GDPR Compliance

Data Controller & Data Processor

Schools are the data controllers of staff and pupil-replated data provided to MyOnlineScienceTutor. When provided data by schools MyOnlineScienceTutor is the Data Processor which means it is trusted with the data but does not control it.

Where students sign up and manage their accounts on MyOnlineScienceTutor directly MyOnlineScienceTutor is the Data Controller.

How does MyOnlineScienceTutor protect personal data and where it is processed?

MyOnlineScienceTutor is hosted professionally by Hosting.co.uk (www.hosting.co.uk) at their UK data centre ensuring customer data is retained within the European Economic Area. Hosting.co.uk use multiple protective layers within their platform to protect our services including encryption and firewalls.

All data transfer between client browsers and servers is conducted using encrypted SSL.

For more information please look at our Privacy Policy.

Who can access personal data?

Where it is necessary to access customer data (for example to investigate a support issue) only designated DBS checked staff access the data.

How are errors in data corrected?

Data received from schools can be corrected by the school by reloading the data. Students that signed up directly onto MyOnlineScienceTutor can change their personal information through the user maintenance screens.

How do I make a Subject Access Request or implement the Right to be Forgotten?

If you wish to make a Subject Access Request or Right to be Forgotten request please contact support@myonlinesciencetutor.com.

If you would like further information on GDPR compliance at MyOnlineScienceTutor please contact support@myonlinesciencetutor.com.

Last updated: 30-9-2024