Privacy Policy

In this privacy policy, you will learn what data is collected in connection with the use of the online exercise and examination platform www.istest2.ch, how this data is handled, and what rights you have.

Contact Information

You can contact us at any time via the contact form or by mail at the address provided.

Table of Contents

1. General
2. Applicability
3. Your Data Subject Rights
4. isTest Data Model
   1. Data structure
   2. Data Types
   3. User Types
   4. Data Confidentiality
      1. Access Rights by Data Type
      2. Access Rights by User Type
   5. Contact Form
5. Data Retention and Deletion
   1. As Controllers
   2. As Processors
6. Clons
7. Links
   1. Embedded YouTube Videos
   2. Links to Other Sites
8. Technical and Organizational Security Measures
   1. Server
   2. Technical Measures
   3. Organizational Measures
9. Data Sharing and Transfer to Third Countries
   1. Cookies
10. Changes to the Privacy Policy

General

We process data from various actors: schools, teachers, and learners. The provision and access to the data are exclusively online. The different roles of the actors result in different access possibilities. As we aim to inform as completely and transparently as possible, this declaration is quite extensive.

Applicability

All isTest data are personal data as defined in GDPR 4.1. We process them in accordance with the EU General Data Protection Regulation GDPR and the Swiss Data Protection Act DSG.

Your Data Subject Rights

Where we are the controllers, you can exercise the following rights: information about your data stored with us and its processing (Art. 15 GDPR), correction of incorrect personal data (Art. 16 GDPR), deletion of your data stored with us (Art. 17 GDPR), restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR), objection to the processing of your data with us (Art. 21 GDPR), and data portability if you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR). You also have a right to lodge a complaint.

Where we are only processors, please first contact the controller. This is the user who has applied for a license with us, usually the school.

You can always lodge a complaint with a supervisory authority, such as the competent supervisory authority of your place of residence or the authority responsible for us as the responsible body. In Switzerland, the Federal Data Protection and Information Commissioner (EDÖB) (EDÖB) is responsible for data processing by federal bodies and private individuals. For public schools in Switzerland, the respective cantonal data protection laws apply, and complaints are handled by the cantonal data protection authorities.

isTest Data Model

Data Structure

All isTest data, except for image and sound data, is stored in an SQL database. Image files and sound files are indexed in corresponding tables of the database and are only accessible via their indices. All records in the database are associated with a user (an individual) and a group (usually a school, but it can also be an individual or, for example, a company) via two foreign keys, 'userid' and 'groupid'. Thus, all data belongs to a user and a group. These ownership relationships, together with a rule set explained below, form the basis for access control..

Data Types

Depending on the content, the data can be classified into one of the following types:

• I. Personal Data. Essentially consists of a table with one entry per user. The records consist of: Primary key: a unique number referred to by the foreign key 'userid'. Username: can be arbitrary but must be unique within a group. Password: asymmetrically encrypted. Name, first name: can be a pseudonym, though not recommended as teachers know their students by name. Email address: mandatory only for administrators, optional for all other users. Address data: optional. Technical data: only accessible to isTest. Includes the user type (see 4.3).
• II. Organizational Data. These are time divisions (e.g., start and end of semesters), classes, and courses, as well as user affiliations.
• III. Examination Materials. These are questions and tests. A test is a set of questions that form an exam or exercise.
• IV. Examination Data. These are the answers that students have given to the questions in a test, along with corrections and grades, including grade overviews.
• V. Technical Data. These are data necessary for the functioning of isTest, such as user types (see 4.3), error message texts, or the list of all groups. Additionally, the IP address and browser identifier (user agent) are stored with all website accesses. The provider stores the following data in server logs: Date and time of access, accessed URL, access status/HTTP status code, referrer (if available), data volume transmitted during access, browser identification (browser name and version).

User Types

All isTest users (those with login data) can be classified into one of the following types. The type of a user determines their rights, what they can see, do, and their access rights to the data.

• a. Administrators. Each group (school) has exactly one administrator. Responsible for the addition and update of teachers, students, classes, semesters, and student affiliations.
• b. Teachers. Create questions, group them into collections, create tests, and conduct exams and exercises with these.
• c. Students. Take exams and exercises.
• d. isTest Staff. Responsible for the operation of isTest, such as extending licenses, resetting forgotten administrator passwords, etc.

