1. Educational Scope & Regulatory Framework
This Privacy Policy applies strictly to the Vera Edu platform (accessible via web and progressive mobile applications), including the Student Portal, Teacher Dashboard, Family/Parent Portal, and Institutional Administration Console.
Vera Edu is engineered to comply with the European Union General Data Protection Regulation (EU GDPR 2016/679), the Italian Personal Data Protection Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018), and international educational confidentiality guidelines (including FERPA/COPPA principles where applicable).
2. School as Data Controller & Vera Edu as Data Processor
Each institution signs a dedicated Data Processing Agreement (DPA) with VeraPiù prior to deploying class rosters and staff credentials.
3. Student & Minor Data Safeguards
We recognize the exceptional sensitivity of processing data regarding underage students. We enforce strict data minimization:
- Identity Information: Student full name, institutional email, assigned class roster, and unique school identification code.
- Parent / Guardian Association: Contact information of parents/guardians directly verified and linked by the school administration.
- Parental Consent (GDPR Art. 8): Subscribing schools manage and verify parental authorizations for minor access in accordance with national education regulations.
4. Academic Records & Digital Registro di Classe
Data entered into the Digital Registro di Classe constitutes official institutional records:
- Evaluations & Grades: Formative and summative marks, teacher comments, and scrutiny deliberations.
- Attendance & Justifications: Daily absences, late arrivals, early dismissals, and parental digital justifications.
- Disciplinary Notes & Commendations: Behavior marks and official notices issued by authorized teachers.
Every record modification is timestamped and recorded in immutable audit logs to safeguard academic integrity.
5. In-Platform Communications & Circulars
Messages exchanged between teachers, students, and families via Vera Edu internal chats and circular notices are private institutional communications. They are strictly segregated between class groups and verified direct channels.
6. Strict Zero Advertising & Commercial Profiling Guarantee
Vera Edu does NOT display advertising, does NOT build behavioral or commercial student profiles, does NOT sell, rent, or trade student personal records to third parties, and does NOT use student data to train public commercial artificial intelligence models.
7. Sub-processors & EU Data Sovereignty
All educational production databases and backup archives are hosted exclusively within the European Union (Frankfurt, Germany / Milan, Italy regions via certified cloud infrastructure providers Supabase and Vercel with ISO 27001, SOC 2 Type II certifications).
8. Academic Year Retention & Offboarding
Educational records are retained for the duration of the school year contract. At the conclusion of institutional service, the school administration receives complete digital exports, following which tenant databases are permanently purged within 90 days.
9. Parental & Student Rights
Parents and authorized guardians retain full rights to inspect, review, and request correction of their child’s academic records. Because the school is the Data Controller, rights requests should be addressed directly to the school principal or secretariat, who can execute updates via the Vera Edu Admin console.
10. DPO & Institutional Contact
For educational data protection questions or inquiries regarding our institutional Data Processing Agreement:
Vera Edu Data Protection Office: dpo@verapiu.com
Institutional Support: edu@verapiu.com
Parent Company: VeraPiù / KSMM Holding
VeraPiù Legal & Data Protection Office
For formal data subject requests, law enforcement inquiries, or customized Data Processing Addendums (DPA) for your school or enterprise: