1. Who processes the data
Visual Concept SRL develops and operates the platform GradeBook (catalogul.online). The school using the platform determines the purposes of school data processing and is the data controller; we process data on the school's instructions as the service provider. Contact: contact@catalogul.online.
2. What data we collect
We collect only the strict minimum. The identification data requested from a person is:
- Last name and first name
- Email address (used for sign-in and notifications)
- Last 6 digits of the child's ID number — only to confirm the parent–child link
We don't request or store the full personal ID number, ID card series and number, home address or passwords. The last 6 digits of the ID number are not kept in plain text: they are cryptographically transformed (keyed hash) and can be used only to check a match.
Optionally, the parent can add a contact phone number for the school. The platform also contains school data entered by teachers: grades, absences, excuses, conduct, averages, class and school year. Technically we also keep a log of important actions and, if you enable phone notifications, the device's anonymous identifier.
3. Why we process this data
- To provide the electronic gradebook to the school (public interest / performance of the contract with the school).
- For secure sign-in with an email code.
- To verify the link between a parent and their child before granting access.
- For notifications about grades and absences, within each user's chosen preferences (consent, revocable at any time).
- For security and traceability (audit log, abuse limitation).
4. Who can access the data
- The teacher sees only the assigned classes and subjects.
- The homeroom teacher sees their class and the parents linked to its students.
- School administrator sees the data needed to run the school.
- The student sees only their own record.
- The parent sees only the children whose access was validated.
We don't sell data or use it for advertising. We use only strictly necessary service providers: hosting and database, the email delivery service and the browser notification service.
5. How long we keep the data
- Sign-in codes: 5 minutes.
- Unconfirmed access requests: up to 30 days.
- Account data: as long as the account is active at the school.
- School data: according to the school's decision and legal obligations.
- Audit log: for as long as the school uses the platform.
6. Security
Data is transmitted encrypted, access is restricted by role at database level, sign-in is passwordless and sensitive actions are logged. PDF documents are available only through private links.
7. Children
Data of minor students is entered by the school as part of its educational activity. A parent's access to the child's data is granted only after email verification and explicit validation by the homeroom teacher or administrator.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent. Details and how to exercise them: Your rights (GDPR).
9. Cookies
We use only strictly necessary technical storage: the sign-in session, the chosen theme and temporary form drafts in your browser. We don't use advertising or tracking cookies.