken, onderhouden en verspreiden van informatie die nodig zijn voor de Services.
Houd er bij het navigeren tussen school en gerelateerde sites rekening mee dat het privacybeleid van andere partijen een rol kan spelen. Als u een van de Services gebruikt via een klant van Lightspeed Systems, heeft dit beleid geen voorrang op de voorwaarden van overeenkomsten tussen Lightspeed Systems en een andere partij, noch heeft het invloed op de voorwaarden van enige overeenkomst tussen een Eindgebruiker van de Services en hun werkgever, hun onderwijsinstelling of een derde partij. Zorg ervoor dat u de voorwaarden leest van elk privacybeleid dat u aangaat met andere partijen dan Lightspeed Systems, inclusief uw werkgever of onderwijsinstelling, aangezien dat beleid ook kan uitleggen hoe uw persoonlijke gegevens door die partijen worden gebruikt. Als u toegang hebt tot Lightspeed Systems via een externe, openbare of onbeveiligde internetprovider, houd er dan rekening mee dat alle informatie die u tijdens dergelijke toegang vrijgeeft of publiceert, door een dergelijke provider kan worden verzameld en dat Lightspeed Systems geen controle heeft en doet geen uitspraken over het mogelijke gebruik van deze informatie door een dergelijke aanbieder.
Please note that each School controls its instance of the Services and any associated data processed within that instance (“School Data”). If you have any questions about a School’s privacy practices, please contact the applicable School. For more information about who is the controller of data and under what circumstances, refer to the “Uw rechten met betrekking tot uw gegevens” section below.
Uw gegevens: hoe we informatie verzamelen en gebruiken
We verzamelen de volgende soorten informatie:
Informatie over schoolpersoneel:
Schools decide which data is integrated with our Services. When a School administrator registers a School with Lightspeed Systems or corresponds with us online, we ask for certain information including a contact name, school name, school district, school email address, school physical address and/or account name, phone number, job title, message content, and information relating to the School’s information systems. We may also retain information provided by a School if the School sends us a message, posts content to our website or through our Services, or responds to emails or surveys. Once a School begins using Services provided by Lightspeed Systems, we will keep records of activities related to the Services. We use this information to operate, maintain, and provide the features and functionality of the Services, including customer service, support, and billing; to analyze our offerings and functionality; to communicate with our Schools and website visitors; to exchange information, and to offer related services such as user group membership and event registration.
When downloading or using the Lightspeed Systems StopIt Anonymous Reporting System (ARS) App, we do not require or automatically collect personal information. Incident reports are anonymous, unless a user chooses to include identifying information. If such information is provided, we may be required to disclose it to law enforcement or others as required by applicable law. When organizations subscribe to StopIt services, they may provide administrator details such as name, email, phone number, unique ID. Admins manage incident reports and communications within their organization.
Leerlinggegevens:
Lightspeed Systems may have access to personally identifiable information about students (“Student Data”) in the course of providing Services to a School, including student name, email address, device information/identifiers and usage data We recognize Student Data is confidential and do not use such data for any purpose other than to provide the Services on the School’s behalf. Lightspeed Systems receives Student Data only from the School and never interacts met de Student directly. The School confirms that it has obtained appropriate parental consent, as needed before the student is permitted to access the Services. Lightspeed Systems has access to Student Data only as requested by the School and only for the purposes of performing Services on the School’s behalf. Wij may also generate a login ID for the child that is different than the child’s actual name or under the School’s direction, collect login/authentication data via a student information system identification number or other system designated by Customer.
Bovenliggende gegevens:
When a parent uses the Services, including the parent portal, Lightspeed Systems may collect their full name and email address. We use this information to operate, maintain, and provide the features and functionality of the Services, including customer service and support; to analyze our offerings and functionality; and to communicate with parents. Parents should consult the school’s acceptable/responsible use, social media, personnel, and instructional policies for more information about the school’s policies and practices for protecting children on the internet. Teachers are reminded to also be aware of their obligations under the ethical standards for educators in their state and to be conscious of their role as a model for students while interacting with students using Services provided by Lightspeed Systems. See “Veiligheid van studenten” hieronder voor meer uitleg over onze inzet voor online veiligheid van studenten.
Niet-persoonlijk identificeerbare informatie:
We may collect certain non-personally identifiable information from visitors to our sites and users of our Services, such as the date and time of their visit, the type of browser used (e.g., Chrome, Firefox, Internet Explorer), the type of operating system used (e.g., Windows or Mac OS), the internet service provider from which the visitor receives internet access, and aggregate information regarding what pages users of the site access or visit. We may collect data for Schools to toezicht houden op and generate reports of their users’ online search queries, websites visited or blocked from visiting recorded web activity, and device geolocation for purpose of asset recovery. In addition, we may toezicht houden op Schools’ onboarding tasks completed, search queries on our sites, number of users’ sessions on our websites, city and state/province where last accessing our Services, responses to our survey questions, and content provided on managed devices via customizable fields. We may also match non-personally identifiable information from registered members with personally identifiable information (such as the member’s name, title) in our database to track deployment progress, troubleshoot Services issues, analyze usage, and otherwise toezicht houden op Services to make improvements. Lightspeed Systems and its third-party service providers use cookies (both session and persistent cookies) and other tracking mechanisms to automatically collect information including IP addresses, session sources, and other data which tracks End Users’ access to the Services. We may combine this information with other personal information we collect from you (and our third-party service providers may do so on our behalf).
