Terms & Policies
By creating and/or logging into an account with the app and web service Undralingur ehf. (hereinafter referred to as “we” "Undralingur" or "Wonderling"), the user (hereinafter referred to as “you”) declares that the terms of use, additional terms, and privacy policy of Wonderling/Undralingur (hereinafter referred to as “the terms”) have been read by them, that the user has understood the information contained therein, and has accepted the terms in their entirety.
Privacy Policy
1
Introduction
1
Introduction
1
Introduction
1.1
Undralingur ehf. ("Wonderling", “Undralingur” or "we") processes personal data about the following categories of persons: • Users of our Wonderling/Undralingur services (for example parents, teachers or children) • Contact persons for our business customers (for example schools, municipalities) • Receivers of newsletters We have made this privacy notice to explain how and why we use your personal data and what rights you have. Typically we will process personal data about you when you use our Wonderling/Undralingur services or otherwise contact us. It is very important for us that our reading platform and services are privacy friendly and secure to use. Please note that this privacy notice describes only the use of personal data when we are the data controller, which means when we decide the purposes and means of the processing. If you use Wonderling/Undralingur services as a teacher or pupil, the school will be the data controller of the processing of your personal data, and the school has entered into a data processing agreement with us. Although we act as a data processor for your school, we may use pseudonymised and aggregated data in order to improve our products and services and the time of login for security reasons. If you want more information about the school's processing of personal data, we kindly request you to contact your school.
1.1
Undralingur ehf. ("Wonderling", “Undralingur” or "we") processes personal data about the following categories of persons: • Users of our Wonderling/Undralingur services (for example parents, teachers or children) • Contact persons for our business customers (for example schools, municipalities) • Receivers of newsletters We have made this privacy notice to explain how and why we use your personal data and what rights you have. Typically we will process personal data about you when you use our Wonderling/Undralingur services or otherwise contact us. It is very important for us that our reading platform and services are privacy friendly and secure to use. Please note that this privacy notice describes only the use of personal data when we are the data controller, which means when we decide the purposes and means of the processing. If you use Wonderling/Undralingur services as a teacher or pupil, the school will be the data controller of the processing of your personal data, and the school has entered into a data processing agreement with us. Although we act as a data processor for your school, we may use pseudonymised and aggregated data in order to improve our products and services and the time of login for security reasons. If you want more information about the school's processing of personal data, we kindly request you to contact your school.
1.1
Undralingur ehf. ("Wonderling", “Undralingur” or "we") processes personal data about the following categories of persons: • Users of our Wonderling/Undralingur services (for example parents, teachers or children) • Contact persons for our business customers (for example schools, municipalities) • Receivers of newsletters We have made this privacy notice to explain how and why we use your personal data and what rights you have. Typically we will process personal data about you when you use our Wonderling/Undralingur services or otherwise contact us. It is very important for us that our reading platform and services are privacy friendly and secure to use. Please note that this privacy notice describes only the use of personal data when we are the data controller, which means when we decide the purposes and means of the processing. If you use Wonderling/Undralingur services as a teacher or pupil, the school will be the data controller of the processing of your personal data, and the school has entered into a data processing agreement with us. Although we act as a data processor for your school, we may use pseudonymised and aggregated data in order to improve our products and services and the time of login for security reasons. If you want more information about the school's processing of personal data, we kindly request you to contact your school.
2
How and why do we use your personal data?
2
How and why do we use your personal data?
2
How and why do we use your personal data?
We use personal data for these reasons:
We use personal data for these reasons:
We use personal data for these reasons:
2.1
Provision of our reading platform. In order to give you access to our reading platform and services, we need to use personal data. • Anonymous user: Upon opening the app and prior to a user creating account, only anonymous data is collected. • Parent: You need to create a user account. This means we will process your name, e-mail, password, birth year. • Child: Your child is registered with a nickname and avatar. We will also process books read, chosen reading level and reading progression, such as reading time (minutes and days), books read, quizzes completed and average score. We may use pseudonymised and aggregated data in order to improve our products and services. We will also process your IP address and time of login for security reasons. We process personal data related to purposes of providing our reading platform based on that we need to fulfill the contract with you and/or because we have a legitimate interest in giving you a good user experience and secure service.