Data Confidentiality

Access to isTest data is only possible via the encrypted https web service after logging in.

The only exception is database administrators, who naturally have access to all data in the database. The database is password-protected, and the data within it is not cryptographically encrypted except for passwords.

Who has access to which data depends on the data type, user type, and a rule set described below.

isTest operators are subject to confidentiality obligations and have a duty to report critical incidents (attacks, data loss, etc.).

Access Rights by Data Type

• Personal Data ( I )
  • Administrators ( a ) can create, modify, and delete data for their group. Deleting a user automatically deletes all data related to that user.
  • Teachers ( b ) can modify student data in their group. They can only directly modify data for students in their courses but can create their courses from all students in the group. They cannot access or delete other teachers.
  • Students ( c ) can only modify their own data.
  • isTest Staff ( d ) can modify and delete personal data.
• Organizational Data ( II )
  • Administrators ( a ) can create, modify, and delete data for their group.
  • Teachers ( b ) with a group license have no access. Teachers with an individual license are their own administrators.
  • Students ( c ) have no access.
  • isTest Staff ( d ) have no direct access.
• Examination Materials ( III )
  • Administrators ( a ) have no access.
  • Teachers ( b ) have full access to their own data. They can grant read-only access to selected data to other teachers in their group by marking it as 'internal' or to all isTest teachers by marking it as 'public'. They can also grant read-only access to 'internal' data to specific teachers in other groups via explicit invitation.
  • Students ( c ) have no access.
  • isTest Staff ( d ) have no direct access.
• Examination Data ( IV )
  • Administrators ( a ) have no access.
  • Teachers ( b ) have full access to the data of students in their courses. Otherwise, they have no access.
  • Students ( c ) have read-only access to their own data. Otherwise, they have no access.
  • isTest Staff ( d ) have no direct access.

Access Rights by User Type

• Administrators ( a )
  • Personal Data ( I ); Full access to the data of their group. No access to data of other groups.
  • Organizational Data ( II ): Full access to the data of their group. No access to data of other groups.
  • Examination Materials (III ): No access.
  • Examination Data ( IV ): No access.
  • Technical Data ( V ): No access.
• Teachers ( b )
  • Personal Data ( I ): Read and write access to the personal data of students in their courses, but not delete. Indirect access to data of all students in their group as they can create their courses from all students in the group.
  • Organizational Data ( II ): No access. Teachers with an individual license are their own administrators (see above).
  • Examination Materials ( III ): Full access to their own data. Read-only access to data marked as 'internal' within their group and to data marked as 'public' by their creators.
  • Examination Data ( IV ): Full access to data of their own students, otherwise no access.
  • Technical Data n ( V ): No access.
• Students ( c )
  • Personal Data ( I ): Read and write access to their own data. No delete access and no access to data of other users.
  • Organizational Data ( II ): No access.
  • Examination Materials ( III ): No access.
  • Examination Data ( IV ): Read-only access to their own data, otherwise no access.
  • Technical Data ( V ): No access.
• istest Staff ( d )
  • Personal Data ( I ): Full access.
  • Organizational Data ( II ): No direct access.
  • Examination Materials ( III ): No direct access.
  • Examination Data ( IV ): No direct access.
  • Technical Data n ( V ): Full access to licensing data.

For isTest staff, a distinction must be made between direct and indirect access. Direct access exists when data can be accessed through a user interface designed for this purpose. Indirect access exists when a database administrator can access the database and retrieve data using SQL queries, knowing the architecture. Only developers have such indirect access. Indirect access also applies if a supporter logs in as another user with their consent.

Contact Form

The data you enter will be stored for the purpose of individual communication with you. For this, it is necessary to provide a valid email address and your name. This is used to assign the request and subsequently respond to it. The processing of the data entered in the contact form is based on a legitimate interest (GDPR 6.1 lit. f). By providing the contact form, we want to enable you to contact us easily. Your information will be stored for the purpose of processing the request and for possible follow-up questions.

Data Retention and Deletion

As Controllers

As Processors

For registered users, we process the data in our role as processors. We do not actively delete this data. Exceptions are inappropriate content or an order from an authority.

We can delete the data if:

• The license has expired for over a month and there is very little data.
• The license has expired for over a year.