StopIt App Data:
We may de-identify and aggregate data from reports for analysis and to further our mission of supporting safer schools. We may share personal information only when legally required, or when StopIt reports voluntarily include identifying information.
StopIt Admin users may request account deletion, however we still retain report data necessary for record-keeping.
Andere gegevens:
We verkrijgen contact- en zakelijke informatie die wordt gebruikt om met u te communiceren over de Services van conferenties, evenementen en webinars, verkooppartners en openbare registers.
Werknemers- en werkgelegenheidstoepassingen:
Please see our Privacybeleid voor sollicitanten en werknemers
Cookies and Other Technologies
Clear GIF's, pixeltags en andere technologieën:
Clear GIFs (also known as web beacons, web bugs or pixel tags) are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs, in connection with Services provided by Lightspeed Systems to, among other things, track the activities of visitors, help us manage content, and compile statistics about site usage. We and our third-party service providers also use clear GIFs in HTML emails to our customers to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.We use or may use the data collected through cookies, log files, device identifiers, and clear GIFs to (a) remember information so in subsequent visits a user will not have to re-enter it; (b) provide custom, personalized content, and information; (c) monitor the effectiveness of our Services; (d) monitor aggregate metrics such as total number of visitors, traffic, and usage on our website and our Services; (e) diagnose or fix technology problems; and (f) help users efficiently access information after signing in.
Analyse van derden:
We use automated devices, applications, and other means, such as Google Analytics, to evaluate usage of our Lightspeed Systems websites and Services. We use these tools to help us improve our Services, performance and user experiences. We do NOT use these for remarketing and do not share your personal data with third parties for their own marketing purposes, including direct marketing. We do not permit contextual advertisements, marketing, or other third-party advertising and promotion in our products or services. These entities may use cookies and other tracking technologies to perform their services. We do not control these third parties’ tracking technologies or how they may be used. Please note that these tracking technologies are never used in our products (lightspeedsystems.app), but are available only on our lightspeedsystems.com website.
Our Cookie Banner is configured with all Targeting cookies turned off by default to give users more control over their data.
Third-Party AI Services:
We employ application program interfaces (“API”) provided by 3rd party AI vendors, listed in our sub-processor list on our Vertrouwen pagina, to enable the AI capabilities of our Products. No personal data is used to train AI models used by Lightspeed Systems or its third-party vendors. We are committed to ensuring the Responsible Use of AI, maintaining data security and ensuring compliance with relevant data protection laws. Any data transmitted through these APIs is stored for up to 30 days solely for the purposes of monitoring abuse and misuse, after which it is permanently deleted unless a longer retention period is required by law.
Niet traceren:
Momenteel herkennen onze systemen geen "do-not-track" -verzoeken van de browser. U kunt echter bepaalde tracking uitschakelen, zoals besproken in deze sectie (bijv. Door cookies uit te schakelen).
Gegevensbeheerder:
Lightspeed Systems acts as a Data Controller for personal information collected directly by us in connection with our website, marketing activities, events, support cases, and communications.
When providing services to a school, Lightspeed Systems acts as the Data Processor on behalf of the school with respect to student data and other personal data processed within our services. In these cases, the school is the Data Controller and determines the purposes and means of processing such data.
Lightspeed Systems processes personal data on behalf of schools -in accordance with the school’s instructions, applicable agreements (such as Data Processing Agreements), and applicable law.
Where applicable, Lightspeed Systems may use aggregated or de-identified information for analytics, service improvement, and other lawful business purposes, consistent with applicable law and contractual commitments.
Data Processor:
When a school licenses or uses Lightspeed Systems services, the parties acknowledge and agree that Lightspeed Systems acts as a Data Processor on behalf of the school with respect to personal data processed within the services, as set forth in applicable agreements. Please review our Cookieverklaring for additional details on how we handle cookies on our websites.
Veiligheid van studenten
COPPA and Children Under 13:
Lightspeed Systems complies with the Children’s Online Privacy Protection Act (COPPA, see FTC voldoet aan de veelgestelde vragen over COPPA). Students are not allowed to sign up for any Lightspeed Systems solutions. Student accounts are provided only through a verified educator, school, or educational organization. Schools agree to obtain and maintain all necessary rights and consents, including consents required by COPPA, either from an End User or, where necessary, the End User’s parent or legal guardian, to allow Lightspeed to provide and improve the Lightspeed Systems’ solutions and collect and receive user data in order to provide the Services. Lees hier de COPPA-kennisgeving van Lightspeed.