2.1
Provision of our reading platform. In order to give you access to our reading platform and services, we need to use personal data. • Anonymous user: Upon opening the app and prior to a user creating account, only anonymous data is collected. • Parent: You need to create a user account. This means we will process your name, e-mail, password, birth year. • Child: Your child is registered with a nickname and avatar. We will also process books read, chosen reading level and reading progression, such as reading time (minutes and days), books read, quizzes completed and average score. We may use pseudonymised and aggregated data in order to improve our products and services. We will also process your IP address and time of login for security reasons. We process personal data related to purposes of providing our reading platform based on that we need to fulfill the contract with you and/or because we have a legitimate interest in giving you a good user experience and secure service.
2.1
Provision of our reading platform. In order to give you access to our reading platform and services, we need to use personal data. • Anonymous user: Upon opening the app and prior to a user creating account, only anonymous data is collected. • Parent: You need to create a user account. This means we will process your name, e-mail, password, birth year. • Child: Your child is registered with a nickname and avatar. We will also process books read, chosen reading level and reading progression, such as reading time (minutes and days), books read, quizzes completed and average score. We may use pseudonymised and aggregated data in order to improve our products and services. We will also process your IP address and time of login for security reasons. We process personal data related to purposes of providing our reading platform based on that we need to fulfill the contract with you and/or because we have a legitimate interest in giving you a good user experience and secure service.
2.2
Customer handling and enquiries. We need information about our customers to provide our services. If you are a parent we need to process your personal data in order to enter into or fulfil our agreement with you. If you are a contact person as a business customer (for example school or municipality), we provide log-in and payment options that make it possible to keep all data related to your users (the students) anonymous. Such options do however require that you, the contact person and/or business customer, do not enter any personal data in relations to the students yourself. In terms of your own personal data as a contact person or business customer we will process your personal data because we have a legitimate interest in conducting business with the entity you work for. The information collected may include name, e-mail address, address.
2.2
Customer handling and enquiries. We need information about our customers to provide our services. If you are a parent we need to process your personal data in order to enter into or fulfil our agreement with you. If you are a contact person as a business customer (for example school or municipality), we provide log-in and payment options that make it possible to keep all data related to your users (the students) anonymous. Such options do however require that you, the contact person and/or business customer, do not enter any personal data in relations to the students yourself. In terms of your own personal data as a contact person or business customer we will process your personal data because we have a legitimate interest in conducting business with the entity you work for. The information collected may include name, e-mail address, address.
2.2
Customer handling and enquiries. We need information about our customers to provide our services. If you are a parent we need to process your personal data in order to enter into or fulfil our agreement with you. If you are a contact person as a business customer (for example school or municipality), we provide log-in and payment options that make it possible to keep all data related to your users (the students) anonymous. Such options do however require that you, the contact person and/or business customer, do not enter any personal data in relations to the students yourself. In terms of your own personal data as a contact person or business customer we will process your personal data because we have a legitimate interest in conducting business with the entity you work for. The information collected may include name, e-mail address, address.
2.3
Payment. To receive correct payments we need to process certain payment information, such as name, address, credit card information and order information. We process such personal data because it is necessary to fulfil the contract with you and/or because we have a legal obligation to do so.
2.3
Payment. To receive correct payments we need to process certain payment information, such as name, address, credit card information and order information. We process such personal data because it is necessary to fulfil the contract with you and/or because we have a legal obligation to do so.
2.3
Payment. To receive correct payments we need to process certain payment information, such as name, address, credit card information and order information. We process such personal data because it is necessary to fulfil the contract with you and/or because we have a legal obligation to do so.
