Privacy Policy StreetSmart Impact

Hi! Welcome to StreetSmart Impact. StreetSmart Impact is a digital solution developed by Mobile School  to support organisations working with children, young people and communities.

As your use of the StreetSmart Impact Platform and App involves the processing of personal data, we have adopted this Privacy Policy. We kindly invite you to read this document carefully.

1. About this Privacy Policy

This Privacy Policy explains how Mobile School, a non-profit organisation incorporated under the laws of Belgium, with registered office at Brabançonnestraat 25, 3000 Leuven, Belgium and registered under company number BE-0478.688.664 (hereinafter “Mobile School”, “we” or “us”), processes personal data in the context of the StreetSmart Impact platform and mobile application (the “Platform” and the “App”).

Depending on the context in which you interact with StreetSmart Impact, Mobile School may act either as a data controller or as a data processor:
- Mobile School acts as a data controller for personal data relating to the use of the Platform (such as account data, communication and support);
- Mobile School acts as a data processor for personal data entered into the Platform by the Customer, as further described in the Data Processing Agreement.

This Privacy Policy applies only to the processing of personal data for which Mobile School acts as data controller. For processing activities carried out on behalf of Customers, reference is made to the Data Processing Agreement.

2. Categories of Personal Data, purposes and legal basis

Mobile School processes personal data in a transparent and lawful manner.

When acting as data controller, Mobile School may process the following categories of personal data:
- Identification data (such as first name and last name)
- Contact data (such as email address and, optionally, phone number)
- Account-related data (such as login credentials and profile information)
- Professional data (such as job title or role)
- Optional profile data (such as images or additional personal information provided by the user)
- Technical data (such as IP address and usage data)

Mobile School processes this personal data for the following purposes:
- to create and manage user accounts on the Platform;
- to enable access to and use of the Platform and App;
- to facilitate collaboration between users within an organisation;
- to provide support and communicate with users;
- to ensure the security, performance and improvement of the Services.

The legal bases for this processing are:
- the performance of a contract (for example, to provide access to the Platform and App);
- the legitimate interests of Mobile School (such as ensuring security and improving the Services);
- consent, where personal data is provided voluntarily or where required by law.

Providing certain personal data is necessary to use the Services. If such data is not provided, access to the Platform or certain functionalities may not be available.

3. Sharing of personal data

Mobile School may share personal data with third parties where this is necessary for the purposes described in this Privacy Policy.

Such third parties may include:
- service providers supporting the operation of the Platform (such as hosting or technical service providers);
- partners involved in the provision or improvement of the Services;
- professional advisers, where necessary.

Where personal data is shared with third parties acting as processors, Mobile School ensures that such parties are bound by appropriate contractual obligations in accordance with applicable data protection legislation.

Mobile School may also disclose personal data:
- where required by law or by a competent authority;
- to protect its rights or legitimate interests;
- in the context of a merger, acquisition or transfer of activities, in which case personal data may be transferred to the relevant third party.

Mobile School does not sell personal data to third parties.

4. Transfers of personal data to third countries

Where personal data is transferred to a country outside the European Economic Area, Mobile School ensures that such transfers are carried out in accordance with applicable data protection legislation.

This means that transfers will only take place where:
- the European Commission has issued an adequacy decision; or
- appropriate safeguards are in place, such as the Standard Contractual Clauses adopted by the European Commission or other recognised transfer mechanisms.

5. Storage of personal data

Mobile School retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention periods may vary depending on the nature of the data and the purposes of processing.

For more information on retention in the context of the Services, reference is made to the Data Processing Agreement.

6. Your privacy rights

You have the following rights under applicable data protection legislation:
- the right of access to your personal data;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure of your personal data, subject to applicable conditions;
- the right to restriction of processing;
- the right to object to processing based on legitimate interests;
- the right to data portability; and
- where processing is based on consent, the right to withdraw consent at any time.

You also have the right to lodge a complaint with the competent data protection authority.

You may exercise your rights by contacting Mobile School via the contact details provided in this Privacy Policy.

Where Mobile School acts as a processor, requests relating to personal data should be addressed to the relevant Customer.

7. Security of personal data

Mobile School implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

These measures are designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.

While Mobile School takes reasonable steps to protect personal data, the Customer and End-Users also play an important role in maintaining security, including by keeping login credentials confidential and secure.

8. Update to the Privacy Policy

Mobile School may update or amend this Privacy Policy from time to time. Where changes are material, Mobile School will inform users through the Platform, by email or through other reasonable means. The updated Privacy Policy shall become effective upon publication, unless stated otherwise. We recommend that you review this Privacy Policy periodically to stay informed about how personal data is processed.

9. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact Mobile School via:
✓ Email: info@street-smart.be
✓ Adress: Brabançonnestraat 25, 3000 Leuven, Belgium

If you are not satisfied with the way Mobile School handles your request or have concerns about the processing of your personal data, you have the right to lodge a complaint with the competent data protection authority, in particular in Belgium with the Data Protection Authority (Gegevensbeschermingsautoriteit – GBA).