The controller (the school) can delete its data at any time. The responsible party for us is the Administrator ( a ).

• Administrators ( a ) can delete all data related to their customer. If Organizational Data ( II ) is deleted, all data referring to persons in the deleted data will also be deleted. If a Teacher ( b ) is deleted, their Examination Materials ( III ) and their Examination Data ( IV ) will also be deleted. If students are deleted, their Examination Data ( IV ) will also be deleted.
• Teachers ( b ) can delete their Examination Materials ( III ) and their Examination Data ( IV ).
• Students ( c ) cannot delete anything.

Note! Cloned data (see 6. Clones) is not deleted when data is deleted.

Clones

isTest aims to promote collaboration among teachers within the same school and across different schools. For this reason, Teachers ( b ) can selectively share their Examination Materials ( IV ) with colleagues. They can make individual questions, question collections, tests, and test collections available to teachers in their school, all isTest teachers, or specific teachers by name (see 4.4 Data Confidentiality). When another teacher uses this data, a clone is created and assigned to the other teacher. Each access to this data is an access to the clone. The original data cannot be modified or deleted by the other teacher. . Note! The original owner cannot delete clones of data once made available.

Links

isTest only links to its own content and to explanatory videos on YouTube. The only exception is the links in this privacy policy.

Embedded YouTube Videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed about which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand. When a YouTube video is started, the provider uses cookies that collect information about user behavior. For more information about the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policies. There you will also find further information about your rights and settings to protect your privacy (https://policies.google.com/privacy).

Links to Other Sites

Teachers ( b ) can include links to any sites in their teaching materials. The purpose and nature of these links cannot be foreseen by isTest. Responsibility lies solely with these teachers and the customer who gave them a login. Following these links can be analyzed by the target websites.

Technical and Organizational Security Measures

isTest takes extensive technical and organizational measures to protect data against unauthorized access, alteration, or loss.

Server

Localization: Azure Datacenter: Switzerland North (Greater Zurich Area)

Microsoft Switzerland GmbH

Technical Measures

• SSL-Encryption. Connection to the server is via HTTPS.
• Session Management. The session cookie is secured with 'HttpOnly' and 'secure'. During login, the session is assigned a random name string, which is registered in the database. The name string is transmitted with each request, and the session can only start if both the name string and cookie match.
• SQL Injection. Consistent use of PDO prevents SQL Injection "by design."
• XSS. User-entered data is filtered.
• Headers.
  • Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
  • Header append X-FRAME-OPTIONS „SAMEORIGIN“
  • Header always set X-Content-Type-Options „nosniff"
  • Header always set X-Xss-Protection "1; mode=block"
• Exploits. No frameworks are used, and only a few widely used open-source libraries (e.g., CKEditor, MathJax), so the likelihood of known vulnerabilities is low.

Organizational Measures

• Backup. A daily backup of the entire database is made.
• Logs. In addition to regular server logs, isTest logs the date and author of the last change in each record.
• Passwords. Passwords must meet a minimum security standard: at least 8 characters long, containing uppercase and lowercase letters and digits. Initial passwords are less restricted but must be changed by the user.
• Prevention of Parallel Sessions. It can be set so that a specific user can have no more than one simultaneous session.

Data Sharing and Transfer to Third Countries

isTest does not share data, neither domestically nor internationally. isTest does not grant anyone access to its usage data, and in particular, does not use analytics tools (e.g., Google Analytics, Matomo Analytics, Adobe Analytics).

Cookies

Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. You can delete individual cookies or the entire cookie inventory. Additionally, you can find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge-anzeigen-zulassen-blockieren-l%C3%B6schen-und-verwenden-168dab11-0753-043d-7c16-ede5947fc64d
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

We use a session cookie to fulfill our mission. Our website requires that the calling user can be identified even after a page change. The session cookie is stored for the duration of a session, i.e., until you log out or close the browser. We also use cookies to show and hide the menus, for the language selection and for the group identifier.

Furthermore, isTest does not set or allow any other cookies. In particular, we do not allow third-party cookies.

Changes to the Privacy Policy

We reserve the right to adjust this privacy policy to always comply with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy applies to your return visit. If you disagree with the adjusted privacy policy, you have a right of withdrawal. The same applies to changes to the terms and conditions.