2.3
Newsletters and direct marketing. We will send you information about future products via e-mail if you provide us your consent to do so. You can withdraw your consent at anytime by sending us an e-mail or by clicking unsubscribe at the bottom of the newsletters.
2.3
Newsletters and direct marketing. We will send you information about future products via e-mail if you provide us your consent to do so. You can withdraw your consent at anytime by sending us an e-mail or by clicking unsubscribe at the bottom of the newsletters.
2.3
Newsletters and direct marketing. We will send you information about future products via e-mail if you provide us your consent to do so. You can withdraw your consent at anytime by sending us an e-mail or by clicking unsubscribe at the bottom of the newsletters.
3
How do we secure your personal data?
3
How do we secure your personal data?
3
How do we secure your personal data?
3.1
Your information is transmitted from your device to our servers using HTTPS. Our database is set up for one-way communication, so that no outsiders can retrieve information. We have implemented and use reputable security solutions to secure your information.
3.1
Your information is transmitted from your device to our servers using HTTPS. Our database is set up for one-way communication, so that no outsiders can retrieve information. We have implemented and use reputable security solutions to secure your information.
3.1
Your information is transmitted from your device to our servers using HTTPS. Our database is set up for one-way communication, so that no outsiders can retrieve information. We have implemented and use reputable security solutions to secure your information.
4
Who has access to your personal data?
4
Who has access to your personal data?
4
Who has access to your personal data?
4.1
We may share personal data with the following recipients or categories of recipients: • Service providers: We use service providers, such as IT suppliers (such as databases, e-mail, analytics, marketing, license management, internal communications, newsletters, customer relationship management and customer service) and marketing companies etc., that process personal data on our behalf as data processors. We will always enter into appropriate data processor agreements with our data processors. • Payment service providers: We offer subscriptions through Apple’s subscription platform in the App Store. Please note that Wonderling/Undralingur is not responsible for the payment service providers' own processing of personal data for their own purposes. For example, you may create a user account with the service provider. You can read more about their processing of personal data in the privacy notices of the App Store. • Professional advisors: We may share personal data with our professional advisors, such as lawyers, accountants, auditors, consultants etc. • Public authorities or other parties if required by law: We will disclose your personal data if we are required to do so by law or in response to valid requests by public authorities (for example a court or a government agency). We will never share or otherwise make available your personal data to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you or a legal basis that requires us to disclose the information. Wonderling has limited access to the database so that only our employees and third parties with whom we have data processing agreements have access. Wonderling will in some cases share statistics of anonymised information with third parties. Wonderling only uses subcontractors who have the same level of protection for personal data as we have.
4.1
We may share personal data with the following recipients or categories of recipients: • Service providers: We use service providers, such as IT suppliers (such as databases, e-mail, analytics, marketing, license management, internal communications, newsletters, customer relationship management and customer service) and marketing companies etc., that process personal data on our behalf as data processors. We will always enter into appropriate data processor agreements with our data processors. • Payment service providers: We offer subscriptions through Apple’s subscription platform in the App Store. Please note that Wonderling/Undralingur is not responsible for the payment service providers' own processing of personal data for their own purposes. For example, you may create a user account with the service provider. You can read more about their processing of personal data in the privacy notices of the App Store. • Professional advisors: We may share personal data with our professional advisors, such as lawyers, accountants, auditors, consultants etc. • Public authorities or other parties if required by law: We will disclose your personal data if we are required to do so by law or in response to valid requests by public authorities (for example a court or a government agency). We will never share or otherwise make available your personal data to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you or a legal basis that requires us to disclose the information. Wonderling has limited access to the database so that only our employees and third parties with whom we have data processing agreements have access. Wonderling will in some cases share statistics of anonymised information with third parties. Wonderling only uses subcontractors who have the same level of protection for personal data as we have.
