1. Categories of providers and services
This page complements Edugenia’s privacy policy and describes the categories of providers involved in running the platform.
The data each provider receives depends on the service you use and the content you provide.
| Provider category | Service and purpose | Data processed |
|---|---|---|
| Cloud infrastructure and authentication | Managing access to accounts, hosting the platform’s data and files, and providing access and progress tracking for courses connected to Edugenia. | Account and authentication data, saved content and files, and technical logs. For connected courses, also learners’ identifiers, names, roles, access, progress and assessment results. |
| Email communications | Sending the service’s emails. | Recipient’s email address, subject and message content. |
| Payment and invoicing services | Processing payments and managing invoices. | Email address, billing and payment details, amounts and identifiers of the purchase, the user and the academy. |
| Intermediation of artificial intelligence services | Routing requests and responses between Edugenia and the content generation services. | Instructions, content sent to the AI, request context and generated responses. |
| Processing and generation by artificial intelligence | Processing requests to generate or adapt the requested content. | Instructions, content sent to the AI, request context and generated responses. |
An AI request may involve an intermediary and the provider that carries out the generation. Each may receive the content needed for its part.
2. Data protection and international transfers
Edugenia’s main database and main file storage are hosted in Belgium, within the European Union. Some services used to provide the platform, such as account authentication and certain artificial intelligence features, involve processing data outside the European Economic Area, including in the United States.
Providers that process data on Edugenia’s behalf must be bound by a data processing agreement. The contracted entity and its role must be identified for each service; the same provider may act on Edugenia’s behalf for some activities and under its own responsibility for others.
Transfers of data outside the European Economic Area must rely on a valid mechanism under the GDPR, such as an adequacy decision of the European Commission or the appropriate safeguards for the case. You can write to info@edugenia.com to ask for information about transfers and a copy of the safeguards that apply.
3. Information for academies and organisations
When Edugenia processes personal data on behalf of an academy or organisation, it must give that organisation the identity and contact details of the sub-processors involved in that processing. The contractual processing documentation must include this information and be kept up to date.
Using sub-processors requires the organisation’s prior written authorisation. If the authorisation is general, we must tell it about additions or replacements far enough in advance for it to object before the change, in line with the processing agreement and Article 28(2) of the GDPR.
4. Access to information and updates
You can write to info@edugenia.com to ask for the identity of the recipients to whom your personal data has been or will be disclosed, in exercise of your right of access. The privacy policy explains the other rights you can exercise.
The services and providers we use may change as Edugenia evolves. We will update this page when those changes affect the categories, services or processing information described, showing the revision date at the top.
The authorisation and information obligations towards academies and organisations set out in the previous section continue to apply.