We voldoen aan de onderstaande richtlijnen en gaan akkoord met:
- Verzamel GEEN online contactgegevens zonder de toestemming van een ouder of een gekwalificeerde docent of onderwijsinstelling.
- Verzamel GEEN persoonlijk identificeerbare offline contactgegevens.
- NOT distribute to third parties, other than Government Officials (as defined below) in the manner described below, any personally identifiable information without prior parental consent.
- NIET verleiden door het vooruitzicht op een speciaal spel, prijs of andere activiteit, of om meer informatie bekend te maken dan nodig is om aan de activiteit deel te nemen.
- NOT use or disclose student information to third-parties for behavioral targeting of advertisements to students. Personalized advertising (ads based on a user’s personal information) is neither implemented nor displayed in Lightspeed Systems’ products.
- Maak GEEN persoonlijk profiel van een leerling anders dan voor het ondersteunen van geautoriseerde onderwijs-/schooldoeleinden.
Consortium voor privacy van studentengegevens
We are a member of the Consortium voor privacy van studentengegevens which provides a structured approach to managing student data privacy, ensuring compliance and best practices are followed.
Derden: hoe we uw gegevens kunnen delen
We kunnen persoonlijke informatie delen met:
- Geassocieerden: Businesses or third parties Lightspeed Systems is affiliated with in order to facilitate a transaction or service that the School has initiated or requested;
- Derden die ons aanbod ondersteunen: Agents and service providers (sub-processors) that act on our behalf to support our services, such as technology services (e.g. web hosting and analytics services), subject to confidentiality obligations set out in the executed contracts with the service providers. We contractually prohibit our service providers from retaining, using, or disclosing information about you for any purpose other than performing the services for us. Please note that these providers have no access to sensitive student data – strict access controls are in place. Additional information about the sub-processors we use to support our service delivery can be found on our Vertrouwenspagina;
- Authorized School Personnel: such as parents, teachers, administrators, or other School personnel at the direction of the School or to facilitate the service that the School has initiated or requested (depending on a School’s currently selected Services);
- Your consent: of de toestemming van (of op aanwijzing van) een ouder, voogd of in aanmerking komende student;
- Zakelijke overdrachten: A third party entity in connection with or during negotiations of a business transfer, in which case the recipient will be subject to the same commitments; and
- Wettelijke vereisten: such as law enforcement, first responders, state or federal reporting agencies, such as the National Center for Missing and Exploited Children, or other officials (“Government Officials”) when required by law or when doing so is mandated by our internal escalation policy, which is subject to change in our sole discretion, or when we believe in good faith that it is necessary to comply with any legal, law enforcement, or regulatory process, such as to respond to a warrant, subpoena, court order, or other applicable laws and regulations, including to meet national security requirements; take action in connection with a health or safety emergency; enforce or apply our agreements, including our Terms of Useof bescherm Lightspeed Systems, onze gebruikers, klanten of anderen.
- Geaggregeerde/geanonimiseerde informatie: We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). Aggregate/De-Identified Information may be used to determine the demographic composition of our user base and to distribute statistics and general marketplace information about Lightspeed Systems. We may use, transfer, or disclose Aggregate/De-Identified Information for any purpose, including to describe the Services to prospective partners and other third parties and for other lawful purposes.
We do not use personal information for any other commercial purpose. Further, Lightspeed Systems recognizes its potential liability when onward transferring EU and UK individuals’ data received pursuant to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and UK Extension to the EU-U.S. DPF. An individual has the ability, under certain conditions, to invoke binding arbitration for complaints regarding Data Privacy Framework compliance not resolved by any of the other Data Privacy Framework mechanisms. Please refer to Annex I of the DPF Principles for additional information. In certain areas of the Services, Lightspeed Systems makes announcements, email, chat, polls, forums, discussions, and/or news groups available. Please remember that any information that is disclosed in these areas becomes public information, and you should exercise caution when deciding to disclose any of your personal or other information in these or any other publicly available site. And if you see inappropriate content posted by any other user, please report that information to us so we can review the post and respond accordingly.
Uw rechten met betrekking tot uw gegevens
For Data That We Collect Via Our Products:
Adult End Users of Services provided by Lightspeed Systems should contact their educational institution or other organization providing the Services about their right to access their data collected and used by Lightspeed Systems and requests to be forgotten, electronic copies of data, requests for data deletion, data depersonalization and/or data not available through your account login. Schools may access and update account information and modify Services by signing into an administrator account. Adult End Users may be able to access and change their information collected during account creation by choosing the “edit account information” option or other similar functionality offered in the Services. To access or change your personal information, log into your account through the Services. End Users and visitors may opt out of receiving future promotional electronic communications from Lightspeed Systems by following the unsubscribe procedures indicated in the mailing.
Leerlinggegevens:
Student End Users of Services provided by Lightspeed Systems and their parents should contact their educational institution or other organization providing the Services about access to the personal information collected by that institution including requests to be forgotten, requests for data, requests for data deletion, and/or data depersonalization.
