Student and Parent Notice (Annex C)

How to use this template

1. What it is. The School must inform its Students, and the parents or guardians of Students under 18, before inviting them to certifyboost (clause 17.3 of the School Agreement; Articles 13 and 14 GDPR). This template covers the School's part and includes the essence of the joint-controller arrangement (Annex B, clause 11). ntagks's own processing is explained in its Privacy Policy, which the notice links to.
2. Fill in everything in [square brackets]. Where the template offers options, keep the one that applies and delete the others. Delete any section note in italics.
3. Check it. The School is the controller for its part and is responsible for the final text. Have it checked by the School's data protection officer or adviser where it has one. ntagks provides this template as a convenience; using it is not a contractual obligation (clause 3.1 of the School Agreement).
4. Send it to each Student and, for a Student under 18, to their parents or guardians, before the Student is invited, in a language they understand. Re-send it if something important changes, for example if the School starts using certifyboost for a new purpose.
5. Keep a record of the version sent, to whom and when.

In short

• [School name] uses certifyboost, an online platform for preparing for English exams, [in our [course name] classes / as optional practice outside class].
• You use it with your own certifyboost account. We pay for it, so you get full access at no cost while you are our student.
• Your teachers can see part of your progress: your progress on the work they set, the results of mock exams they set, and your weekly XP in your class. They never see your essays, your recordings or the AI's comments on your work, unless you ask them to review a score.
• Some scores come from an AI system. They are practice estimates, not grades, and we do not use them to grade you or make decisions about you.
• You must be at least 15 (16 in some countries) to take part.
• You can use your data protection rights with us or with certifyboost. The easiest way is to write to hello@certifyboost.com.

1. What certifyboost is

certifyboost is an online platform for preparing for English certification exams from level B1 to C2. It offers mock exams, video courses, practice exercises, daily challenges, flashcards, feedback from an AI system on writing and speaking, and a speaking practice conversation with an AI examiner (the "Live Interview").

certifyboost is run by ntagks, a business based in Greece. It is an independent preparation platform and is not connected with any examination body.

2. Who is responsible for your data

[School name], [address], [e-mail], [phone], is responsible for using certifyboost in our classes.

Data protection officer: [name and contact details] / [We have not appointed a data protection officer. For questions about your data, contact [name or role] at [e-mail].]

ntagks (certifyboost), Pavlou Mela 39, Triadi, 57001 Thermi, Greece, hello@certifyboost.com, runs the platform. ntagks has three roles:

• it keeps our class lists, invitations and assignments for us and on our instructions (it is our "processor", under a data processing agreement);
• it is responsible on its own for your personal certifyboost account: your learning, your answers, the AI scoring and your XP (see its Privacy Policy);
• it is responsible together with us for what our teachers can see of your progress (we are "joint controllers": see section 12).

3. Why we use certifyboost

We use certifyboost so that you can practise for your exam with realistic material, and so that your teachers can see what you have done and decide what to work on next. [Add any other purpose, for example: "to give you speaking practice with Live Interview minutes".]

4. How it works for you

1. We invite you by e-mail at [the address you gave us when you enrolled / your school e-mail address].
2. You create your own certifyboost account with that e-mail address, or, if you already have an account with it, you accept our invitation in the app. The account is yours. certifyboost's Terms of Service and Privacy Policy apply to it.
3. While you are our student, you have certifyboost Premium at no cost: every mock exam, course and practice topic, and a monthly allowance of AI writing and speaking checks.
4. If you are under 18, certifyboost asks for your own consent to the use of your data when you sign up. In Greece you can give it from the age of 15. You never have to pay anything. [If our own rules or the law require permission from your parents for this activity, explain here how we ask for it.]
5. When you leave our school or course, we remove you from our class on certifyboost. Your account stays yours, as a free account, unless you delete it.

5. Who can take part

You must be at least 15 years old, or 16 if you live in Germany, the Netherlands, Ireland, Poland, Romania, Luxembourg, Hungary, Slovakia, Croatia or Liechtenstein. certifyboost checks your age when you create your account. We do not invite younger students. [Describe what younger students do instead.]

6. What your teachers can see, and what they cannot

The account owners of [School name] on certifyboost can see the following for all classes, and your teachers for the classes they teach:

Your classmates see you in the class ranking only under a random two-word name (for example "Blue Dog"), never your real name.

[Note for the School: update this notice if certifyboost changes what it shows; certifyboost tells the School 30 days before it shows more (Annex B, clause 12.2).]

7. AI scores are practice estimates, not grades

Some scores on certifyboost, for essays, speaking answers and mock exams that include them, are produced by an AI system (OpenAI models applying a scoring guide written for each exam level). Speaking is scored from a transcript of your recording.

• AI scores can be wrong. They are practice estimates, not official exam results and not school grades.
• We do not use AI scores for your grades, reports, class placement, admission or any other decision about you. Our teachers make those decisions using their own assessment.
• You can ask your teachers to review any AI writing or speaking score with the "Ask your teacher to review" button under the score. For that one score, they see your essay or recordings (or Live Interview transcript), the AI score and its feedback, and answer you in certifyboost. certifyboost does not review scores itself.
• Neither we nor certifyboost make decisions about you based only on automated processing. certifyboost uses your scores to show your progress and suggest what to practise next (Privacy Policy §3).

8. Our legal basis

[Keep the one that applies and delete the others. Do not rely on consent: see the note at JC-7 in Annex B.]

• [Our contract with you, or with your parents, for your lessons (Article 6(1)(b) GDPR).]
• [Our task in the public interest as a school, under [name of the law] (Article 6(1)(e) GDPR).]
• [Our legitimate interest in organising teaching and helping our students practise effectively (Article 6(1)(f) GDPR). You can object to this at any time (section 11).]

Do you have to take part? [Using certifyboost is part of the course. If you do not want to create a certifyboost account, tell [contact] and we will give you [alternative practice material], with no disadvantage to you.] / [Using certifyboost is optional. If you do not use it, you will not be at any disadvantage.]

9. What data we use and where it comes from

• From you or your enrolment records: your name and the e-mail address we invite.
• Created by our teachers: your class, the work we assign and its due dates.
• From your certifyboost account: the information in section 6 that teachers can see. certifyboost provides it from your account; it is not copied into our records.

10. Who receives your data, and how long we keep it

Recipients.

• ntagks (certifyboost), and the providers it uses to run the platform: hosting and database in the EU, e-mail delivery and security services. They are listed in certifyboost's Privacy Policy §4.
• Within [School name]: only the teachers and staff who teach you or manage our certifyboost account.
• [Any other recipient, or "No one else."] We do not sell your data.

Transfers outside the EU. Some of certifyboost's providers are in the United States or Singapore. Those transfers are protected by the European Commission's adequacy decision for the EU-US Data Privacy Framework or by the Standard Contractual Clauses (Privacy Policy §5). You can ask certifyboost for a copy of these safeguards.

How long.

• Our class list, invitations and assignments on certifyboost: while you are our student and we use certifyboost. certifyboost deletes them at the latest 30 days after our licence ends.
• Notes or copies of your progress that our teachers keep outside certifyboost: [period, for example "until the end of the school year"].
• Your certifyboost account: until you delete it (see certifyboost's Privacy Policy §10). Leaving our school does not delete it.

11. Your rights

You have the right to:

• see your data and get a copy;
• correct data that is wrong;
• have your data deleted;
• restrict how it is used;
• object to its use where we rely on a public task or our legitimate interest;
• take your data with you in a common format, where the law gives this right;
• complain to a data protection authority.

How. You can use your rights with us or with certifyboost. certifyboost is the contact point for what teachers can see: hello@certifyboost.com. If you write to us at [school e-mail], we answer for our part and pass on to certifyboost what it needs to handle. We answer within one month.

What you can do yourself in certifyboost:

• hide yourself from all rankings: Settings › Account;
• delete your account: Settings › Account;
• ask your teachers to review an AI score: the "Ask your teacher to review" button under the score.

To stop using certifyboost with us, tell [teacher or contact] or certifyboost, and you will be removed from our class. Your teachers then no longer see your progress.

Complaints. You can complain to the Hellenic Data Protection Authority, Kifisias 1-3, 11523 Athens, www.dpa.gr, [or to [name of the authority in the School's country, address, website]], or to the data protection authority of the EU country where you live.

Parents and guardians. You can contact us or certifyboost with questions about your child's data. Your child creates and controls their own certifyboost account. [Explain any involvement of parents that the School's rules or national law require.]

12. Your school and certifyboost: who is responsible for what

When your school uses certifyboost, your teachers can see part of your progress from your own certifyboost account: your name, your progress on the work they assign, the status, score and pass/fail result of assigned mock exams (scores marked "AI" are practice estimates, not grades), and your weekly XP in your class. The school's account owners also see the Live Interview minutes the school gave you and how many of them are left. Teachers never see your essays, your recordings or your AI feedback, unless you ask them to review a score, and your classmates see you only under a random two-word name. Your school and certifyboost (ntagks, Greece) are responsible for this together, as "joint controllers" (Article 26 GDPR). Your school decides to use certifyboost, must have a legal reason for it, must tell you and your parents about it, and may only invite students who are old enough. certifyboost runs the platform, keeps it secure, decides what teachers can see and handles requests about the data in it. You can use your data protection rights with either of us. The easiest way is to write to hello@certifyboost.com; if you contact your school, it passes your request on where needed.

13. More information

• certifyboost Privacy Policy, especially section 6, "Students in a school classroom": https://www.certifyboost.com/privacy (English) · https://www.certifyboost.com/el/privacy (Greek)
• certifyboost Terms of Service: https://www.certifyboost.com/terms
• Questions about this notice: [name or role], [e-mail], [phone]