Chapter 20 / 22
Privacy, your data and the mobile app
Who processes your data and why
The data controller is UACEG (Sofia), the project coordinator. DISKORDIA Ltd. operates the platform technically as a processor, only on UACEG's instructions. The platform processes:
- Account data – name, e-mail, institution, language, country;
- Learning data – activity and progress, submissions, grades and feedback, forum posts, competency ratings and badges;
- Technical logs – IP address, time of access, browser, actions on the platform (kept 12 months);
- Surveys – evaluation surveys are anonymous and not linked to your account.
Your university sees the data of its own students; teachers see the data of participants in their courses. Only aggregated, anonymised statistics are reported to the Erasmus+ National Agency. Data are not sold or used for advertising, and only essential session cookies are used. Account and learning data are kept until you delete your account, at the latest 12 months after the end of the project. The full details are in the Privacy notice (footer link).
The platform is hosted in the EU. The only transfer outside the EU/EEA is access of the University of Niš to the data of its own students and staff; it is based on the partnership agreement with standard contractual clauses, because there is no EU adequacy decision for Serbia.
Your policies and consents
- Open avatar menu › Profile.
- In the section Privacy and policies click Policies and agreements.
- You see the policies you have accepted (Privacy notice, Terms of use), the version and the date of acceptance. Click a policy to read the full text.
When a new version of a policy is published, you are asked to accept it at your next login.
Data requests: export or deletion
Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. On the platform you can make the most common requests yourself:
- Open Profile › Privacy and policies › Data requests.
- Click New request.
- Under Type choose:
- Export all of my personal data – you receive a ZIP file with your data (profile, posts, submissions, grades …) in a machine-readable form;
- Delete all of my personal data – your account and data are deleted.
- Optionally write a comment in Comments and click Save changes.
- The request is shown with its status (for example Awaiting approval, Approved, Complete). The privacy officer processes it – at the latest within one month. You receive a notification; an export can then be downloaded from the same page for a limited time.
The shortcut Delete my account in the same section creates a deletion request directly.
Note: Deletion is final. Before requesting it, download your submissions and badges and make an export. Some data may be kept longer where the university is legally obliged (for example official grade records) – the privacy officer will inform you.
Contacting the data protection officer
In Privacy and policies click Contact the privacy officer, write your question and send it. The link Data retention summary shows how long which kind of data is kept. You also have the right to complain to the Bulgarian Commission for Personal Data Protection or the supervisory authority of your country.
Protecting your own account
- Use a strong, unique password and never share it (the terms of use forbid sharing accounts).
- Log out on shared computers.
- In Profile check Browser sessions (if shown) and log out sessions you do not recognise; change the password if in doubt.
- Do not publish other people's personal data in forums, wikis or submissions.
The Moodle mobile app
You can use the platform on your phone in two ways:
- In the mobile browser – the CloudLearnHub design adapts to small screens; all functions are available.
- In the free Moodle app (Android and iOS, publisher Moodle Pty Ltd) – with offline access to downloaded materials and push notifications.
- Install Moodle from Google Play or the App Store (the footer link Moodle app leads there).
- Open the app and enter the address of the platform (the same address you use in the browser), or scan the QR code shown in your profile (if available).
- Log in with your username and password and accept the policies if asked.
- In Preferences › Notification preferences switch on the Mobile channel for the notifications you want on your phone.
Note: The app can connect only when the platform runs on a public HTTPS address and the administrator has enabled mobile access. During the pilot phase, when the platform runs on a temporary or local address, the app may not work – then use the mobile browser. Some features (for example the CloudLearnHub display modes or H5P content types) may look different in the app.