4.1
We may share personal data with the following recipients or categories of recipients: • Service providers: We use service providers, such as IT suppliers (such as databases, e-mail, analytics, marketing, license management, internal communications, newsletters, customer relationship management and customer service) and marketing companies etc., that process personal data on our behalf as data processors. We will always enter into appropriate data processor agreements with our data processors. • Payment service providers: We offer subscriptions through Apple’s subscription platform in the App Store. Please note that Wonderling/Undralingur is not responsible for the payment service providers' own processing of personal data for their own purposes. For example, you may create a user account with the service provider. You can read more about their processing of personal data in the privacy notices of the App Store. • Professional advisors: We may share personal data with our professional advisors, such as lawyers, accountants, auditors, consultants etc. • Public authorities or other parties if required by law: We will disclose your personal data if we are required to do so by law or in response to valid requests by public authorities (for example a court or a government agency). We will never share or otherwise make available your personal data to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you or a legal basis that requires us to disclose the information. Wonderling has limited access to the database so that only our employees and third parties with whom we have data processing agreements have access. Wonderling will in some cases share statistics of anonymised information with third parties. Wonderling only uses subcontractors who have the same level of protection for personal data as we have.
5
Transfers of personal data
5
Transfers of personal data
5
Transfers of personal data
5.1
The use of some data processors may, to a very limited extent, involve transfers of personal data to the United States. For such transfers we ensure that the personal data is afforded a level of protection that is equivalent to that guaranteed within the EU/EEA. Our transfers to the United States are based on adequacy decisions, i.e. EU–U.S. Data Privacy Framework and UK Extension to the EU–U.S. Data Privacy Framework.
5.1
The use of some data processors may, to a very limited extent, involve transfers of personal data to the United States. For such transfers we ensure that the personal data is afforded a level of protection that is equivalent to that guaranteed within the EU/EEA. Our transfers to the United States are based on adequacy decisions, i.e. EU–U.S. Data Privacy Framework and UK Extension to the EU–U.S. Data Privacy Framework.
5.1
The use of some data processors may, to a very limited extent, involve transfers of personal data to the United States. For such transfers we ensure that the personal data is afforded a level of protection that is equivalent to that guaranteed within the EU/EEA. Our transfers to the United States are based on adequacy decisions, i.e. EU–U.S. Data Privacy Framework and UK Extension to the EU–U.S. Data Privacy Framework.
6
How long do we store your personal data?
6
How long do we store your personal data?
6
How long do we store your personal data?
6.1
In general, we store your personal data for as long as necessary to fulfill the purpose that the personal data was collected for or otherwise processed. However, the actual retention period depends on the purposes we use personal data for: • Provision of our reading platform: We store your personal data for as long as you continue to use Wonderling with a valid user account. If you cancel your subscription, your personal data will be deleted after 2 years. Please note that uninstalling the app does not involve deleting data or terminating a subscription. • Newsletters and direct marketing: We will send you newsletters and other marketing enquiries via e-mail until you click "Unsubscribe" on the bottom of the newsletter or otherwise withdraw your consent by emailing us. Customer handling and enquiries: We will store information about our customers (parents or schools) as long as we have you as a customer. Enquiries are deleted at regular intervals, but normally not stored for more than three years. • Social media: In principle, all the content in our social media channels will be stored as long as we administrate the relevant channel. However, please note that you as the end user can remove your own content by deleting posts, clicking unlike etc. In some situations, we may store the personal data for longer period because we have a legal obligation to do so or because we need to establish, exercise or defend a legal claim. Please also note that even if we have a legal obligation to store your personal data, we may use your personal data for other purposes as well.