Cookies verwijderen of uitschakelen:
De meeste webbrowsers accepteren automatisch cookies, maar als u dat wilt, kunt u uw browseropties bewerken om ze in de toekomst te blokkeren. Het Help-gedeelte van de werkbalk van de meeste browsers zal u vertellen hoe u kunt voorkomen dat uw computer nieuwe cookies accepteert, hoe u de browser kunt laten informeren wanneer u een nieuwe cookie ontvangt, of hoe u cookies helemaal kunt uitschakelen. Eindgebruikers van Services geleverd door Lightspeed Systems die cookies uitschakelen, kunnen door bepaalde delen van onze sites bladeren, maar sommige functies werken mogelijk niet.
Gegevensoverdracht:
License holders of Lightspeed Systems products may request in writing that the data they provided be returned to them in electronic format. Within a reasonable time Lightspeed Systems will return the data provided by the license holder for the products they have licensed. Individuals who provided information via our websites, Tradeshow, Lightspeed Systems event, Partner event, e-mail or phone call may request in writing that the data they provided be returned to them in electronic format. Within a reasonable time Lightspeed Systems will return the data provided.
Voor gegevens die we verzamelen van bezoekers van onze websites Accountinformatie en instellingen:
Volwassen eindgebruikers en bezoekers van de Lightspeed Systems-websites hebben recht op toegang tot de gegevens die worden verzameld en gebruikt door Lightspeed Systems Om verzoeken in te dienen om toegang te krijgen tot accountinformatie of deze te wijzigen, om vergeten te worden, elektronische kopieën van gegevens, gegevensverwijdering en / of gegevensdepersonalisatie, neem dan contact met ons op via onderstaande contactgegevens. Eindgebruikers en bezoekers kunnen ervoor kiezen om geen toekomstige elektronische promotionele mailings van Lightspeed Systems te ontvangen door de afmeldingsprocedures te volgen die in de mailing worden aangegeven.
Gegevens van kinderen:
Lightspeed Systems does not knowingly solicit or attempt to collect information from children via its websites. We ask that anyone under the age of 13 not use our websites or submit information to us. Please contact us via the contact information below if you have any questions, concerns, need to access, change, or delete the Personal Information that has been submitted by a child. Please contact us at the address below if you have any other questions or concerns about the information you receive from us or the information that we collect from you.
Privacyrechten in Californië
Privacy Information for California Residents – CCPA & CPRA
California Consumer Privacy Act (CCPA)
California law requires us to provide some additional information regarding your rights with respect to your “personal information” (as defined in the California Consumer Privacy Act (CCPA)).In many cases, if you are a California resident, the CCPA allows you to make certain requests about your personal information. Specifically, unless certain exceptions apply, the CCPA allows you to request us to:
- U te informeren over de categorieën persoonlijke informatie die we over u verzamelen of vrijgeven; de categorieën van bronnen van dergelijke informatie; het zakelijke of commerciële doel voor het verzamelen van uw persoonlijke informatie; en de categorieën van derden met wie we persoonlijke informatie delen/openbaar maken.
- Geef toegang tot en/of een kopie van bepaalde persoonlijke informatie die we over u hebben.
- Verwijder bepaalde persoonlijke informatie die we over u hebben.
- U informatie verstrekken over bepaalde financiële prikkels die wij u bieden, indien van toepassing.
You also have certain rights under the CCPA not to be subject to certain negative consequences for exercising CCPA rights. We reserve the right to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, phone number, or other information. You are also permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request. Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide the Services to you or to comply with legal obligations, so we would need to either reject your request to delete the information or, if we are legally permitted to delete it, we would need to terminate our provision of the Services to you after deleting it. If you would like further information regarding your legal rights under California law or would like to exercise any of them, please contact us at [email protected] or write to us using the contact details provided in the “Contact opnemen met Lightspeed Systems” hieronder.
Privacywet Californië (CPRA)
De California Privacy Rights Act (CPRA) is a data privacy law that amends and expands upon the California Consumer Privacy Act (CCPA). The law takes effect on January 1, 2023, and includes additional privacy protections for consumers.
Uitgebreide rechten onder CPRA
- Right to Access Information: Building upon the CCPA right to request access to the personal information a business has collected about a person in the preceding 12-month period, the California Privacy Rights Act expands this to include any information collected regardless of when it was collected unless doing so proves impossible or would involve a disproportionate effort.
- Right to Opt-Out of Sharing Information with Third Parties: De California Privacy Rights Act verduidelijkt dat mensen kunnen afzien van zowel de verkoop als het delen van hun persoonlijke informatie aan derden. Dit was een twistpunt onder de CCPA, waar de definitie van verkopen niet expliciet ook delen omvat.
- Recht om bedrijven aan te klagen wanneer ze gebruikersnamen en wachtwoorden vrijgeven: The CCPA gave people the right to sue a business directly when it exposes their personal information through a data breach resulting from a failure to use reasonable security measures. The California Privacy Rights Act expands this to cover data breaches where the personal information that was exposed includes a username and password.
