Data processing agreement

Last updated: 14-10-2026

This data processing agreement belongs to every account and every subscription of Interactive Lessons Live. It applies between the teacher or school using the service (controller) and Interactive Lessons, Willem Kloospad 2 , 2624 VK, Delft (KvK 98059971) (processor). Does your school need a signed copy or its own model? Email contact@interactivelessons.nl.

1. Subject and duration

The processor processes personal data only to provide the service: online lessons with class codes, links and the Math Explorer applets. The agreement runs as long as the account exists.

2. Which data

Of pupils: the name or nickname the pupil types, names the teacher types for personal links, the IP address (in technical log files) and what appears on the whiteboard and in the chat during the lesson.
Of teachers: name, email address, school and lesson data.
No special categories of personal data are asked for. Lessons are not recorded.

3. Arrangements about the processing

The processor processes the data only on the controller's instructions and not for its own purposes.
Everybody at the processor with access to the data is bound to confidentiality.
The data is processed within the European Economic Area.

4. Security

The processor takes appropriate measures, including: encrypted connections (TLS), passwords only as a hash, server access for administrators only, blocking of guessing attempts, no pupil accounts, no recordings, and keeping data as briefly as possible (see the privacy policy).

5. Sub-processors

The processor uses: Hetzner Online GmbH (hosting, data centres in the EU). For teachers' payments: Mollie B.V. The processor announces new sub-processors in advance; the controller may object and end the account.

6. Data breaches

In case of a security breach that may affect personal data, the processor informs the controller without undue delay and at the latest within 48 hours of discovery, with the information needed for a possible report to the supervisory authority.

7. Rights of data subjects

The processor helps the controller with requests from pupils or parents (access, correction, deletion). Teachers can also delete personal links, classes and their account themselves.

8. End

When the account is deleted, classes, links and lesson data are deleted at once. Data on the lesson server and in log files are erased within the periods of the privacy policy. Invoices are kept as long as the law requires.

9. Audit

On request the processor provides the information needed to check that these arrangements are kept.