Last updated: October 2021
What personal information we collect
The Personal Information we process depends on the context of your interactions with Fresco and the Service, and falls into the following categories:
- We may process Personal Information you provide to us, including:
- Account log-in credentials such as your email address or username and password when you sign up for an account with us.
- Account holder information such as your location, profile picture, and who you interact with by using the Service, as well as Kahoot! account information if you have a Kahoot! account.
- Content you provide through our Service, such as video and audio streams, text, pictures, or other files.
- Information you through our support channels.
- We may process some Personal Information automatically, including:
- Browser or device information which is collected through your device, such as Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, internet browser type and version and version of the Services you are using.
- Usage data which is collected whenever you interact with our Service, such as the dates and times you access the Services and your browsing activities (such as what portions of the Service you used).
- Log data whereby our web servers keep log files that record data each time a device accesses those servers and the nature of each access, including originating IP-addresses and your activity in the Services.
- Cookies. Please refer to our Cookie Notice for further information.
- Personal data collected by Third Parties
How we use personal information
Fresco collects and uses your personal information for the following purposes and legal basis:
- Providing the Service: Providing access and functionality to the Service and personalize your experience in order to manage our contractual relationship with you, or where we have not entered into a contract with you, in reliance on our legitimate interests in administering and supporting our Services. We may use information in the aggregate to understand how our users as a group use the services and resources provided on our Service.
- Enable you with certain features: We may automatically process your Personal Information, in reliance of our legitimate interest, in order to enable you to use certain features of our Services, such as to make a comment or join a video call.
- Communicate with you: To communicate with you about your account and our Service in order to perform our contract with you for the use of the Service, or where we have not entered into a contract with you, in reliance on our legitimate interests in administering and supporting our Services.
- Support and improve the Service: We may use your Personal Information to support and improve our Service in order to comply with our contract with you for the use of the Service. Where we have not entered unto a contract with you, we may use such information in reliance on our legitimate interest in administering and improving the Service.
- Optimization of the Service: We may use third party services to optimize the Fresco platform in reliance on our legitimate interest in administering the Service and providing certain features.
- Comply with legal obligations: We may use your Personal Information in order to comply with any legal obligations, such as by court order or at the request by public authorities.
Your data protection rights
You may have certain rights pertaining to your Personal Information. If you are in the EEA, Switzerland or the UK, your rights relating to the processing of your personal data by us as a controller includes:
- Access, correct and update your Personal Information. You may submit an enquiry to access your Personal Information, or to correct and update any of the Personal Information we may hold on you.
- Delete, restrict or object to the processing of your Personal Information. You may ask us to erase the Personal Information we have collected, object to further processing of your Personal Information or restrict our processing of your Personal Information.
- If the Personal Information we have collected is based on your consent, such as by signing up to our newsletter, you may withdraw your consent at any time.
If you wish to exercise any of your data protection rights, please contact us at [email protected].
In addition, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction regarding our collection and use of your Personal Information. Contact details for all EU data protection authorities can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
How we share collected information
We do not sell, trade, or rent your personal identification information to others.
- Affiliates: We may disclose your Personal Information with companies affiliated with the Kahoot Group in reliance with our legitimate business purposes.
- Service Providers: We work with trusted third-party service providers, such as Amazon Web Services, to provide website and application development, hosting, maintenance, backup, storage, virtual infrastructure, and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under instruction from us, including abiding by policies and procedures designed to protect your information.
- Public Institutions: We may disclose your Personal Information if ordered by any competent law enforcement body, regulatory body, government agency, court or other third party where we believe disclosure is necessary (a) as a matter of applicable law or regulation, (b) to exercise, establish, or defend our legal rights, or (c) to protect your vital interests or those of any other person.
Canny.io is used to collect feedback and share the changelog of the product. For all transfers of personal data from the EU, Canny maintains EU standard contractual clauses where necessary. Canny Inc. is located in 831 N Tatnall St Suite M #140, Wilmington, DE 19801, USA. More information is available at here and here.
We do not transfer or process your Personal Information to countries outside the EEA. However, to ensure that audit and video streams are provided to you without delay, we use a content delivery network. Therefore, if you are located outside the EEA when using our Service, video and audit streams will be processed by a server close to your location outside the EEA and transferred to/accessed from the EEA, as the case may be.
For any international transfers, both within the Kahoot Group or to our sub-processors, we ensure that the recipient of your Personal Information offers an adequate level of protection by entering into appropriate agreements. All international transfers are made on the basis of the EU commission approved standard contractual clauses (“SCC’s”).
We use data hosting service providers in Europe to host the information we collect. We strive to protect the Personal Information we collect, and we have therefore implemented appropriate and reasonable technical and organisational measures designed to protect and secure your Personal Information.
How long is the data retained
We do not retain Personal Information that is no longer necessary for achieving the purpose for which it was collected. We may retain your information for the following purposes:
- When the Personal Information is necessary to provide our Service. The Personal Information related to your account is deleted when the account is deleted.
- We may retain some of the information you share in the Service to allow other team members to continue using our Services after you have deleted your account, such as content uploaded to the Service. Such content is deleted once the space to which the content was uploaded is deleted.
- When we have a legal obligation, contractual need or legitimate interest to store your Personal Information.
At your request, we may delete your account and the Personal Information we have collected.
Collection of Personal information from Children
Our Services are not directed at children, and you may not use our Services if you are under the age of 18. You must also be old enough to consent to the processing of your Personal Data in your country (in some countries we may allow your parent or guardian to do so on your behalf).