Who is the data controller when registration is done by a school?
The school. When a school or organization registers its students, that organization is the data controller and Kluppy acts as the data processor (art. 28 of the GDPR), under the data processing agreement signed with them.
What this means in practice
| How the account was created | Controller | Kluppy’s role |
|---|---|---|
| You register yourself or create a family account | Kluppy | Controller |
| Your school or company registers you | The school or organization | Processor |
| You sign up for an extracurricular activity at the school | The school | Processor |
To exercise your rights: if your account is managed by a school, the request should be addressed to the school, as they are the ones who decide. If you write to us, we will forward you to the appropriate party and provide them with any assistance they need. This is not an excuse to avoid helping you: it is the division of roles established by the regulation.