GDPR information notice for schools

Purpose of this notice: information about personal data processing during the Edukamentas for Schools pilot and while an active school plan or subscription is used, provided to end users under Article 13 GDPR.

Before a pilot or active school subscription or plan begins, the school must provide this notice to students, teachers, parents or guardians, and other end users of Edukamentas for Schools. This helps ensure that the school community is properly informed about data processing.

To join the Edukamentas for Schools pilot or use the service under an active school subscription or plan, your school provides the data needed for education services (name, surname, class or group, and email address) so that access can be granted. MB Uncascade directly processes all data collected during use. If data needs to be changed, a student or other end user should contact MB Uncascade. The school and MB Uncascade are not joint controllers. Students may choose not to participate by not registering on the portal.

Data controller

MB Uncascade (trading as Edukamentas), company code 307057505, V. Nagevičiaus St. 3, LT-08237 Vilnius, email [email protected].

What we process and why

Data is processed to provide the service during the pilot and, if the school purchases or uses an active school plan or subscription, throughout that use: to create and maintain accounts, provide learning features, prepare reports, and provide support.

Legal basis: the school determines and communicates its own legal basis as a separate controller; public-sector schools commonly rely on Article 6(1)(e) GDPR. Edukamentas relies on Articles 6(1)(b), 6(1)(f), 6(1)(c), and, where applicable, 6(1)(a) GDPR.

The school’s role

The school is a separate data controller. When starting a pilot or using an active school plan or subscription, your school provides the minimum data (name, surname, email address, class or group) needed to verify that the data is suitable and to grant each user access during registration. Your account may also work without being connected to an organisation because Edukamentas services can be purchased independently; in that case MB Uncascade is the sole controller of the account data.

Children

The current Edukamentas for Schools model is intended for students in grades 7–12 and adult teachers, parents, and guardians. Student subject choices are being added in stages as content is published. A separate legal and product assessment would be required before a school could use the service with students under 14.

Data sharing and recipients

The school can see only the data needed for education. A person with separate parent or guardian access, or the manager of a family-plan seat assigned to the student, may see the student’s progress. If the student also studies at school using the same account, that activity may appear in the family summary.

Subprocessors

Edukamentas uses the subprocessors listed on the subprocessor page and in the Privacy Policy. Transfers outside the EEA take place only with EU Standard Contractual Clauses (SCCs), risk assessments, and other appropriate safeguards.

/subpro is the canonical public list of subprocessors. We generally notify the designated Edukamentas for Schools administrator by email at least 7 calendar days before material changes to subprocessors, the Privacy Policy, or Terms of Service that may significantly affect school data. If an urgent change is needed for security, service continuity, a supplier outage, misuse, a legal requirement, or a similar pressing reason, we may make it without advance notice and provide information as soon as possible afterwards.

A school may raise a reasoned objection to a specific new subprocessor if it believes that its use creates a real data-protection or contractual risk. In practice, the response will generally be to stop using the relevant feature, disable it, find an alternative workflow, or agree a separate contract term where feasible. Urgent security or continuity changes generally do not justify suspending payments or ending a contract outside the applicable contractual process.

Data processed

The detailed data list is in the portal’s Privacy Policy. Data is used to provide the service (assignments, progress, and interaction with content), analyse pilot or active school use, and prevent misuse.

Retention period

Data is retained as described in the Privacy Policy and Terms of Service. In some cases, it may be retained for up to 10 years after the last sign-in to preserve learning history and provide archives when needed. Anonymised summaries may be kept longer for research and statistics with appropriate technical and organisational safeguards.

Your rights and withdrawal

You may have rights to access, rectification, erasure, restriction, portability, and objection, as provided by applicable law. Where a specific processing activity is based on consent, you may withdraw it as easily as you gave it by emailing [email protected]. If another legal basis applies, withdrawing consent alone does not end all processing.

Complaints

You may complain to the State Data Protection Inspectorate, L. Sapiegos St. 17, LT-10312 Vilnius, email [email protected], phone +370 5 271 2804 or +370 5 279 1445; advice line +370 5 212 7532.

Direct marketing

We do not send direct marketing to students without separate consent. Necessary service notices are always sent.

Age

The current school-use model is intended only for students aged 14 and over. If a school considers including younger students, that arrangement must be assessed separately and is not considered active or approved before access is granted.

Acknowledgement

By starting to use Edukamentas, you confirm that you have read the information in this notice. This does not by itself mean that all processing is based on consent: the legal basis depends on the processing activity and the model chosen by the school. Read more in the Privacy Policy.

This notice was prepared on 19 November 2025. It applies during the pilot and while an active school plan or subscription is used, until it is marked as invalid on the portal or another notice is provided to the school or end user.