Verification data

1. Why we verify

The teacher platform shows aggregate results for a specific school and lets you confirm that the QR codes have been put up. So that this information cannot be seen by anyone who simply chooses another school, we verify that the account belongs to a teacher at the chosen school. The legal basis is our legitimate interests in protecting the results of schools and their students (Article 6(1)(f) GDPR). The controller is Arwell Works s.r.o. (see the Account privacy notice).

2. What data we use for verification

• the e-mail address to which we send your sign-in code, and its domain (the part after "@");
• the school you choose;
• the first name and the subjects you teach that you provide.

We do not ask for your surname, personal identification number or identity document, nor do we obtain data from social networks or other sources; the only exception is asking your school during manual verification (section 4).

3. Automatic verification

Your account is verified automatically only if both of the following apply:

1. the domain of your e-mail address is on record as the school domain of the chosen school, and only of that one school; and
2. by using the sign-in code, you have shown that you have access to that mailbox.

We record school domains from earlier manual verifications (see section 4); our staff may also add them based on publicly available information about the school, such as its website. Domains of public e-mail services (e.g. gmail.com, seznam.cz, email.cz) do not identify a school, so we do not accept teacher registrations with them. If your school does not have its own e-mail domain, write to us at privacy@arwell.works.

4. Manual verification

If automatic verification cannot be used (the domain is not on record for the school, or several schools share it), a person reviews your registration: an authorised member of Arwell staff or an authorised member of the campaign organiser's staff in your country, acting for Arwell as a processor. They see your first name, e-mail address, domain, school and subjects. They may check whether the domain or address matches the school, or contact the school.

We will tell you the result by e-mail. When approving, we may remember the domain as the school domain of that school, so that other teachers from the same school are verified automatically. We never remember a domain that belongs to a public e-mail service.

A rejection is always assessed by a person, never by an automated process alone. We keep the reason for rejection and the record of who decided for 30 days. You can object to the decision at privacy@arwell.works; where possible, a member of staff other than the one who decided will review it.

5. Audit record

Each decision creates an audit record: the internal identifier of your account, who decided and when, what was decided and whether the domain was remembered. It does not contain your e-mail address, name or the reason for rejection. We keep it for 3 years on the basis of our legitimate interest in being able to show that verification is carried out properly (Article 6(1)(f) GDPR).

6. Changing your e-mail address

Verification is tied to the domain with which you were verified. If you later change your e-mail to an address on a different domain, access to the school's results is suspended until you are verified again.

7. Your rights

The rights described in the Account privacy notice apply, including the right to object to verification. Without verification, however, we cannot give you access to the school's results.