InAcademia helps businesses to protect revenue, by increasing confidence that a customer claiming to be eligible for niche discounts and services is actually entitled to access them. InAcademia uses authoritative data sources hosted by academic institutions to provide real-time and trustworthy evidence of academic affiliation, by leveraging the eduGAIN Interfederation. This privacy notice is applicable to the processing of personal data in the context of subscribing to the InAcademia service via WooCommerce.
Data Controller
GÉANT VERENIGING (Association) registered with the Chamber of Commerce in Amsterdam with registration number 40535155 with its registered seat at Hoekenrode 3, 1102 BR, Amsterdam, The Netherlands (GÉANT) is the controller of your data.
Please note that in order to subscribe to the InAcademia Service via WooCommerce, you will need to have an account at WooCommerce. The WooCommerce privacy notice applies to your interaction with WooCommerce and is available at https://wordpress.org/about/privacy/.
Data Protection Officer: The appointed Data Protection Officer at GÉANT can be contacted at gdpr@geant.org.
Personal Data
What personal data will be processed in order to process your InAcademia service subscription?
GÉANT will process your email address, phone number (if you decide to provide it), billing address, first and last name and IP address. We will also need you to provide a VAT number if your company is VAT registered.
Additionally we might contact you by email in direct relation to your use of the service either for the purposes of rectifying an issue or for gauging your satisfaction relating to service provision or for service improvements.
The legal basis for processing is:
- processing is necessary for the performance of our contract with you. If you are an individual subscribing to the service you are the party to the contract;
- GÉANT has a legitimate interest to process your personal data if you are providing your data as an employee/contractor of business that subscribes to the InAcademia service; data processing is necessary in order to manage your subscription to the InAcademia service, what is not infringing your rights or freedoms as well as for establishment, exercise or defence of legal claims.
The personal data is necessary in order to proceed with your subscription order, to manage the subscription during the duration of your contract with GÉANT and/or to carry out requests for support made by you: if you are unwilling or unable to provide the personal data, we will not be able to proceed with your subscription order.
Your rights
You have the following rights regarding your personal data:
- You have the right to request access to your data.
- You have the right to ask us to rectify your personal data.
- You have the right to ask us to erase your personal information.
- You have the right to object to your data being processed by us.
You also have the right to inquire what personal data we hold about you, and to present a complaint about our personal data processing activities if you feel your personal data is not being managed as described here to the relevant Supervisory Authority:
- In the Netherlands: (Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl)
- In the UK: Information Commissioner’s Office: https://ico.org.uk
Security
GÉANT takes the confidentiality, integrity and availability of your personal data very seriously. We take appropriate security precautions to protect your personal data from loss, misuse or unauthorised access, disclosure, alteration and destruction. When you access a GÉANT service, GÉANT will provide adequate security controls to keep your personal data safe in accordance with the classification of the personal data we have collected from you.
Payments
GÉANT uses the WooPayments[1] extension for WooCommerce to ensure that you payment is processed securely and that GÉANT has no visibility of your payment details. Woo Payments is built in partnership with Stripe[2] for PCI-compliant credit card processing. Stripe is Data Controller for your payment details: https://stripe.com/nl/legal/privacy-center#which-stripe-entities-are-involved.
| Personal data retention: | |
| Retain inactive accounts | In order to support seasonal business, inactive accounts will be retained for 12 months. |
| Retain pending orders | To allow time for Customers to complete any internal approval procedures, pending (unpaid) orders will be retained for 14 days.During this time we may choose to contact Customers to offer support in processing their subscription. |
| Retain failed orders | In order to allow sufficient time for either 1) the failed payment method to be replaced by an alternative, or 2) the extension to be removed from the Merchant’s checkout procedure, failed orders will be retained for14 days. |
| Retain cancelled orders | In order to provide support to Customers that have cancelled their order in error, cancelled orders will be retained for 14 days. |
| Personal data retention: Retain completed orders | In order to provide support to customers operating seasonal businesses, personal data relating to completed orders will be retained for 12 months. |
| Personal data retention: Retain ended subscriptions | In order to provide support to customers operating seasonal businesses that wish to reactive their subscription, personal data relating to ended subscriptions will be retained for 12 months. |
Version
This privacy notice was last reviewed on 21/12/2023.
Storage
Data will be stored in the Netherlands and accessed in the UK (on the basis of the UK adequacy decision). WooCommerce is hosted on WPengine servers in Ireland, UK and Germany.
More about InAcademia:
Please note that if you want to know more about processing of personal data while using InAcademia service, check: https://inacademia.org/privacy-statement/