Privacy Policy

For the purposes of this Policy, the following terms are used:

Digital Art School LUMO

We provide online 3D modeling courses for children and teenagers aged 7-17. All classes are conducted individually via video call (Zoom). We are the data controller for the personal data you provide to us. This means we determine the purposes and means of processing your data.

Special Section for Parents and Legal Guardians Our services are specifically designed for children aged 7 to 17. We understand the importance of protecting children's privacy and take the following measures: Parental Consent: - We only collect a child's personal data with consent from a parent or legal guardian - When registering for a course, the parent confirms consent to data processing - Parents can withdraw consent at any time by contacting us What child data we collect: - Child's name (for addressing during lessons) - Age (for program adaptation) - Lesson recordings (with parent's consent) - Student's creative works What child data we DO NOT collect: - Exact home address - School name or class - Photos of the child (except lesson recordings) - Any health data Lesson Recordings: - Lessons may be recorded for the student's review - Recording only occurs with parental consent - Recordings are stored in secure cloud storage - Only the student, parent, and teacher have access to recordings - Recordings are deleted 6 months after course completion Parental Rights: - View all data collected about the child - Request correction of inaccurate data - Request deletion of all child's data - Withdraw consent to data processing - Receive a copy of data in machine-readable format

Parent Data (provided directly): - Contact information (name, email, phone, messenger) - Information about the child (name, age) - Communication history - Payment information (when paying for services) Student Data: - Name (for addressing during lessons) - Age (for program adaptation) - Creative works (3D models, projects) - Lesson recordings (with parent's consent) Data collected automatically: - IP address and approximate location - Device type, browser, and operating system - Website visit data (pages, time) - Cookies (see Cookie Policy)

We process data on the following legal bases under Article 6 GDPR: Consent — Art. 6(1)(a) - Processing children's data (requires parental consent) - Lesson recording - Publishing works in portfolio - Marketing communications Contract Performance — Art. 6(1)(b) - Conducting paid lessons - Scheduling communications - Processing payments Legitimate Interest — Art. 6(1)(f) - Improving educational program - Basic website analytics - Data security Legal Obligations — Art. 6(1)(c) - Tax reporting - Responding to lawful authority requests Important: Under Article 8 GDPR, parental consent is required for processing data of children under 16. We obtain such consent during registration.

Service Providers:

Teachers: Teachers have access to the student's name and age for conducting lessons. All teachers are bound by confidentiality obligations. We NEVER share children's data with: - Advertising networks - Social networks (for targeting) - Third parties for their own purposes - Anyone without parental consent Other recipients (if necessary): - Government authorities (upon lawful request)

Data may be transferred outside the European Economic Area (EEA):

Security Safeguards: - Standard Contractual Clauses (SCCs) approved by the European Commission - Data encryption in transit and at rest - Restricted access to children's data

Upon consent withdrawal: We delete data within 30 days, except for data we are legally required to retain.

Under GDPR, you (and parents on behalf of children) have the following rights:

How to Exercise Rights: - Email: info@digitalartschool.fun - Response time: 30 days - Free of charge For children's data: Parents can exercise any rights on behalf of the child by verifying their identity.

We use cookies and similar technologies. Detailed information is in our Cookie Policy. Cookie Categories:

Important: We do NOT use cookies for targeted advertising to children. You can manage cookies through: - Consent banner on the website - Browser settings

We implement enhanced measures to protect children's data: Technical Measures: - Data encryption in transit (HTTPS/TLS) - Data encryption at rest - Password protection for lesson recording access - Regular backups Organizational Measures: - Data access limited to teachers and administrator only - Confidentiality obligations for all staff - Teacher verification before hiring - Staff training on children's data protection In case of a data breach, we will notify you and supervisory authorities as required by law.

Lesson Conduct Rules: - Lessons are conducted only through a secure platform (Zoom with password) - Lesson link is sent only to the parent - Only the student and teacher are present in the lesson - Parents can attend any lesson at any time - Lesson recording is done only with consent If something goes wrong: If you or your child have any concerns about a lesson or teacher's behavior, immediately contact us at info@digitalartschool.fun.

We may update this Policy. When making changes: - We update the "Last updated" date at the top - For material changes, we notify parents via email - For changes concerning children's data, we request renewed consent We recommend checking this page periodically.

For data protection inquiries, contact us: Digital Art School LUMO

Response Time: 30 days Supervisory Authorities: You can lodge a complaint with a data protection supervisory authority in your country: - Israel: Privacy Protection Authority - EU: list of authorities — https://edpb.europa.eu/about-edpb/about-edpb/members_en