At DidactLabs, we believe that protecting your data is fundamental. A key part of this is ensuring you understand and can exercise your rights over your Personal Information as granted by the General Data Protection Regulation (GDPR).

This page explains your rights in plain language and tells you how they apply to your use of DidactLabs.

A crucial aspect of your rights depends on our role. As explained in our Privacy Policy, we act as a Data Controller for Educator account data but as a Data Processor for Student and institutional data, which is controlled by the Educator or their Institution.


Understanding Your Rights

Here are the eight fundamental rights granted to you under GDPR.

1. The Right to Access

You have the right to request a copy of the Personal Information we hold about you.

  • For Schools/Institutions: As the Data Controller for your educators and students, your designated administrator can request access to all Personal Information processed under your institutional account. We will work with them to provide a comprehensive export of this data.
  • For Educators: You can request a copy of your account information (name, email, etc.) and the content you have created. You can also access the submissions and Writing Process Data for any assignment you have created as part of the Service's core functionality.
  • For Students: Because your school or Educator is the Data Controller, you must make your access request directly to them. We will then provide your Educator with the data associated with your submission so they can fulfil your request.

2. The Right to Rectification

You have the right to have inaccurate or incomplete Personal Information corrected.

  • For Schools/Institutions: Your designated administrator can request the correction of any inaccurate data associated with your institution's account, including educator information.
  • For Educators: If your account information is incorrect, you can contact us at privacy@didactlabs.com to have it updated.
  • For Students: The only identifier we collect is a nickname. If you need to correct this or any part of your submission, you should speak with your Educator, who controls the assignment data.

3. The Right to Erasure (The 'Right to be Forgotten')

You have the right to request the deletion of your Personal Information under certain conditions.

  • For Schools/Institutions: Your institution can request the deletion of specific data (e.g., for an educator or student who has left) or the complete erasure of all data associated with your account. We will act upon the instruction of your designated administrator in accordance with our contractual agreement and retention policies.
  • For Educators: You can request the deletion of your account at any time. This will also delete all associated assignments and the Student data within them. As per our retention policy, your account will enter a 60-day grace period for data export before being permanently deleted from our production systems.
  • For Students: Your data is tied to an Educator's assignment. To have your data erased, you must request this from your Educator or school. They can then delete your specific submission or the entire assignment, which will remove your data from our systems.

4. The Right to Restrict Processing

You have the right to request that we temporarily stop processing your Personal Information in certain situations, for example, while we verify its accuracy.

  • For Schools/Institutions: If there is a dispute about the accuracy or lawful processing of data under your account, your administrator can request a temporary restriction on processing. We will comply with this request while the issue is resolved.
  • For Educators: If you believe your data is inaccurate or being processed unlawfully, you can request a restriction. Please contact our DPO to discuss your specific case.
  • For Students: This request must be made to your Educator or school (the Data Controller), who will then coordinate with us.

5. The Right to Data Portability

You have the right to receive your Personal Information in a structured, commonly used, and machine-readable format, and to transfer that data to another service.

  • For Schools/Institutions: As the Data Controller, you have the right to receive all data associated with your subscription in a machine-readable format. Please have your designated administrator contact us to facilitate this data export.
  • For Educators: You can request an export of your account data and the content you have created. Contact us at privacy@didactlabs.com to initiate this process.
  • For Students: Your request for data portability must be directed to your Educator or school. We will work with them to export your submission data in a usable format.

6. The Right to Object

You have the right to object to the processing of your Personal Information when it is based on our "legitimate interests."

  • For Schools/Institutions: The processing of your institution's data is primarily based on the performance of our contract with you. Where we rely on legitimate interests (e.g., for service analytics), your administrator can object to this processing.
  • For Educators: Our Privacy Policy outlines where we rely on legitimate interests (e.g., to improve our Service). You can object to this processing, for example, by opting-out of feedback requests. Objecting to processing that is essential for the core function of the Service may require you to stop using it.
  • For Students: The legal basis for processing your submission is the performance of our contract with your school/Educator. Therefore, the Right to Object is generally not applicable to the core processing of your User Content.

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects on you. We state this clearly in our Privacy Policy: We do not perform this type of activity. While our AI provides analysis of writing, this is a tool to assist the Educator. It does not make automated decisions (like assigning a grade) about any User.

8. The Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority (Supervisory Authority) if you believe we have infringed on your rights. We encourage you to contact our Data Protection Officer first to see if we can resolve your concerns. However, you always have the right to contact your local data protection authority.


How to Exercise Your Rights

  • For Schools/Institutions: Your designated administrator should contact our Data Protection Officer at dpo@didactlabs.com to exercise any of these rights on behalf of your school, educators, or students. We will work directly with them as the primary representative of the Data Controller.

  • For Educators and Website Visitors: To exercise any of your rights, please contact our Data Protection Officer at dpo@didactlabs.com. We will respond to your request in accordance with GDPR requirements.

  • For Students: As your school or Educator is the Data Controller for your work, you must direct all requests to them. We are legally obligated to follow their instructions regarding your data and will provide them with all necessary assistance to help you exercise your rights.

If you have any questions about your rights, please don't hesitate to reach out.

DidactLabs BV
Tabakvest 87 / bus 4610
Antwerp 2000
Belgium