Privacy policy for educational institution can be found in this document below.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

PRINCIPLES OF PERSONAL DATA PROTECTION
(for the user - consumer, in accordance with Article 13 of the GDPR)

1. Who is the data controller?
   The company Geniuso , s. r. o., Rudohorská 33, 974 11 Banská Bystrica, Company ID: 43969721
   E-mail: app.support@geniuso.sk
   ( hereinafter referred to as " Geniuso " or "we")
2. What data do we process?

• When registering: User's email address and password.
• In Personal Profiles: nickname and chosen avatar .
• Technical data: IP address, device type, operating system, time of use, activity in the application.

3. For what purposes and on what legal basis do we process data?

• Performance of the contract: providing access to the application, activating the subscription, managing the account (Article 6(1)(b) GDPR).
• Legitimate interest: ensuring the functionality of the application, improving services, protection against misuse (Article 6(1)(f) GDPR).
• Consent: sending marketing communications (Article 6(1)(a) GDPR – only if the User gives consent).

4. How long do we keep data?

• For the duration of the User's Personal Account.
• After account cancellation, the data will be deleted or anonymized within 12 months at the latest.

5. To whom do we provide data?

• Our internal employees (with a duty of confidentiality),
• Technical suppliers (e.g. hosting provider : Contabo GmbH , Germany),
• All processing takes place exclusively within the EU.

6. What are your rights?

You have the right to:

• to access personal data,
• to correct incorrect data,
• to delete (if no longer needed),
• to restrict processing,
• for data transmission,
• object to processing based on legitimate interest,
• withdraw consent to processing (if the legal basis is consent).

You can exercise these rights by contacting us at app.support@geniuso.sk .

7. Use of cookies and similar technologies

The application may use cookies or similar technologies solely for the purpose of:

• ensuring the technical functioning of the application (e.g. maintaining the session after logging in, language settings),
• improving the user experience within the basic functions of the application.

These cookies are essential, do not contain personal data and do not require consent. For this reason, no additional cookie notifications are displayed when entering the application .

8. Data security

We use appropriate technical and organizational measures to ensure the confidentiality and integrity of data (e.g. password encryption, secure communication, access restriction).

9. Contact the supervisory authority

If you believe that data processing is in violation of the law, you can file a complaint with:

Personal Data Protection Office of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27https://dataprotection.gov.sk

10. Validity of the document

This Policy is valid from 23. 10. 2025 and may be updated if the processing method or legislation changes.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

PRINCIPLES OF PERSONAL DATA PROTECTION
(pursuant to Articles 13 and 14 of the GDPR)

For an educational institution:

1. INTRODUCTION

This Privacy Policy (hereinafter referred to as the "Policy") describes what personal data Geniuso , sro, Company ID: 43969721, with its registered office at Rudohorská 33, 974 11 Banská Bystrica (hereinafter referred to as the "Controller" or "we") processes, for what purposes, to what extent, for how long and what rights the data subject has. Privacy is important to us and we comply with all relevant legal regulations, in particular Regulation (EU) 2016/679 (GDPR).

2. WHO PROCESSES YOUR DATA?

• Operator: Geniuso , sro, Company ID: 43969721, Rudohorská 33, 974 11 Banská Bystrica, Slovakia
• Contact email: support@geniuso.sk
• Responsible person: Not designated as it is not required by law. However, if necessary, you can contact us via the email above.

3. WHAT PERSONAL DATA DO WE PROCESS AND ON WHAT LEGAL BASIS?

3.1. Contact details (e.g. school principal): name, surname, work email, telephone, name and address of the institution

• Legal basis: Performance of the contract (Article 6(1)(b) GDPR) and legitimate interest (communication, Article 6(1)(f) GDPR).

3.2. Data of teachers and students: we process it as an intermediary on behalf of the school (see Article 28 GDPR).

• Legal basis: determined by the school as the controller. Usually it is the performance of a task in the public interest or the consent of a legal guardian.

3.3. Technical data: IP address, device type, browser, access time, application usage data.

• Legal basis: Legitimate interest (functionality analysis, provision of services).

3.4. Marketing: email for sending news or feedback.

• Legal basis: Consent of the data subject (Article 6(1)(a) GDPR).

4. FOR WHAT PURPOSES DO WE USE DATA?

• providing access to the Geniuso application ,
• management of registrations and user accounts,
• communication with schools and teachers,
• safe and personalized use of the application,
• improving services and user experience,
• processing requests and technical support,
• marketing (only with consent).

5. WHO HAS ACCESS TO THE DATA?

• Internal employees of Geniuso , who are bound by confidentiality,
• Hosting subcontractor : Contabo GmbH (Germany),
• Or other suppliers (e.g. IT support) who are bound by a data processing contract.

6. WHERE AND HOW LONG DO WE KEEP DATA?

• The data is stored on servers within the EU.
• We store contact person data for the duration of the contract and for a maximum of 1 month after its termination.
• We retain application usage data and technical data in accordance with the set purposes (e.g. 6 months for logs).

7. WHAT RIGHTS DO YOU HAVE?

You have the right to:

• to access your data,
• to correct inaccurate data,
• to delete (if no longer needed),
• to restrict processing,
• on data portability,
• object to processing based on legitimate interest,
• withdraw consent (if the legal basis is consent).

You can exercise your rights by contacting us at app.support@geniuso.sk . You also have the right to file a complaint with the Slovak Personal Data Protection Authority.

8. DATA SECURITY

We take technical and organizational measures to ensure the confidentiality, integrity and availability of data (encryption, access rights, secure servers).

9. POLICY UPDATE

We may update this Policy if there are changes to our processing activities or legal regulations. We will notify you of any material changes.

Valid from: 23.10.2025