Personal data in Knowly

Along with the EU's General Data Protection Regulation (aka the GDPR), which entered into force on the 25th of May, stricter requirements for the handling of personal data took effect. In this article, we'll therefore go through all the personal data that Knowly collects about users in the system and explain what each piece of data is used for.

Knowly is a so-called data processor for the organisations using our products, which means that we process personal data as instructed by them.

Some personal data is collected for the development of Knowly's products. In this case, it's we at Knowly who are responsible for the data. Our lawful basis for collecting such data is a so-called legitimate interest.

The personal data that we track can be divided into two categories

• Personal data that users input
• Personal data that we automatically collect

Personal data that users input

This includes data that a trainer or participant has input about him or herself, or that a trainer has input about a participant: Full name, email, mobile phone and answers to follow-ups. For trainers, names and dates of trainings are also included here.

Personal data that we automatically collect

• IP addresses

  We collect this: To ensure that no one gains unauthorised access to a certain account.

• Location data

  Why we collect this: To provide an optimal experience depending on where in the world the user is. Also, to set the correct language.

• Device and browser information Examples: Network, time zone, type of mobile device, operating system, browser.

  Why we collect this: To optimise the experience of the service according to the user's conditions and to, in aggregate form, use it as a basis for further developing the service.

• In-app behaviour

  Why we collect this: To create aggregate statistics that we use when making decisions about product improvements. Also used when troubleshooting if something goes wrong.

Subcontractors

We at Knowly are subcontractors to our customers, but we also have subcontractors. Our subcontractors, who we use for storage and messaging services, will also process the personal data.

Read more about our subcontractors and the measures we have taken following Schrems II here.