{"id":3,"date":"2021-06-22T09:59:16","date_gmt":"2021-06-22T09:59:16","guid":{"rendered":"https:\/\/www.qustodio.com\/?page_id=3"},"modified":"2025-04-17T13:18:56","modified_gmt":"2025-04-17T13:18:56","slug":"privacy","status":"publish","type":"page","link":"https:\/\/www.qustodio.com\/en\/privacy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.16″ da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.24.0″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ saved_tabs=”all” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

QUSTODIO FAMILY PRIVACY POLICY<\/h1>\n

Last Updated: [2025 04 14]<\/p>\n

Qustodio Technologies SL (\u201cQustodio\u201d, the \u201cCompany\u201d, or \u201cwe\/us\u201d) is committed to respecting and protecting your privacy and that of your Users. This Privacy Policy explains our practices regarding the use of personal data collected and processed through our Qustodio Family Services (the \u201cServices\u201d or \u201cQustodio Services”). This Privacy Policy integrates our conditions of use of our Services.<\/span><\/p>\n

In this Privacy Policy we will explain our practices regarding the use of personal data obtained and\/or processed through our Qustodio Services.<\/span><\/p>\n

This Privacy Policy is part of our Qustodio Family Terms of Service.<\/span><\/p>\n

Summary<\/span><\/p>\n

Qustodio processes two types of personal data in relation to the Qustodio Services:
\n\u2022 (1) your account and contact data . This data are used for managing our relationship with you, including activation, support, invoicing, and upselling. This is described in Section B of the policy.
\n\u2022 (2) your User Device Data, collected from the monitored devices associated to your User Accounts (\u201cMonitored Devices\u201d). This data is processed as data controller on your behalf, for providing the parental control and monitoring services through the control panel. This is described in Section C of the policy.<\/span><\/p>\n

Subscribers are sole responsible for the configuration and use of the parental control panel and the processing of personal data associated with their account (which includes, among others, collecting, storing, and analysing personal data from Users\u2019 Monitored Devices). The Qustodio Services automatically deploy the configuration and the instructions given by you and you are solely responsible for the configuration of this control panel. You can change those configurations and provide instructions to limit and\/or erase any data collected within the control panel.<\/span><\/p>\n

If you use the Qustodio Service to see data about your User\u2019s usage of school devices collected by Linewize Inc. through its service School Manager, please read section D of this Privacy Policy.
\nThe Qustodio Services is designed for use in a household environment by parents and not by children, and we do not knowingly collect personal information directly from children under the age of 13. You warrant that (a) you have informed any Users that are 14 years old or more that the Monitored Devices used by them include a control and monitoring software and have obtained authorisation from such Users for this kind of activity or (b) there are rules in your country that exempt you from the aforementioned obligation of information and consent, or provides for a different age limit, in which case that age limit will apply. Both Qustodio and you agree to fully comply with this Privacy Policy.<\/span><\/p>\n

For US users<\/span><\/p>\n

We Comply With The Children’s Online Privacy Protection Act of 1998 (COPPA)
\nCOPPA and its rules require us to inform parents and legal guardians (“parents”) about our practices for collecting, using, and disclosing personal information from children under the age of 13 (“children”). It also requires us to obtain verifiable consent from a child’s parent, or confirm that the child\u2019s teacher has obtained verifiable consent from such child\u2019s parent, for certain collection, use, and disclosure of the child’s personal information.<\/span><\/p>\n

Read more about COPPA at the\u00a0FTC’s COPPA page. This regulation is designed to protect the privacy of your children. In order for a child under the age of 13 located in the United States to use the Qustodio Services, his\/her parent or teacher must approve the registration.<\/span><\/p>\n

A. GENERAL ASPECTS OF DATA PROCESSING BY QUSTODIO<\/span><\/p>\n

This section informs subscribers and users of general information regarding data processing by Qustodio Technologies, SL.<\/span><\/p>\n

\u2022 Data Controller \/ Business: The Data Controller is Qustodio Technologies SL, Roger de Flor 193, bajos, 08013, Barcelona, Spain.\u00a0You can contact to our Data Protection Officer to send any suggestions, queries, doubts or complaints about personal data, or to access your personal data by writing to:\u00a0dpo@qustodio.com. Qustodio Technologies SL, is also the business responsible for data processing, as defined under the California Consumer Privacy Act (CCPA));<\/span><\/span><\/p>\n

