Trust · GDPR
GDPR notice.
Roles
for instructional content.
For student data, Coursim acts as a processor. Your school or district is the controller and decides what may be done with it.
Legal bases
We rely on the following legal bases: (a) performance of contract – for providing the Service; (b) legitimate interests – for security, fraud prevention, and Service improvement; and (c) consent – for optional features such as email newsletters.
Transfers
Personal data of EU/UK data subjects is transferred to the United States under the Standard Contractual Clauses (2021/914 EU Commission), with supplementary measures including end-to-end encryption in transit and at rest.
Data subject rights
EU/UK data subjects have the rights of access, rectification, erasure, restriction, portability, and objection. Requests may be submitted to privacy@coursim.co and are fulfilled within 30 days.
Data Protection Officer
Our Data Protection Officer is reachable at dpo@coursim.co.
Supervisory authority
Data subjects have the right to lodge a complaint with their local data protection authority.
Talk to our Data Protection Officer.
Signed DPAs, Standard Contractual Clauses, and every question a European school's lawyer has asked – we've answered most of them in writing. The rest in a 30-minute call.