Privacy policy

Who is responsible (data controller)

The data controller for personal data submitted through this website is Birsöz. You can reach us about anything privacy-related at privacy@birsoz.net. (Contact address and full legal entity details will be added before commercial launch.)

What we collect and why

When you register a school through the form on this site we collect:

• School details — school name, and optionally country and city. Used to create your school workspace.
• Your full name — used to create and label your owner account.
• Your email address — used as your sign-in identifier and to contact you about your account and the service.
• Your phone number (optional) — used only as an additional way to contact you about your account.
• Your password — used to secure your account. It is hashed immediately and never stored or logged in plain text.

The legal basis for this processing is Article 6(1)(b) GDPR — it is necessary to create the account and provide the service you are requesting. We do not use this data for advertising and we do not sell it to anyone.

How your data is protected

• All traffic between your browser and our servers is encrypted (TLS).
• Personal data is encrypted at rest; passwords are stored only as strong one-way hashes.
• Each school’s data is strictly isolated from every other school’s.
• Access to production systems is restricted and audited.

How long we keep it

We keep your account data for as long as your school account exists. If you register a demo school and never activate it, we may delete it after a period of inactivity. When an account is deleted, associated personal data is removed or irreversibly anonymised, except where law requires us to retain specific records.

Who processes it

Your data is stored on servers operated for Birsöz by our hosting provider within the EU. We use no third-party analytics, advertising or tracking scripts on this website, and this site sets no cookies.

Your rights

Under the GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@birsoz.net. We respond within one month.

Changes to this policy

This is an early version of our privacy policy, covering the registration form only. It will be extended before commercial launch to cover the full platform (including data processed on behalf of schools, where the school is the controller and Birsöz acts as processor). Material changes will be announced on this page.