{"id":12897,"date":"2024-07-30T09:17:05","date_gmt":"2024-07-30T09:17:05","guid":{"rendered":"https:\/\/gatlabs.com\/education\/?page_id=12897"},"modified":"2024-09-02T18:09:22","modified_gmt":"2024-09-02T18:09:22","slug":"gat-labs-student-data-privacy-policy","status":"publish","type":"page","link":"https:\/\/gatlabs.com\/education\/gat-labs-student-data-privacy-policy\/","title":{"rendered":"GAT Labs Student Data Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

GAT Labs Student Data Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What information we collect and what we use it for<\/b><\/p>

GAT Labs is a cloud-based solution that offers services for auditing, management, and security of all areas of Google Workspace by providing comprehensive alerting and reporting systems in one place.\u00a0<\/span><\/p>

GAT Labs uses student data solely to provide services to Customers under the <\/span>Terms of Service<\/span><\/a>.\u00a0<\/span><\/p>

GAT Labs typically collects and processes student personally identifiable information (PII) data (such as name, email address, phone number, IP addresses) only at the level necessary to provide services to educational domains.<\/span><\/p>

There are two sources of information, collected directly from Google Workspace via API (e.g. students’ first and last names, email addresses, phone numbers (only if applicable), student Google IDs, geolocation data, UDID, grades) and gathered via a Chrome extension directly from students\u2019 devices to monitor their browsing behaviour and online activities (e.g. geolocation data, browser type, browsing access time, time spent on site, page views, referring URLs).<\/span><\/p>

We do not allow any of the above data to be publicly available.\u00a0<\/span><\/p>

How we gather, store and protect your information<\/b><\/p>

Data is kept confidential and is stored exclusively on Google Cloud Platform. This data is directly retrieved from Google Workspace for Education via HTTPS (the same encryption standard you use to access Google Workspace For Education).\u00a0<\/span><\/p>

For the security and integrity of the information we process, data of different clients is safe and separated from each other using a multi-tenant approach.<\/span><\/p>

At GAT Labs, we utilize various countermeasures and safeguards including but not limited to encryption, firewalls, and password protection, MFA when data is stored or transferred.<\/span><\/p>

We use a combination of technical and administrative controls to ensure the highest standards of safety. All the controls, policies, and procedures can be reviewed on the <\/span>GAT Labs Trust Report<\/span><\/a> after prior authorization by our DPO team.<\/span><\/p>

Our employees and contractors must enter into a confidentiality agreement with us, and complete privacy and data security training within the first 30 days of employment. Their access to information must be authorized and is controlled regularly. Their access rights are limited based on the “principle of least privilege” related to the position for which they were employed.<\/span><\/p>

We conduct regular security audits, internal vulnerability assessments, and external and internal penetration tests to ensure the highest possible level of security of processed information.<\/span><\/p>

As a European company, we are <\/span>GDPR compliant<\/span><\/a>, and <\/span>SOC 2 Type 2 certified<\/span><\/a> organization that adheres to these standards. Further, because we provide K-12 school services, our information collection, use, retention, and disclosure practices and procedures comply with the Family Educational Rights and Privacy Act (<\/span>FERPA<\/b>) and the Children’s Online Privacy Protection Act (<\/span>COPPA<\/b>).<\/span><\/p>

How we assist with protecting your students\u2019 data and help to embrace healthy digital behavior<\/b><\/p>

GAT Labs is committed to protecting student information and ensuring it is kept as secure as possible and provides schools with available tools that can be used to promote healthy digital behaviours. We enable schools and districts to use the protective features of GAT Labs products to shield students so they can be safe and remain responsible in the digital environment.<\/span><\/p>

With GAT Shield Alert Rules and Site Access Control features, we enable schools to monitor and control students’ online activity, helping them comply with many regulations including but not limited to the <\/span>Children’s Internet and Privacy Act (CIPA)<\/span><\/a>.<\/span><\/p>

Your rights to control your data collection<\/b><\/p>

You own and have rights to control student data. GAT Labs does not interfere with schools’ control over their data and only supports them in auditing, managing, and securing the cloud environment by providing relevant tools and support needed<\/span><\/i><\/b><\/p>