GDPR Compliance

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals in the European Union, regardless of where the organization is located.

GoLevel's GDPR Compliance

GoLevel is committed to full compliance with GDPR requirements. We have implemented appropriate technical and organizational measures to ensure the protection of your personal data.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information or agree to data processing
• Contract: To provide our educational services and fulfill our obligations
• Legitimate Interest: For anonymous analytics to improve question quality
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

How to Exercise Your Rights

To exercise any of your GDPR rights, you can:

What We Need From You

To process your request efficiently and securely, please provide:

• Clear identification of which right you wish to exercise
• Sufficient information to verify your identity
• Specific details about your request
• Any relevant account information (if applicable)

Data Processing Activities

Here's how we process personal data in compliance with GDPR:

Processing Activity	Data Categories	Legal Basis	Retention Period
Account Management	Email, username, preferences	Contract	Until account deletion
Anonymous Analytics	Usage patterns, performance data	Legitimate Interest	Up to 2 years
Customer Support	Contact information, support history	Contract	Up to 3 years
Marketing Communications	Email address, preferences	Consent	Until consent withdrawn

Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

• Adequacy Decisions: We transfer data to countries with adequate protection as determined by the European Commission
• Standard Contractual Clauses: We use EU-approved contractual clauses for transfers to third countries
• Certification Schemes: We work with service providers that have appropriate certifications
• Binding Corporate Rules: For transfers within corporate groups with approved BCRs

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms:

• We will notify the relevant supervisory authority within 72 hours
• We will inform affected individuals without undue delay if there is a high risk
• We will provide clear information about the nature of the breach and steps taken
• We will offer guidance on protective measures you can take

Children's Data Protection

Special protections apply to children's personal data under GDPR:

• For children under 16, we require parental consent for data processing
• We use age-appropriate language in our privacy notices
• We collect minimal data from all users, including children
• Parents can exercise rights on behalf of their children

Automated Decision-Making and Profiling

GoLevel uses automated processing for educational purposes:

• Adaptive Learning: Our algorithm adjusts question difficulty based on your performance
• Content Recommendations: We suggest relevant topics and materials
• Progress Tracking: Automated analysis of your learning progress

You have the right to:

• Obtain human intervention in automated decision-making
• Express your point of view regarding automated decisions
• Contest decisions made solely by automated processing

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with GDPR requirements.

Updates to GDPR Compliance

We regularly review and update our GDPR compliance measures to ensure continued protection of your rights. Any significant changes will be communicated through:

• Updates to this page with revised date
• Email notifications to registered users
• In-app notifications for material changes
• Prominent notices on our website

Contact Information

For any GDPR-related questions or to exercise your rights: