Privacy notice

01Data controller

The data controller is the school the student attends, which decides the purposes of the teaching activity and keeps the relationship with families.

Dialectica processes data as a processor, on the school's instructions and within the limits of the agreement signed under art. 28 GDPR.

02Purpose of processing

Data is processed to carry out the teaching activity: assigning debate assignments, letting the student complete them, producing a proposed rubric assessment and giving the student a report on their work.

It is not processed for commercial purposes, does not feed advertising profiling, and is not used to train artificial intelligence models.

03Legal basis

Processing is based on carrying out a task in the public interest connected with education. For lower-secondary students, authorisation from whoever holds parental responsibility is also required, collected by the school.

04Categories of data processed

Display name chosen by the school, class and institution, class code used to sign in, texts written by the student during debates, analysis scores and the report confirmed by the teacher.

Not processed: the student's email address, photographs, phone number or other contact details, geolocation data.

05Recipients

A student's texts and scores are visible to their class teacher and to authorised school staff. No other student can access them.

The providers that process data on Dialectica's behalf are five, and are listed by name, purpose, place of processing and guarantees on the compliance page.

06Place of processing

The database is in the European Union (Frankfurt) and the application's functions run in Frankfurt. Some providers are based in the United States and may access data for support, under standard contractual clauses. The language model that analyses submissions belongs to a European provider and inference runs in France, EU. Not all processing happens in the EU: the infrastructure the provider uses to manage the service is not regional, and limited, protected transfers to sub-processors remain possible.

07Retention period

Student data is kept for the length of the institution's contract, plus a grace period of 180 days. The grace period is written into the contract and can be shortened for a given institution. Once it runs out, the debates, the assessments, the classes and the institution record itself are deleted.

Deletion is automatic: a procedure in the database runs every night. Teacher invitations that are never accepted are deleted after 30 days.

08Data subject rights

Whoever holds parental responsibility can request access, rectification, erasure and restriction of processing, and object to processing where provided for. The request is made to the institution, which is the controller.

Dialectica acts on requests forwarded to it by the school, within the timeframe set by the agreement.

09Contacts

To exercise your rights: the institution's data protection officer.

For technical questions about the application: hello@dialectica.education, or the form on the Contact page.