- Meer informatie over CPRA vindt u hier: https://thecpra.org/
- Visit our Vertrouwenspagina to find out how Lightspeed Systems complies with CPRA
Data Subject Access Request – How and when we are expected to handle your request
We zullen de ontvangst van uw verifieerbare verzoek binnen 10 dagen bevestigen en informatie verstrekken over hoe we uw verzoek zullen verwerken.
We zullen binnen 45 dagen na ontvangst op uw verzoek reageren. Als we meer tijd nodig hebben, zullen we u uitleggen waarom en hoeveel meer tijd we nodig hebben. Als we uw verzoek afwijzen, zullen we u de redenen voor onze weigering uitleggen.
We brengen geen kosten in rekening om uw verifieerbare verzoek te verwerken of erop te reageren, tenzij een dergelijk verzoek kennelijk ongegrond of buitensporig is. In dergelijke gevallen kunnen we een redelijke vergoeding in rekening brengen of weigeren gevolg te geven aan het verzoek. In beide gevallen zullen we onze keuzes communiceren en de redenen erachter uitleggen.
Met betrekking tot schoolgegevens moeten consumenten verzoeken om de toepasselijke rechten uit te oefenen richten aan de school namens wie wij de gegevens verwerken. Als we een verzoek van een consument rechtstreeks met betrekking tot schoolgegevens ontvangen, zullen we u ofwel waarschuwen om uw verzoek door te verwijzen naar de betreffende school of dat verzoek door te verwijzen naar de juiste school en wachten op de instructies van elke school over hoe hiermee om te gaan.
Verzameling, gebruik en openbaarmaking van persoonlijke gegevens van Californiërs
Gedurende de 12 maanden voorafgaand aan de ingangsdatum van dit privacybeleid hebben we alle categorieën persoonlijke informatie verzameld (en blijven verzamelen) die worden beschreven in de "Uw gegevens: hoe we informatie verzamelen en gebruiken” section of our Privacy Policy and listed in the chart below. The sources from which we collect information about you, include, for example, you, Schools, service providers, other users, third party applications, analytics providers, cookies and tracking technologies, survey partners, related entities and affiliates, developer partners, your interaction with us on our social media channels, and marketing partners. The “Uw gegevens: hoe we informatie verzamelen en gebruiken” section of this Privacy Policy also explains how and why we use your personal information. Generally speaking, we use your information to provide our Services and related services such as user group membership and event registration, send communications, engage in transactions, personalize the Services, analyze, research, develop, and improve the Services, enforce legal terms and defend our rights, investigate and prevent security issues, fraud, and abuse, comply with laws, and as described when collecting your information. We share certain personal information as set forth in “Derden: hoe we uw informatie kunnen delen” en in de onderstaande grafiek, en we staan derden toe om bepaalde informatie over uw activiteit te verzamelen, bijvoorbeeld door middel van cookies, zoals uitgelegd in de “Uw gegevens: hoe we informatie verzamelen en gebruiken” section. California residents may opt out of the “sale” of their personal information. We do not “sell” California residents’ personal information under the CCPA, based on our current understanding of the definition of sell. We do share certain information as set forth in “Uw gegevens: hoe we informatie verzamelen en gebruiken” section and in the chart below, and as also explained in that section, we allow third parties to collect certain information about your activity, for example through cookies. During the 12 months leading up to the effective date of this Privacy Policy, we made the following disclosures of personal information about California residents:
| Categorie van persoonlijke informatie verzameld door Lightspeed | Categories of third parties to which the information was disclosed for a business purpose |
|---|---|
| ID's, zoals echte naam, gebruikersnaam, unieke gebruikers-ID of andere soortgelijke identificatiegegevens. |
|
| Contact and account registration information, such as telephone number, email address, job title, or other contact information. |
|
| Klantenservice informatie, zoals vragen en andere berichten die u aan ons richt en samenvattingen of spraakopnamen van uw interacties met de klantenservice. |
|
| Zakelijke en commerciële informatie, such as position, title, business address, business email address, phone, size, location, and needs of your School, records of products or services purchased or considered, or other purchasing or consuming histories. |
|
| Financiële informatie, zoals creditcard- of bankrekeninggegevens. |
|
| Apparaatinformatie en ID's, zoals IP-adres, browsertype en -taal, besturingssysteem, platformtype, apparaattype en software- en hardwarekenmerk. |
|
| Verbindings- en gebruiksgegevens, zoals bestemmingspagina's, browse-activiteit, inhoud of advertenties die zijn bekeken en aangeklikt, data en tijden van toegang, bekeken pagina's, tijd besteed aan elke pagina, zoektermen, informatie over netwerkwebverkeer (inclusief verkeer van een specifieke gebruiker), informatie over bestanden die u downloadt, domeinnamen, formulieren die u volledig of gedeeltelijk invult, uploads of downloads, of u nu een e-mail opent en uw interactie met e-mailinhoud, toegangstijden, foutenlogboeken en andere soortgelijke informatie, en sensorische en telemetrische gegevens. |
|
| Geolocatiegegevens, if enabled by the School, such as city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation, and with your permission in accordance with your mobile device settings, and precise geolocation information from GPS-based functionality on your mobile devices. Please note that some location-based services may require your personal information for the feature to work as intended. |
|
| Andere informatie, such as any other information you choose to directly provide to us in connection with your use of the Services. |
|
Californië "Shine the Light"-onthulling
De Californische "Shine the Light"-wet geeft inwoners van Californië het recht om onder bepaalde omstandigheden af te zien van het delen van bepaalde categorieën persoonlijke informatie (zoals gedefinieerd in de Shine the Light-wet) met derden voor hun directmarketingdoeleinden. We delen uw persoonlijke gegevens niet met derden voor hun eigen directmarketingdoeleinden in de zin van die wet.
