Privacy Policy and Security Measures

1. Introduction

At SMZ Education, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy complies with the EU General Data Protection Regulation (GDPR) 2016/679, the ePrivacy Directive 2002/58/EC (as amended), the UK Data Protection Act 2018, and other applicable data protection laws.

2. Data Controller

Organization: SMZ Education

Contact Email: contact@smzeducation.com | support@smzeducation.com

SMZ Education is the data controller responsible for your personal information collected through our website and services.

3. Legal Basis for Processing

Under GDPR Article 6, we process your personal data based on the following legal grounds:

Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes (e.g., analytics cookies).

Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests in operating and improving our educational services, provided this does not override your fundamental rights and freedoms.

Legal Obligation (Article 6(1)(c)): Where we need to comply with legal or regulatory obligations.

4. Data Collection and Usage

Information You Provide: This includes data you voluntarily submit through contact forms, donation interactions, or when communicating with us via email.

Automatically Collected Data: When you visit our website, we automatically collect certain technical information, including:

• IP address (anonymized where possible under GDPR Article 4(5))
• Browser type and version
• Operating system
• Referring URL and pages visited
• Date and time of access
• Device information

Google Analytics: We use Google Analytics to understand how visitors use our site. This service collects information such as how often users visit, what pages they view, and what sites referred them. Google Analytics uses cookies in accordance with their own privacy policy. This data helps us improve our services under GDPR Article 6(1)(f) - legitimate interests.

Google AdSense: We use Google AdSense to display advertisements. AdSense uses cookies and may collect information about your browsing behavior to serve relevant ads. This processing is based on your consent under GDPR Article 6(1)(a) and ePrivacy Directive Article 5(3). You can manage your ad preferences through Google's Ad Settings.

Google Search Console: We utilize Google Search Console for website performance monitoring and search optimization. This tool does not collect or process personal user data but helps us understand how our site appears in search results.

CPanel Visitor Information: Our web hosting service (CPanel) automatically logs visitor information including IP addresses, access times, and pages viewed. This data is retained for security purposes and server performance monitoring under GDPR Article 6(1)(f) - legitimate interests in protecting our systems.

5. Cookies and Similar Technologies

We use cookies in compliance with the ePrivacy Directive 2002/58/EC (Cookie Law) and GDPR requirements. For detailed information about our cookie usage, please see our Cookie Usage Policy.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share data with:

• Service Providers: Google LLC (Analytics, AdSense, Search Console) and our hosting provider for website functionality and analytics.
• Legal Requirements: When required by law, regulation, legal process, or governmental request under GDPR Article 6(1)(c).
• Protection of Rights: To protect the rights, property, or safety of SMZ Education, our users, or the public under GDPR Article 6(1)(f).

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure such transfers comply with GDPR Chapter V requirements through:

• EU-US Data Privacy Framework for transfers to certified US organizations
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequate safeguards as required under GDPR Article 46

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Cookie consent preferences: 15 minutes (session-based)
• Analytics data: 26 months (Google Analytics default)
• Server logs: 90 days maximum
• Contact form submissions: Until purpose fulfilled or deletion requested

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of Access (Article 15): Request access to your personal data and obtain a copy.

Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17): Request deletion of your personal data under certain circumstances ("right to be forgotten").

Right to Restriction (Article 18): Request restriction of processing your personal data.

Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent (Article 7(3)): Withdraw consent at any time where processing is based on consent.

Right to Lodge a Complaint (Article 77): Lodge a complaint with your local supervisory authority if you believe we have violated your data protection rights.

To exercise any of these rights, please contact us at contact@smzeducation.com. We will respond within one month as required by GDPR Article 12(3).

10. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as required by GDPR Article 32, including:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure
• Access controls and authentication
• Regular security assessments
• Data minimization practices

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent, in compliance with GDPR Article 8. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you, as defined in GDPR Article 22.

13. Changes to This Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact and Complaints

For questions about this Privacy Policy or to exercise your rights, contact us at:

• Email: contact@smzeducation.com or support@smzeducation.com

If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority.