When you use our services, register your interest in our services and visit our web page at https://dfavo.com, we process your personal data.
Dfavo AS is the controller for the processing of your personal data. Our contact information is:
Address: Oslo Science Park, Gaustadalléen 210349 Oslo, Norway
Email: [email protected]
Organization nr.: 925 402 168
If you have any questions concerning the processing of your personal data or your privacy, you may contact us using this information.
We collect and use your personal data for different purposes, depending on who you are and your interaction with us.
We collect personal data of users of our website, recruiters, and students that either use or wishes to use ourservices. If you are a student and you have been recruited by a third party using the Dfavo Platform, we receiveyour personal data from that third party.
In sections 1.1 to 1.4 we will explain how and why we process your personal data based on who you are.
If your sign up as a Recruiter and use our services, this table explain how and why we process your personal data.
If your sign up as a Student and use our services, this table explain how and why we process your personal data.
GDPR Art. 6.1 a) Explicit consent: when we collect a copy of your passport, this is based on yourexplicit consent.
GDPR Art. 6.1 a) Consent.
If you are a user of our website or register your interest in our services at our website, this table explain how andwhy we process your personal data.
GDPR Art 6.1 a) when required under applicable law marketing e-mail will be based on your consent.
If you are a student and you have been recruited by a third party (Recruiter) using the Dfavo Platform, this tableexplains how and why we receive your personal data:
GDPR Art. 6.1 a) Explicit consent: when we collect a copy of your passport, this is based on yourexplicit consent
If you are a student recruited by Recruiters, Dfavo AS is a joint controller with the Recruiter when Dfavo processpersonal data of a Student for the purpose of fulfilling the agreement between the Recruiter and Dfavo when Dfavoprocesses personal data of a Student for the purpose of fulfilling Dfavo’s agreement with the ParticipatingEducational Institutions.
In an agreement on joint controllership pursuant to Article 26 GDPR, Dfavo and Recruiter have determined how therespective tasks and responsibilities in the processing of personal data are structured and who fulfills which dataprotection obligations. This includes securing the appropriate level of security, ensuring transparency about theprocessing, how potential data protection incidents can be monitored. This also includes ensuring that reporting andnotification obligations are fulfilled.
You may contact Dfavo in accordance with the aforementioned agreement pursuant to Article 26 GDPR in order toexercise your rights as a data subject.
We do not share your personal information with third parties unless we have a legal basis for transferring the data.This may be an agreement with you, or a legal obligation prescribed by law.
Dfavo AS uses processors to collect, store and analyze your personal data. A processor is a separate third party thatacts on behalf of us. We have entered into an agreement with these third parties to ensure that your rights areprotected and that the processing of your personal data is compliant with relevant data protection laws.
We share information with the following parties (*):
(*): Data processors
We may access your personal data or transfer your personal data to a country outside the EU/EEA.
We transfer data to our supplier Dfavo Study Portal Private Limited located in India. We transfer this data based on theStandard Contractual Clauses adopted by the Commission, and we have implemented appropriate or suitable safeguards toprotect your rights and interests.
To obtain further information about the SCC applied to our transfer the SCC is available upon request.
Dfavo Study Portal Limited has engaged Digital Ocean located in USA as sub-processor relating to website hosting.Digital Oceans data processing addendum (DPA) with SCC is available: DPA with SCC.
This means that we will delete or anonymize your personal data when the legal basis for the processing of that data isconsent and you withdraw your consent. We will delete or anonymize personal data that was collected on the grounds ofour legitimate interest when we no longer pursue those interest. If the personal data was collected because it wasnecessary to fulfil a contract with you, we will delete or anonymize that data if the contract is terminated or all ourobligations under the contract is fulfilled.
If it is not possible to delete or anonymize your personal data (for example, because your personal information has beenstored in backup archives), we will securely store and isolate your personal data until deletion is possible.
No purpose in this policy will require us keeping your personal information for longer than 1 year past the terminationof the user’s account.
When we process your personal data, you are given the status as a data subject. This gives you the right to:
You may find more information about these rights at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/my-rights/what-are-my-rights_en
To exercise your rights, you may contact us using the details provided above. We will answer your request as soon aspossible, and no later than 30 days.
If you want to opt out of our email marketing or unsubscribe from our marketing email list, you may at any time click onthe unsubscribe link in the emails we send, change your preferences in your account settings through our website loginor contact us using the details provided above.
If we are relying on your consent to process your personal data, you have the right to withdraw your consent at anytime. Please note that this will not affect the lawfulness of the processing before the withdrawal.
If you believe we are unlawfully processing your personal data, you may lodge a complaint to your local supervisoryauthority.
You may find more information about your local supervisory authority and how to lodge a complaint athttps://edpb.europa.eu/about-edpb/about-edpb/members_en.
We will update this policy if our services change or if it is necessary to stay compliant with relevant data protectionlaws.
The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon asit is accessible.
Dfavo, a Norway based EdTech, a unique platform to empower the international student recruitment industry by providing tools, expertise, premium support and connecting educational institutions with vetted recruitment partners and students in leading and emerging source countries.
Copyright © 2022 Dfavo.com. All rights reserved