6.1
In general, we store your personal data for as long as necessary to fulfill the purpose that the personal data was collected for or otherwise processed. However, the actual retention period depends on the purposes we use personal data for: • Provision of our reading platform: We store your personal data for as long as you continue to use Wonderling with a valid user account. If you cancel your subscription, your personal data will be deleted after 2 years. Please note that uninstalling the app does not involve deleting data or terminating a subscription. • Newsletters and direct marketing: We will send you newsletters and other marketing enquiries via e-mail until you click "Unsubscribe" on the bottom of the newsletter or otherwise withdraw your consent by emailing us. Customer handling and enquiries: We will store information about our customers (parents or schools) as long as we have you as a customer. Enquiries are deleted at regular intervals, but normally not stored for more than three years. • Social media: In principle, all the content in our social media channels will be stored as long as we administrate the relevant channel. However, please note that you as the end user can remove your own content by deleting posts, clicking unlike etc. In some situations, we may store the personal data for longer period because we have a legal obligation to do so or because we need to establish, exercise or defend a legal claim. Please also note that even if we have a legal obligation to store your personal data, we may use your personal data for other purposes as well.
6.1
In general, we store your personal data for as long as necessary to fulfill the purpose that the personal data was collected for or otherwise processed. However, the actual retention period depends on the purposes we use personal data for: • Provision of our reading platform: We store your personal data for as long as you continue to use Wonderling with a valid user account. If you cancel your subscription, your personal data will be deleted after 2 years. Please note that uninstalling the app does not involve deleting data or terminating a subscription. • Newsletters and direct marketing: We will send you newsletters and other marketing enquiries via e-mail until you click "Unsubscribe" on the bottom of the newsletter or otherwise withdraw your consent by emailing us. Customer handling and enquiries: We will store information about our customers (parents or schools) as long as we have you as a customer. Enquiries are deleted at regular intervals, but normally not stored for more than three years. • Social media: In principle, all the content in our social media channels will be stored as long as we administrate the relevant channel. However, please note that you as the end user can remove your own content by deleting posts, clicking unlike etc. In some situations, we may store the personal data for longer period because we have a legal obligation to do so or because we need to establish, exercise or defend a legal claim. Please also note that even if we have a legal obligation to store your personal data, we may use your personal data for other purposes as well.
7
What rights do you have?
7
What rights do you have?
7
What rights do you have?
7.1
If we process your personal data, you are a data subject that have certain rights: • Access: You may ask us whether or not your personal data is processed by us and, if this is the case, access your personal data and further information about the processing. • Rectification: You may ask us to rectify inaccurate personal data about you. • Deletion: You may ask us to erase your personal data. • Restriction: You may ask us to restrict our processing of your personal data. • Objection: You may object to our processing of personal data concerning you. • Data portability: You may ask us to give you or another controller your personal data in a structured, commonly used and machine-readable format. If the processing of your personal data is based on consent, you can withdraw your consent at any time by contacting us at personuvernd@undralingur.is. Please remember that the rights mentioned might have some restrictions. Giving your personal data is your choice, but we usually need it for you to make an agreement with us or use our services. Failure to give your personal data or using your rights may stop us from providing you the Wonderling/Undralingur services. You can use your rights by sending us an e-mail at personuvernd@undralingur.is. We will respond to you as soon as possible. We may ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to ensure that we only give access to your personal data to you — and not someone who claims to be you.
7.1
If we process your personal data, you are a data subject that have certain rights: • Access: You may ask us whether or not your personal data is processed by us and, if this is the case, access your personal data and further information about the processing. • Rectification: You may ask us to rectify inaccurate personal data about you. • Deletion: You may ask us to erase your personal data. • Restriction: You may ask us to restrict our processing of your personal data. • Objection: You may object to our processing of personal data concerning you. • Data portability: You may ask us to give you or another controller your personal data in a structured, commonly used and machine-readable format. If the processing of your personal data is based on consent, you can withdraw your consent at any time by contacting us at personuvernd@undralingur.is. Please remember that the rights mentioned might have some restrictions. Giving your personal data is your choice, but we usually need it for you to make an agreement with us or use our services. Failure to give your personal data or using your rights may stop us from providing you the Wonderling/Undralingur services. You can use your rights by sending us an e-mail at personuvernd@undralingur.is. We will respond to you as soon as possible. We may ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to ensure that we only give access to your personal data to you — and not someone who claims to be you.