Aanvullende kennisgeving voor inwoners van Nevada
Under Nevada law, certain Nevada residents may opt out of the “sale” of “covered information” (as such term is defined under Nevada law) for monetary consideration to a person for that person to license or sell such information to additional persons. “Covered information” includes first and last name, address, email address, phone number, Social Security Number, or an identifier that allows a specific person to be contacted either physically or online. We do not engage in such activity as of the effective date of this Privacy Policy; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of the sale of your covered information under Nevada law by emailing us at [email protected]. Houd er rekening mee dat we redelijke stappen kunnen ondernemen om uw identiteit en de authenticiteit van het verzoek te verifiëren.
Aanvullende kennisgeving voor betrokkenen uit Virginia
De Virginia Consumer Data Protection Act (“VCDPA”) provides additional rights to Virginia residents. This section addresses those rights and applies only to Virginia residents. You have the following rights under the VCDPA:
- Om te bevestigen of wij uw persoonsgegevens al dan niet verwerken
- Om toegang te krijgen tot uw persoonlijke gegevens
- Om onjuistheden in uw persoonsgegevens te corrigeren
- Om uw persoonlijke gegevens te verwijderen
- Om een kopie te verkrijgen van uw persoonlijke gegevens die u eerder aan ons hebt verstrekt, in een draagbaar en gemakkelijk bruikbaar formaat
- Om u af te melden voor de verwerking van persoonlijke gegevens voor gerichte reclame, de verkoop van persoonlijke gegevens of profilering ter bevordering van beslissingen die juridische of vergelijkbare significante gevolgen voor u hebben
Om een van deze rechten uit te oefenen, kunt u contact met ons opnemen zoals uiteengezet in het gedeelte 'Contact opnemen met Lightspeed Systems' hieronder en specificeren welk recht u wilt uitoefenen. Wij zullen binnen 45 dagen op uw verzoek reageren.
Beveiliging: hoe we uw informatie opslaan en beschermen
Lightspeed Systems undergoes an annual 3rd party SOC 2 Type 2 compliance audit, as part of our continuous dedication to offering secure and dependable services to the education sector. To request a copy, please email [email protected] and the Report will be provided after signing a Non-Disclosure Agreement.
Opslag: Al uw persoonlijke gegevens worden opgeslagen op servers op locaties die speciaal zijn ontworpen om ervoor te zorgen dat alleen geautoriseerde personen toegang hebben tot de server of zijn gegevens. Lightspeed Systems hanteert strikte administratieve, technische en fysieke procedures om informatie die op onze servers is opgeslagen te beschermen. Toegang tot informatie is via inloggegevens beperkt tot die werknemers die deze nodig hebben om hun werk uit te voeren.
Verwerken: De industriestandaard Secure Socket Layer (SSL) -versleutelingstechnologie wordt gebruikt om het accountregistratieproces te beveiligen. Andere beveiligingsmaatregelen omvatten, maar zijn niet beperkt tot, gegevensversleuteling, firewalls, tweefactorauthenticatie en fysieke toegangscontrole.
Gegevensveiligheid: Users cannot interact with untrusted users via our platforms. No personal information is displayed publicly.
Practices: We have in place and maintain procedures and practices to ensure data security.
These include, but not limited to: Security Policy, Incident Response Plan, Privacy/Security by Design, Vendor Assessments, Security Assessments, Privacy Impact Assessments and regular specific Privacy and Security Training.
Please be aware, that despite our efforts, no security measures are perfect or impenetrable. We have implemented best practices to protect both your and our data, however we do not warrant or guarantee these measures are perfect.
Data Breach Notification: If we learn of a security breach, we will notify you without undue delay according to our Incident Response Plan, applicable data breach notification laws or Data Processing/Sharing Agreement notification obligations in place. Depending on where you live, you may have a legal right to receive a notice of a security breach in writing. For more detailed information on our data security practices, please visit our Trust Page.
Dataretentie: hoe lang we uw informatie bewaren
We retain data for as long as necessary to fulfill the purposes for which it was collected for. Following termination or deactivation of a School account, Lightspeed Systems may retain profile information and content for a commercially reasonable time for backup, archival, or audit purposes, but all Student Data associated with the School will be deleted in accordance with Lightspeed Systems Data Deletion policy, or in accordance with active DPA, DSA or SLA. We may maintain Aggregated/De-Identified Information, including usage data, for analytics purposes.If you have any questions about data retention or deletion, please contact us via the contact information below.