\u2022 Confidentiality and Disclosure. We treat your personal data with strict confidentiality in accordance with applicable law. However, we disclose any information about you or your use of our Services: (i) in order to comply with the legal obligations we are subject to, (ii) in order to correctly deliver our Services or perform other obligations in accordance to the Terms, (iii) in the event of a sale or change of control of the Company for the purpose of appropriate due diligence actions; or (iv) to our service providers that provide us a service in relation to the data. We require all third parties to respect the security of your personal data and to process it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process it data for specific purposes and in accordance with our instructions.<\/span><\/span><\/p>\n

\u2022 Data Retention.\u00a0We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including (a) the performance of the contract with registered users, (b) for the purposes of satisfying any legal, accounting, or reporting requirements and (c) to follow your instructions regarding data collected from the devices. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.\u00a0Generally speaking, we will retain your personal data for the period of your subscription (in active format) and 5 years thereafter (blocked), for legal and\/or administrative purposes.<\/span><\/span><\/p>\n

\u2022 Service Optimisation. \u00a0We may process data on an aggregated non-identifiable basis for establishing user general attributes and profiles and share such anonymous information with third-party service providers to improve or promote our Services. We also use your data in a non-identifying and aggregated manner (i.e., dissociated data) to better design our web site, software, and services.<\/span><\/span><\/p>\n

\u2022 Anonymised Data for Statistical Purposes.\u00a0For the purpose of improving our Services and providing sector\/segment reports, we may anonymise your Registration Data and certain User Data and store and process this data on an anonymous basis, even after your Account has been closed, indefinitely. The principal purpose is to analyse on an aggregated non-identifiable basis how our Services are used, measuring their effectiveness, and providing general customer service. We may also provide this data (or parts of it) on a fully anonymous aggregate basis to third party business partners, including for conducting academic research and surveys or commercial analytics, and to publish periodic sector or segmented information and reports about behaviour patterns and tendencies.<\/span><\/span><\/p>\n

\u2022 Data Security. We have adopted technical and organizational measures to preserve and protect your personal information from unauthorized use or access and from being altered, lost or misused, taking into account the technologic state of art, the features of the information stored and the risks to which the information is exposed. In case of a security breach, we will take the appropriate measure and will notify you electronically in a timely manner.
\n\u2022 International Transfers of Data. We use third party technological services for the provision of our Qustodio Services, whose providers may process your personal data as sub-processors. These entities may be in jurisdictions that generally do not provide adequate safeguards in relation to the processing of personal data. For all entities outside the Economic European Area, we have entered contracts with such entities that do include such safeguards, including the EC model clauses, and implemented additional safeguards in accordance with applicable law, listed in Annex 1.<\/span><\/span><\/p>\n

For more information about our service providers that carry out international data transfers, please contact\u00a0dpo@qustodio.com.<\/span><\/p>\n

\u2022 Data Subject\u2019s Rights. In accordance with the applicable data protection law, you have the right to:
\n\u2022 Request access\u00a0to your personal data (commonly known as a \u201cdata subject access request\u201d). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
\n\u2022 Request correction \u00a0of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
\n\u2022 Request erasure \u00a0of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
\n\u2022 Object to processing\u00a0of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights.
\n\u2022 Request restriction of processing\u00a0of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data\u2019s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
\n\u2022 Request the transfer \u00a0of your personal data to you or to a third party (known as \u201cdata portability\u201d). We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
\n\u2022 Withdraw consent at any time\u00a0where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will notify you if this is the case.
\n\u2022 File a complaint to the supervisory authority.\u00a0You have the right to file a complaint to the\u00a0Agencia Espa\u00f1ola de Protecci\u00f3n de Datos (AEPD), in Calle Jorge Juan,6, 28001 Madrid (www.aepd.es) if you consider that we are violating the data protection and privacy applicable laws. Before contacting with the AEPD, please do not hesitate to contact with us at\u00a0dpo@qustodio.com, we will be happy to discuss our data protection practices with you and clarify any doubts you may have.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

To exercise your rights, please contact us at\u00a0dpo@qustodio.com\u00a0or sending a letter at Qustodio Technologies SL, Roger de Flor 193, bajos, 08013, Barcelona, Spain.<\/span><\/p>\n

If you contact us to exercise your rights, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.<\/span><\/p>\n

