Effective starting: February 18th, 2020.
1. Who We Are
Otto DIY: Otto DIY Workshop s.r.o (“Otto DIY”) provides accessible and affordable edtech robotic kits to customers or organizations worldwide. “Otto DIY Workshop s.r.o”, located in the Czech Republic (Nové sady 988/2) Staré Brno, Postal code: 60200 CZ tel. (+420) 736723321). Otto DIY Workshop s.r.o. complies with Data Protection Laws, including the European regulation for data protection 2016/679/EU (General Data Protection Regulation – GDPR). Otto DIY will not knowingly do anything or permit anything to be done which might lead to a breach of the Data Protection Laws.
Otto Academy: ottoschool.com is a cloud subscription-based eLearning service. By accessing Ottoschool through a set of subscription packages, our users (“Users”) can train their personnel or access the course curriculum with their Otto DIY robot kit. Users access Ottoschool service by means of a unique combination of a user identifier and secure password. By gaining access to the service through this combination, the Users are allocated a specific domain that is owned and managed exclusively by them. The User is displayed course instructions, which may include text documents, video and audio files, images, presentations. Users can attend the courses and are subject to tests, for which they are graded; Users have access to their own grades through the service. Each User can view his/her grades and extract reports, by means of supplying the reporting criteria through the respective service interface, regarding his/her own performance and his/her overall use of the service. The User owns his domain data and can extract reports for the total activity of his domain, including all its Users.
2. Collection: The Personally Identifiable Information We Collect
Users: In the course of using this Site, you may provide us with personally identifiable information. This refers to information used to contact or identify you, and information on your use of and activities at our Site that may be connected with you (“Personal Information”). Personal Information that we collect may include, but is not limited to, your name and email address. When you visit the Site, our servers automatically record information that your browser sends whenever you visit a website. This information may include, but is not limited to, your Internet Protocol address, browser type, the web page you were visiting before you came to our Site and information you search for on our Site. Like many websites, we may also use “cookies” to collect information. A cookie is a small data file stored by your browser at your Device’s hard disk for record-keeping purposes. We use “session ID cookies” in order to support login and main service functionality. We may also store cookies of third-party providers. In particular, Google stores a Google Analytics cookie in order to be able to differentiate between users and be able to show us how many times people visit the website on average (not individually) and information on what pages they’ve seen, how long the duration was, and so on; we do not identify who the visitor was, or what is his Ottoschool account (if any). We also use Google AdWords and Facebook Pixel cookies for running advertising campaigns over audiences that may be interested in our services; our ads will only start working when the audience is big enough so no third party can use this information to personally identify the users. Otto DIY does not collect, store or process data from third-party cookies. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Site or all functionality of our services.
In some cases another User (such as an administrator) may create an account on your behalf and may provide your information, including Personal Information (most commonly when your company requests that you use our service). We collect Information under the direction of our Users and often have no direct relationship with the individuals whose personal data we process.
Credit Cards: We do not store your credit card information in our systems. All credit card transactions are processed using secure encryption – the same level of encryption used by leading banks. Card information is transmitted, stored, and processed securely at gateways on a PCI-compliant network.
Content: We collect and store Content that you create, input, submit, post, upload, transmit, store or display in the process of using our “Site”. Such Content includes any Personal Information or other sensitive information that you choose to include (“incidentally-collected Personal Information”). Although Otto DIY owns the code, databases, and all rights to the Ottoschool service, Users retain ownership, control and all rights to their records and data which are their property.
Other submissions: We collect other data that you submit to our “Site” or as you participate in any interactive features of the Ottoschool Services, participate in a survey, contest, activity or event, request User support, or otherwise communicate with us.
3. How We Use, Process and Retain Personal Information
Personal Information is or may be used for the following purposes:
- to provide and improve our Site, services, features and content,
- to administer your use of our Site,
- to enable you to enjoy and easily navigate the Site,
- to better understand your needs and interests,
- to fulfill requests you may make,
- to personalize your experience,
- to provide or offer software updates and product announcements, and
- to provide you with further information and offers from us or third parties that we believe you may find useful or interesting, including newsletters, marketing or promotional.
We collect and process personal data in a transparent manner, to the extent necessary for specified, explicit and legitimate purposes, and do not process it further in a manner incompatible with those purposes. We take care that the data we collect are accurate and, when necessary, updated. We take all reasonable steps to immediately delete or rectify personal data, if inaccurate. We process data in a way that guarantees their security, including their protection against unauthorized or unlawful processing and accidental loss, destruction or degradation, using appropriate technical or organizational measures. We are ready to prove at any moment how we adhere to the above principles. We take the appropriate technical and organizational measures for the security, confidentiality, integrity and availability of the data. We expressly declare that these measures ensure that, by definition, personal data are not made accessible without the intervention of the natural person to an indeterminate number of natural persons.
Each domain’s data are retained for as long as the User’s subscription to the service lasts or the completion of free courses. Upon contract expiration the data will be deleted or returned to the User if the User instructs us to. Alternatively, the domain will be rendered “inactive” and stored offline for 12 months so that a service reconnection is as smooth as possible; in case subscription is not renewed after 12 months, the data is permanently deleted.