7.1
If we process your personal data, you are a data subject that have certain rights: • Access: You may ask us whether or not your personal data is processed by us and, if this is the case, access your personal data and further information about the processing. • Rectification: You may ask us to rectify inaccurate personal data about you. • Deletion: You may ask us to erase your personal data. • Restriction: You may ask us to restrict our processing of your personal data. • Objection: You may object to our processing of personal data concerning you. • Data portability: You may ask us to give you or another controller your personal data in a structured, commonly used and machine-readable format. If the processing of your personal data is based on consent, you can withdraw your consent at any time by contacting us at personuvernd@undralingur.is. Please remember that the rights mentioned might have some restrictions. Giving your personal data is your choice, but we usually need it for you to make an agreement with us or use our services. Failure to give your personal data or using your rights may stop us from providing you the Wonderling/Undralingur services. You can use your rights by sending us an e-mail at personuvernd@undralingur.is. We will respond to you as soon as possible. We may ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to ensure that we only give access to your personal data to you — and not someone who claims to be you.
8
Complaints
8
Complaints
8
Complaints
8.1
If you have questions about our use of personal data or are unhappy with how we do it, please feel free to email us at personuvernd@undralingur.is. You may also send a complaint to the Icelandic Data Protection Authority (Persónuvernd), which is the supervisory authority for data protection in Iceland, or to the relevant data protection authority in an EU/EEA member state if the App is downloaded outside of Iceland.
8.1
If you have questions about our use of personal data or are unhappy with how we do it, please feel free to email us at personuvernd@undralingur.is. You may also send a complaint to the Icelandic Data Protection Authority (Persónuvernd), which is the supervisory authority for data protection in Iceland, or to the relevant data protection authority in an EU/EEA member state if the App is downloaded outside of Iceland.
8.1
If you have questions about our use of personal data or are unhappy with how we do it, please feel free to email us at personuvernd@undralingur.is. You may also send a complaint to the Icelandic Data Protection Authority (Persónuvernd), which is the supervisory authority for data protection in Iceland, or to the relevant data protection authority in an EU/EEA member state if the App is downloaded outside of Iceland.
9
Changes
9
Changes
9
Changes
9.1
Should there be a change in our services or changes in the regulations on the processing of personal data, it may cause a change in the information we have provided here. Changes will be published in the form of updating the app. In addition, updated information will always be easy to find on our website.
9.1
Should there be a change in our services or changes in the regulations on the processing of personal data, it may cause a change in the information we have provided here. Changes will be published in the form of updating the app. In addition, updated information will always be easy to find on our website.
9.1
Should there be a change in our services or changes in the regulations on the processing of personal data, it may cause a change in the information we have provided here. Changes will be published in the form of updating the app. In addition, updated information will always be easy to find on our website.
5
Contact information
5
Contact information
5
Contact information
5.1
The full name of our legal entity is “Undralingur ehf.” which is the data controller of the processing of personal data. Our registered address is: Undralingur ehf. Hlíðasmári 8 201 Kópavogur Iceland If you have any enquiries, questions or complaints regarding our processing of personal data, you may contact us anytime at personuvernd@undralingur.is or hello@wonderling.app.
5.1
The full name of our legal entity is “Undralingur ehf.” which is the data controller of the processing of personal data. Our registered address is: Undralingur ehf. Hlíðasmári 8 201 Kópavogur Iceland If you have any enquiries, questions or complaints regarding our processing of personal data, you may contact us anytime at personuvernd@undralingur.is or hello@wonderling.app.
5.1
The full name of our legal entity is “Undralingur ehf.” which is the data controller of the processing of personal data. Our registered address is: Undralingur ehf. Hlíðasmári 8 201 Kópavogur Iceland If you have any enquiries, questions or complaints regarding our processing of personal data, you may contact us anytime at personuvernd@undralingur.is or hello@wonderling.app.