Internationale gegevensoverdracht
Op 10 juli 2023 is het adequaatheidsbesluit van de Europese Commissie voor het EU-VS Data Privacy Framework (EU-US DPF) in werking getreden. Het EU-VS Data Privacy Framework (EU-US DPF) en de UK Extension to the EU-US Data Privacy Framework (UK Extension to the EU-US DPF) zijn respectievelijk ontwikkeld ter bevordering van de transatlantische handel door het Amerikaanse ministerie van Handel. moeten de Europese Commissie en de Britse regering Amerikaanse organisaties voorzien van betrouwbare mechanismen voor de overdracht van persoonsgegevens naar de Verenigde Staten vanuit de Europese Unie/Europese Economische Ruimte en het Verenigd Koninkrijk, en tegelijkertijd gegevensbescherming garanderen die in overeenstemming is met de wetten van de EU en het Verenigd Koninkrijk.
Kaderconformiteit:
Lightspeed Solutions, LLC, which conducts business under the name “Lightspeed Systems”, complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. Lightspeed Systems has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Choice
If Personal Data covered by this Privacy Policy is to be used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized, or if it is to be disclosed to a non-agent third party in a manner not specified in this Privacy Policy, Lightspeed Systems will provide you with the opportunity to choose whether your Personal Data may be so used or disclosed before such use or disclosure occurs. You may exercise this choice by contacting us using the information provided in the “How to Contact Lightspeed Systems” section below.
If Lightspeed Systems receives Sensitive Information (as defined by the EU-U.S. Data Privacy Framework Principles), we will not use or disclose such information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual unless we first obtain the individual’s affirmative, explicit (opt-in) consent.
Geschillenbeslechting:
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Lightspeed Systems commits to resolve complaints about your privacy and our collection or use of your personal information. EU and UK individuals with inquiries or complaints regarding this privacy policy should first contact Lightspeed Systems at:
Lightspeed Systems Privacyafdeling
12013 Fitzhugh Rd.
Austin, TX 78736
[email protected]
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Lightspeed Systems commits to refer unresolved privacy complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to BBB National Programs, an alternative dispute resolution provider located in the United States, BBB National Programs helps individual consumers resolve privacy complaints under the Data Privacy Framework Program and has committed to respond to complaints and to provide appropriate recourse at no cost to you. If you do not receive timely acknowledgement of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction please visit http://www.bbbprograms.org/dpf-complaints for more information and to file a complaint. Lightspeed Systems is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Under certain conditions, an individual may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted, provided that the individual has invoked binding arbitration by delivering notice to Lightspeed Systems, and following the procedures and subject to conditions set forth in Annex I of the DPF Principles.
Verantwoordelijkheid voor verdere overdracht
In the event Lightspeed Systems transfers personal data covered by this Policy to a third party acting as a controller or an agent, we will do so consistent with any notice provided to Data Subjects, any consent they have given, and only if the third party has given us
contractual assurances that it will (i) process the Personal Data for limited and specified purposes, consistent with any consent provided by the Data Subjects, (ii) provide at least the same level of protection as is required by the Data Privacy Framework Principles, and notify us if it makes a determination that it cannot do so; and (iii) cease processing of the Personal Data or take other reasonable and appropriate steps to remediate if it makes such a determination. If Lightspeed Systems has knowledge that a third party acting as a controller is processing Personal Data covered by this Policy in a way that is contrary to the Data Privacy Framework Principles, Lightspeed Systems will take reasonable steps to prevent or stop such processing.
Lightspeed Systems remains liable under the Data Privacy Framework Principles if an agent processes Personal Data covered by this Policy in a manner inconsistent with the Principles, except where Lightspeed Systems is not responsible for the event giving rise to the damage.
Grensoverschrijdende gegevensbescherming
Gegevensbescherming van de Europese Unie en het Verenigd Koninkrijk Residents in the European Union and the United Kingdom are entitled to certain rights with respect to personal information that we hold about them. Subject to any exemptions provided by the law, their rights are as follows:
- Recht op toegang en overdraagbaarheid: het recht om toegang te krijgen tot uw persoonlijke informatie, samen met bepaalde gerelateerde informatie, en om die informatie te ontvangen in een veelgebruikt formaat en om deze over te dragen aan een andere gegevensbeheerder;
- Recht op rectificatie: het recht om rectificatie van uw persoonlijke informatie te verkrijgen wanneer die persoonlijke informatie onjuist of onvolledig is;
- Recht op wissing: het recht om wissing van uw persoonsgegevens te verkrijgen, bijvoorbeeld wanneer de persoonsgegevens niet langer nodig zijn voor de doeleinden waarvoor ze zijn verzameld of verwerkt;
- Recht op beperking: het recht om in bepaalde omstandigheden de beperking van de verwerking van uw persoonlijke informatie door ons te verkrijgen, zoals wanneer de juistheid van de persoonlijke informatie door u wordt betwist, voor een periode die ons in staat stelt de juistheid van die persoonlijke informatie te verifiëren informatie;
- Recht om bezwaar te maken: het recht om bezwaar te maken, om redenen die verband houden met uw specifieke situatie, tegen de verwerking van uw persoonlijke informatie, en om bezwaar te maken tegen de verwerking van uw persoonlijke informatie voor directmarketingdoeleinden, voor zover deze verband houdt met dergelijke direct marketing; en
- Right to lodge a complaint with the supervisory data protection authority in your jurisdiction.