\u2022 Exercising Your Rights to Know or Delete
\nTo exercise your rights to know or delete described above, please submit a request by either:
\n\u2022 Emailing us at dpo@qustodio.com; or
\n\u2022 Submitting a support request within the Qustodio Services.<\/span><\/span><\/p>\n

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. To designate an authorized agent, please submit a request by emailing us at dpo@qustodio.com.<\/span><\/p>\n

You may also make a request to know or delete on behalf of your child by emailing us at dpo@qustodio.com.<\/span><\/p>\n

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:
\n\u2022 Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include, but is not limited to:
\n\u2022 (a) contact information associated with the account;
\n\u2022 (b) the user profile name;
\n\u2022 (c) the name of one or more Monitored Devices;
\n\u2022 (d) technical information (e.g., model ID, serial number, IMEI code, operating system, etc.); o
\n\u2022 (e) any other piece of personal information we determine in our sole discretion to be sufficient for verifying your identity to a reasonable degree of certainty.
\n\u2022 Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.<\/span><\/p>\n

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.<\/span><\/p>\n

You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.<\/span><\/p>\n

We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.<\/span><\/p>\n

\u2022 Response Timing and Format
\nFor US users, we endeavor to substantively respond to a verifiable consumer request within thirty (30) days of its receipt. If we require more time (up to another 30 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.<\/span><\/span><\/p>\n

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.<\/span><\/p>\n

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.<\/span><\/p>\n

\u2022 Non-Discrimination
\nWe will not discriminate against you for exercising any of the rights described above, and we will not:
\n\u2022 Deny you goods or services.
\n\u2022 Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
\n\u2022 Provide you a different level or quality of goods or services.
\n\u2022 Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.<\/span><\/span><\/p>\n

\u2022 General
\nWe may amend this Privacy Policy as required to adapt it to future legislative or case law developments. We will notify you by posting a clear notice of these changes on our website, platform and in this Privacy Policy. Your continued use of the Qustodio Services following the posting of changes constitutes your acceptance of such changes.<\/span><\/span><\/span><\/p>\n

Unless a specific local regulation of mandatory application provides otherwise, the Privacy Policy is governed by the laws of Spain.<\/span><\/p>\n

B. QUSTODIO PROCESSING SUBSCRIPTION DATA<\/span><\/p>\n

1. Data collection by the Company through the Services.\u00a0Qustodio will collect and process as data controller or business entity the following personal data through the Services:
\n\u2022 Registration Data.\u00a0On registering for Services, we will collect the following personal data about subscribers: name, surname, email address and telephone. This data is mandatory and if it is not provided, your account cannot be created.
\n\u2022 Payments.\u00a0Our payment providers (PayPal, Braintree, Cleverbridge, Chargebee and Stripe) collect certain payment data which is processed according to their terms and privacy policy which is provided to you during the payment process. You can visit\u00a0https:\/\/www.braintreepayments.com\/en-es\/legal,\u00a0\u00a0https:\/\/www.cleverbridge.com\/corporate\/privacy-policy\/,\u00a0https:\/\/www.chargebee.com\/privacy\/\u00a0and\u00a0https:\/\/stripe.com\/it\/privacy-center\/legal\u00a0for further information.\u00a0\u00a0We may contract additional payment gateways, and their conditions will be provided to you during the payment process.
\n\u2022 Information about your computer.\u00a0Due to the communications standards on the internet, when you visit our platform we automatically receive the URL of the site from which you came and the site to which you are going when you leave the site. We also receive the internet protocol (\u201cIP\u201d) address of your computer and the type of web browser you are using. We use this information to analyse overall trends and to help improve the Services. This information is not shared with third parties without your permission.
\nIt is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

2. Information We Collect. To comply with the CCPA, a business must describe the categories of personal information it has collected about consumers during the past twelve (12) months. Accordingly, this section applies to visitors, users, and others accessing the Qustodio Services who reside in the State of California. We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“personal information”). Personal information does not include:
\nPublicly available information from government records.
\nDeidentified or aggregated consumer information.
\nPlease refer to Appendix I for more detail on the categories of personal information we have collected from consumers within the last twelve (12) months.<\/span><\/span><\/span><\/p>\n

We obtain the categories of personal information listed in the previous section from the following categories of sources:
\nDirectly from you. For example, from forms you complete or features of the Qustodio Services you interact with.
\nIndirectly from you. For example, from observing your actions within the Qustodio Services.<\/span><\/p>\n

