Privacy & Security Statement MQ Scan

MQST B.V. developed the MQ Scan with the purpose of providing insights into the motor skills of children in primary school. Personal data of children and users are processed through the MQ Scan. We consider the privacy of the children and users of the test very important. MQST B.V. therefore has taken the necessary precautions to ensure that the demands made by the General Data Protection Regulation (GDPR) will be respected by all parties. For this reason, we made an agreement with the involved parties about how the data processing is to be handled to make sure only personal data strictly necessary for the purpose of the MQ Scan are processed. Below we explain which party collects personal data and with what cause.

Role distribution

A number of parties are involved in conducting the MQ Scan. Below is an overview of the parties involved, the tasks they fulfill and the way in which they are involved with personal data.

MQST B.V. is the developer of the MQ Scan and wants to deploy it in as many schools as possible. For this purpose, the test is offered to customers. These can be schools or school partnerships, but also local or regional sports companies and municipalities. MQST B.V. does not want to collect personal data, but only receives the data at meta-level. This means we receive overviews and average scores which cannot be traced back to persons. In this way we can see the level of children’s motor skills at school, in the neighborhood or at local level. We are also able to monitor the effect of the test. We do this in order to be able to evaluate the test and from our commercial interest to be able to approach parties in a targeted way in order to use the test. Only in case of calamities such as a malfunction of the system or the inaccessibility of certain data, we can access the data of specific classes or children in order to solve this problem.

In addition, we collect the contact details of gym teachers or contact persons of schools, municipalities, or sports companies in order to be able to properly fulfill the agreement we have made with them. MQST B.V. has the role of processor in the relationship with customers who take the test. Between MQST B.V. and the customers a processing agreement is always made. MQST B.V. has also made processing agreements with the parties who develop, host, and manage the application (JIBE B.V. and TransIP) and who are seen as so-called sub-processors.

Customers of MQST B.V. are the parties taking the test. As mentioned above, these can be schools, municipalities, but also local or regional sports companies. The customers take care of the actual execution of the test and also execute the exercise programs. In order to gain insights into the motorskill-development of the children and to monitor the effect of the program, they have access to the individual scores of the children participating in the program. They register the personal details of the children and also process the scores. These data are also shared with the schools as part of the exercise curriculum. The customer has the role of the responsible person and as mentioned above, a processing agreement is always made between the customer and MQST B.V. Personal data of pupils are being processed through participation in the MQ Scan. This always happens based on a legitimate legal base. We will clarify very carefully what data is collected, for what purpose it is collected, and how long the data will be stored. The parents of participating students can always use their right to access, rectify and/or delete the data.

The use of personal data

When using MQ Scan, the person assigned by the customer (for example a gym teacher) registers the personal data of the participating children. The data provided by the participating schools is used for this purpose. One of the purposes of this is to be able to link back the score of the individual child, so that it is clear how he/she relates to other children. Another purpose is being able to adjust the program to every pupil. In addition, the scores, without being traced back to the individual child, will be used for data analyses. For example, insights will be gained about how a certain group of children relates to another group on their motor skills. The ultimate goal is to identify and monitor the motor skills of all children so that this can be improved in a targeted way by the professionals.

Registration

In order to be able to use the MQ Scan, the assigned responsible person will first have to register. The chosen password and name of that person will be saved, so that the system will recognize him/her and access is gained to the data. Of course, the username, password and related data will not be shared with third parties, unless this is necessary as part of the service provision or if this is required by law. In case of suspected fraud or misuse of MQ Scan, we can hand over personal data to the competent authorities.

What data is requested?

MQ Scan collects the following types of data as part of the fulfilment of its functions:

Name and address details and login details of the contractor (on behalf of the customer);
Unique number of the school;
Contact details school contact person (name, e-mail, and telephone number);
First and last name children;
Gender children;
Date of birth children;
Children’s class;
Data resulting from a test (scores MQ Scan).

Providing to third parties

The personal data of the participating children will only be shared with the school in question and will explicitly not be shared with third parties without the preliminary instruction from the customer who has obtained parental consent. The contact details of the contact persons from the schools are only being shared with MQST B.V. and the by the customer assigned person who takes the test. The name and address details and login details of the executor will only be shared with MQST B.V.

Security

We have taken the necessary security measures to prevent misuse of MQ Scan, and so restrict access to personal data. These include the following precautions:

– Access to personal data only with a username and password;

– Passwords are stored encrypted;

– Secure communication with server (HTTPS / SSL);

– Data is stored on servers located in the Netherlands;

– Access to the servers where the data is stored is limited to authorized persons.

A detailed summary of the security measures is included in the various processing agreements.

Statistics

As described above, MQST B.V. has access to anonymous statistics of the results of the test and the use of the website and app. This uses MQST B.V. for evaluating and improving the MQ Scan, and from our commercial interest in being able to approach parties specifically to use the test. The legal basis on which we do this is “legitimate interest”.

Protecting and storing data

MQST B.V. will do everything within its power to adequately protect personal data against loss and unlawful use (data breach). As already mentioned, MQST B.V. has signed a so called processor agreement with the partners who take care of (part of) the execution of the test. In this agreement is stated that they adequately protect the personal data and respect the prescriptions of the AVG.

If, despite the precautions mentioned, there is a data breach, we will obviously handle this properly and according to the rules. If you suspect that a data breach has occurred, we ask you to report this as soon as possible to the school/client or by sending an e-mail to info@mqscan.nl.

Websites of third parties

This statement does not apply to websites or apps of third parties that are linked to MQ Scan trough links. We cannot guarantee that these third parties will handle your personal data in a reliable or secure way.

Access, rectification, and erasure of your personal data

The GDPR specifies a number of rights that the persons whose personal data are processed have:

Access: you have the right to view your personal data.
Rectification: if it appears that your personal data is incorrect, you can ask us to change your data.
Erasure: you can also request us to delete personal data and stop using it.

If you have a question or a request about the processing of your personal data, you can do so by sending an email to: info@mqscan.nl.

If you are not satisfied with the way in which we process your personal data, you can also submit a complaint to the Dutch Data Protection Authority via: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap

Changes to this privacy statement

We reserve the right to make changes to this statement when the website or MQ Scan is updated. You can see this by the date at the bottom of this document.

Any questions?

If you have any questions about these terms and conditions or the privacy policy, you can always contact us at info@mqscan.nl.

Haarlem, April 2021