EU & UK consumers may make a request pursuant to their rights under the GDPR by contacting us at [email protected].
Algemene verordening gegevensbescherming (AVG) – Europese vertegenwoordiger
Op grond van artikel 27 van de Algemene Verordening Gegevensbescherming (AVG) heeft Lightspeed Systems het Europees Bureau voor Gegevensbescherming (EDPO) aangesteld als haar AVG-vertegenwoordiger in de EU. U kunt contact opnemen met EDPO over zaken met betrekking tot de AVG:
- door het online aanvraagformulier van EDPO te gebruiken: https://edpo.com/uk-gdpr-data-request/
- by writing to EDPO EU at Avenue Huart Hamoir 71, 1030 Brussels, Belgium
UK General Data Protection Regulation (GDPR) – UK Representative
Pursuant to Article 27 of the UK GDPR, Lightspeed Systems has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR;
- by using EDPO’s online request form: https://edpo.com/uk-gdpr-data-request/
- by writing to EDPO UK at Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London, N1 7UX, United Kingdom
Australische Privacywet
De Australische Privacywet 1988 regulates the handling of personal information in Australia. This legislation serves as the foundation of data collection and management policies across the country. The Act outlines 13 Australische privacyprincipes (APP's) voor het beheren van het gebruik persoonlijke en gevoelige informatie.
This comprehensive framework establishes crucial standards for safeguarding individuals’ personal data, promoting transparency, and ensuring accountability. Australian residents are entitled to certain rights with respect to personal information that we hold about them. Subject to any exemptions provided by the law, their rights are as follows:
- Recht op informatie: Individuen hebben het recht om te weten waarom hun persoonlijke gegevens worden verzameld, hoe deze zullen worden gebruikt en aan wie deze zullen worden bekendgemaakt.
- Recht op anonimiteit: In bepaalde omstandigheden hebben individuen de mogelijkheid om zichzelf niet te identificeren of een pseudoniem te gebruiken.
- Recht op toegang: Individuen kunnen vragen om toegang tot hun persoonlijke informatie, inclusief gezondheidsinformatie.
- Recht om zich af te melden: Individuen hebben het recht om geen ongewenste direct marketing meer te ontvangen.
- Recht op correctie: Individuen kunnen vragen dat hun onjuiste persoonlijke gegevens worden gecorrigeerd.
- Recht om te klagen: Individuen hebben het recht om een klacht in te dienen over een organisatie of instantie die onder de Privacywet valt, als zij van mening zijn dat er verkeerd met hun persoonlijke gegevens is omgegaan.
Australische consumenten kunnen een verzoek indienen op grond van hun rechten onder de Australische Privacy Act door contact met ons op te nemen via [email protected]
Wettelijke basis voor het verwerken van informatie
We vertrouwen op verschillende rechtsgrondslagen om gegevens te verwerken:
- Consent to process data in any enquiry you submit to us to supply relevant, requested services to you, as our customer/potential customer. You may withdraw your consent as outlined in the “How To Contact Lightspeed Systems” section at which time we will verify your request. Legitimate interest for the proper administration and monitoring of our products and website.
- Legitimate interest for the proper administration and monitoring of our products and website.
- To fulfill a contract with our customers to provide them with the services they have subscribed to for a specified period of time.
Changes to our Privacy Policy
We may update this Privacy Policy periodically to account for changes in our collection and/or processing of personal data, and will post the updated Privacy Policy on our website, with a “Last Modified” date at the bottom of the page. If we make material changes to this Privacy Statement, we will notify you and provide you an opportunity to review before you choose to continue using our Products. Please visit our Updates van het privacybeleid page for details on previous updates to our Privacy Policy.
Contact opnemen met Lightspeed Systems
If you have any questions about this privacy statement, the information that we collect from you, or the Services, please contact us at [email protected] or write to:
Functionaris voor gegevensbescherming: John Genter
Lightspeed Systems Privacyafdeling
12013 Fitzhugh Rd.
Austin, TX 78736, VS
In het geval dat u zich zorgen maakt over hoe de gegevens die u aan Lightspeed Systems hebt verstrekt via de Services zijn gebruikt, neem dan contact met ons op op het hierboven vermelde adres. Lightspeed Systems neemt alle zorgen over privacy en het gebruik van gegevens zeer serieus en zal proberen om binnen twee werkdagen te antwoorden om het onderzoek naar uw zorgen te starten.
This privacy policy was last modified on July 30, 2026.
Effective Date: August 1, 2026.