3. Purposes for Processing. \u00a0The personal data we collect about you are used for performing our contract and communications with you, for managing your Qustodio Account, for providing our Services to you (as described in the Terms) and complying with legal requirements in relation to your subscription. The data we collect are also used to measure and improve the Services and its functionality and to provide customer service, send email notifications and (if you gave your consent) newsletters, or communications, in general, about the Services, products and novelties, and product offers or promotions offered by us. We will use your data also to ensure compliance with the Terms, the applicable laws, and other legal obligation we are subject to.<\/span><\/span><\/p>\n

4. Legal Basis for processing.\u00a0Below are the lawful bases that we rely on to process your data:
\n\u2022 Preparation and performance of Contract:\u00a0processing your data is necessary for the performance of our contract with you, or to take steps at your request before entering into such a contract.
\n\u2022 Legitimate Interest: \u00a0we have a legitimate interest to process your Registration Data for our business, in conducting and managing our business to give you the best service\/product and the best and most secure experience. We consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interest and we do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
\n\u2022 Comply with a legal or regulatory obligation:\u00a0we may process your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Generally, we do not rely on consent as a legal basis for processing your Account Data other than in relation to sending own marketing communications to you via email or text message.\u00a0However, for transparency and clarity, we ask you to provide this consent, which is given by you on registering your account.\u00a0You have the right to withdraw consent at any time by contacting us at info@qustodio.com. This will not affect the processing of your Registration Data for service provision until you cancel your account.<\/span><\/span><\/span><\/p>\n

5. Data sharing: Sharing Consumption Information with Apple. We may share certain consumption-related data (such as your subscription activity, in app purchase, autorenewal) with Apple, which you consent to if you are making any purchase through the Apple App store. This sharing applies only to subscriptions managed through Apple (App Store in-app purchases, renewals) and is intended to support subscription management and help Apple provide more tailored assistance, in particular to improve the refund process by obtaining data that assists with reviewing the customer\u2019s refund request. The data will be processed by Apple in accordance with the Apple privacy policy. Apple retains the data for the period necessary to fulfill the above purpose. You may withdraw your consent at any time but we will no longer be able renew or extend your subscription. You may request access to or deletion of your personal data related to consumption information, by submitting requests directly to Apple by visiting Legal – Apple Privacy Policy – Apple<\/span><\/span><\/p>\n

6. Commercial Communications.
\nAs a user of Qustodio\u2019s Services you will receive electronic commercial communications in accordance with applicable law, including alerts, notices, newsletters, offers and promotions, related to Qustodio\u2019s Services. If you do not wish to receive such information you can expressly opt out by our commercial communications by clicking \u201cunsubscribe\u201d in one of our emails or by sending a notification to\u00a0dpo@qustodio.com.<\/span><\/span><\/p>\n

C. QUSTODIO PROCESSING DEVICE DATA
\nThe purpose of this Section C is to regulate the processing of the Device Data indicated in Appendix 1, to enable us provide subscribers with the Qustodio Service. When registering and creating an Account, Qustodio starts collecting data from the Devices associated to the Account, which may include personal data relating to subscribers, to the users of the Devices or to third parties (\u201cDevice Data\u201d, including information about the Devices, websites and apps that your Users use, contacts, connections, payments, messages and other communications, posted and received content, etc.).<\/span><\/span><\/p>\n

We process Device Data under instruction from subscribers (our customers, the \u201cClient\u201d). This means that, even if we act as data controller, as Client you are in control of this data and you are responsible for the decision to install the Service on Monitored Devices and how the Services are used: you determine which data is collected and how it is used for your parental control purposes. Without prejudice to the issue that such data is in most cases processed within a domestic context, we are providing a commercial service to you and therefore our processing of the Device Data on your behalf is governed by the terms of this Section C.<\/span><\/p>\n

1. Data collection by the Company through the Services.\u00a0Qustodio will collect and process as data controller the following personal data through the Services:
\n\u2022 Device Data.\u00a0We only collect the data that you instruct us to in the parental panel, limiting the data we process to what has been selected by you through the Services. Further details of the data that are processed are set out in Appendix 1.<\/span><\/span><\/p>\n

2. Purposes for Processing.\u00a0The personal data we collect is to provide the Services and to comply with the instructions established by subscribers within the Services and to ensure compliance with the monitoring of the devices as intended.<\/span><\/span><\/p>\n