4. Information Sharing and Disclosure
Users: We will display your Personal Information in your profile page and elsewhere on the Site according to the preferences you set in your account. Any information you choose to provide should reflect how much you want other Ottoschool Users to know about you. We recommend that you guard your anonymity and sensitive information, and we encourage you to think carefully about what information you disclose in your profile pages. You can review and revise your profile information at any time. You should be aware that the administrator, as well as specially designated support personnel in order to provide support for technical issues you may face, may be able to: access information in and about your account; access communications history, including file attachments, for your account; disclose, restrict, or access information that you have provided or that is made available to you when using your account, including your Content; and control how your account may be accessed or deleted.
Third Parties: We do not sell your Personal Information or Content and will not share or disclose any of your Personal Information or Content with third parties except as described in this policy. We do not share Personal Information about you with third parties for their marketing purposes (including direct marketing purposes). Service Providers, Business Partners and Others: For security, service operation and management purposes, Ottoschool also uses third-party services that provide the same level of protection. Third-party vendors and providers supply the necessary, software, networking and storage to run the Ottoschool Service; a detailed listing of them is included in the Terms of Service in the Data Processing Addendum (DPA). These third parties have access to your Personal Information only for purposes of performing these tasks on our behalf.
Compliance with Laws and Law Enforcement: Ottoschool cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Ottoschool or a third party, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable.
Children: Our services are not directed to children. We do not knowingly collect Personal Information from children. If we become aware that a child has provided us with Personal Information, we will take steps to delete such information. If you become aware that a child has provided us with Personal Information, please contact us at the contact information below.
Business Transfers: We may share or transfer your Information (including your Personal Information) in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified on any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.
5. Your Rights
Otto DIY respects your rights as a data subject. When OttoDIY processes personal data on behalf of and as instructed by its Users, our Users are responsible towards the data subjects and you should contact the respective User to which the content of your service belongs for exercising your rights. In this case, Otto DIY does not respond directly to your requests for the exercise of your rights that come to our knowledge, but we inform the User without delay and provide all reasonable and reasonable assistance to satisfy your requests in accordance with instructions of the Customer. The service has all the necessary features to enable our Users to exercise the rights of the data subjects on their behalf. For example, the service provides the ability to obtain and manage consent, and to implement strict and secure password policies as well as to exercise the right to be forgotten.
A synopsis of your rights as a data subject is provided below.
Transparency, information and answers to requests: Otto DIY adheres to the principle of transparency in processing. For any question regarding this policy you may contact us at firstname.lastname@example.org. We will respond without delay and in any case within one month upon receipt of the request.
Access: You have the right to receive from Otto DIY confirmation on whether your personal data are processed and in case this happens all required information thereof (processing means, goal, records etc.).
Rectification: You have the right to require the rectification of inaccurate data relating to you without undue delay, as well as to fill in incomplete data if necessary for processing. If you have an account on our Site you can update your account data through your profile by selecting “Account” from the options menu at the top of the screen.
Erasure: You have the right to ask for the erasure of personal data concerning you without undue delay. Otto DIY by means of its designated personnel will erase the data where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes of processing; or b) the person requesting the erasure withdraws consent on which the processing is based and there is no other legal ground for the processing; or c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing or the data subject objects to processing for direct marketing; or d) the personal data have to be erased for compliance with a legal obligation. Otto DIY will not proceed to the erasure of the personal data if the data must be maintained for compliance with a legal obligation or in cases where the processing is required for the establishment, exercise or defence of legal claims. If you receive marketing emails, you can remove yourself from the recipients list by selecting the “unsubscribe” link within the e-mail.
Restriction of processing: You have the right to request restriction of processing if the accuracy of personal data is disputed, for that period of time that allows Otto DIY to verify the accuracy of personal data or based on any other legitimate reason specified in applicable Data Protection Laws.
Data Portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format as well as the right to request the direct transmission of personal data by Otto DIY to another, if this is technically feasible.
Right to Object: You may oppose the processing of personal data which takes place without your consent. In this case, Otto DIY no longer submits the personal data unless it demonstrates imperative and legitimate reasons for the processing that outweigh the interests, rights and freedoms of you as a data subject or for the foundation, exercise or support of legal claims. If you receive promotional emails, you can remove yourself from the recipients list by selecting the “unsubscribe” link within the e-mail content. You may also oppose processing at any time by contacting us at the email provided at the end of this Policy.
Complaint to Supervisory Authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes Data Privacy Laws.
Otto DIY is very concerned with safeguarding your information. We employ reasonable measures designed to protect your information from unauthorized access.
7. Data Ownership
Although Otto DIY owns the code, databases, and all rights to the Ottoschool Service, Users retain ownership, control and all rights to their records and data which are their property.
8. Cooperation With Supervisory Authority
Otto DIY commits to cooperate with the panel established by the EU data protection authorities (DPAs). The EU representative of OttoDIY Workshop s.r.o. Is:
Úřad pro ochranu osobních údajů
residing at: Pplk. Sochora 27, 170 00 Praha 7
tel.: +420 234 665 111
9. Contacting Us