3. Legal Basis for processing.\u00a0Below are the lawful bases that we rely on to process Device Data:
\n\u2022 Performance of Contract:\u00a0processing Device data is necessary for the performance of our parental control contract with subscribers and the basis of the Services.
\n\u2022 Comply with a legal or regulatory obligation:\u00a0we may process Device Data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
\n\u2022
\n4. Term.\u00a0The term of processing is the term of your subscription with Qustodio and a further 4 years to comply with regulatory requirements (see below).
\n5. Warranty and Indemnity.\u00a0You, as the person responsible for defining the Device Data that we process on your behalf for the provision of the Services, represent and warrant to us that you have all the appropriate informed consents or other legal basis, when necessary, for processing from each and every data subject whose personal data are submitted to us in the course of the provision of the Services or collected and transmitted to us by the Qustodio Software. You agree to indemnify and keep us harmless from all claims, damages and losses we may suffer relating to or arising out of the processing of Device Data and other third-party personal data submitted to our systems during the course of use and provision of the Services.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

6. Your use of Device Data.\u00a0You warrant that you have the appropriate authority to collect and process the Device Data and you will not submit to the Services any personal data relating to any individual over 13 who has not authorized such processing. Through the Services, you may also access a copy of the Device Data collected by us on your behalf. You will protect the confidentiality of any accessible Device Data and prevent access by or disclosure to any unauthorized third person.<\/span><\/span><\/p>\n

7. Service Configuration and Data Processing Instructions.\u00a0\u00a0As a Client, you are responsible for setting the parent control panel configurations on the Qustodio Platform that (i) controls the Services, the supervision and monitoring of the activities and (ii) determines the personal data to be covered. The installation of the Qustodio Device Software and your configuration of the control panel constitute instructions for us to process Device Data on your behalf, to provide you the Services. The level and degree of such surveillance and monitoring is entirely under your control, and we will not be liable for any such configuration and control carried out by you. Furthermore, your support requests via email or phone also constitute instructions for us to process Device Data, as long as processing Device Data is necessary to help you with your request or take the action to ask us to. All such Device Data will be under your responsibility, even with the Company acting as data controller in accordance with this Privacy Policy.<\/span><\/span><\/p>\n

8. Retention. We store the Device Data until you close your Account. After that period of time, we disassociate the personal data from the individual it refers to and use such disassociated data for internal research and analysis purposes.<\/span><\/span><\/p>\n

9. Qustodio in case you are monitoring Monitored Devices running iOS. \u00a0Upon installation of Qustodio Software for Monitored Devices with iOS operating system, due to the technical configuration of the system, all data transmitted to and from the Device is channeled through our servers, in such a way we are visible to a third party such as your Internet access provider and the owner of the IP address from which communications originate. Although we are NOT an Internet access provider, due to this configuration we may receive notifications (each a \u201cNotification\u201d) from third parties regarding the User\u2019s online behavior, including but not limited to downloading and\/or viewing online content, posting online content, opening online accounts, and\/or using third party applications and programs. If we receive such a Notice stating your User engages in any activity that is or may be illegal or violate the rights of third parties, or if we believe (in our reasonable judgment) that any activity by your Users is or may be detrimental to the provision of the Services, we will notify you. We reserve the right to (and will, if we are obliged to by court or applicable law or to protect our interests and business, and in particular, but without limitation, if we receive a Notice from a third party or if user activity on a device is or may, in our opinion, be detrimental to the provision of the Services): (a) suspend or block access to your Device(s) to the Internet or to certain websites\/internet services; and (b) provide any party providing the Notification to us or a Court or public authority with your name and contact details and\/or (c) terminate your Account.
\nFor iOS devices, after installing the MDM profile, Qustodio will have access to all the traffic of the device. This information (coming from the\u00a0device) only goes to Qustodio servers and is not shared with any third party. The specific information collected through MDM is:
\n\u2022 Domain names, user agent and operating system version; in order to categorize websites and applications visited by the device, and thus make the filtering established by the parent. It is also used to report activity to the parent.
\n\u2022 the URL address in the web search engines; to report the search to the parents.<\/span><\/span><\/span><\/p>\n

10. Data retention and removal. \u00a0During your subscription, we generally retain the Device Data on an identifiable basis for 12-month periods, for providing our annual behaviour report. In addition, through the Platform control panel, you may delete all historical data saved at any time. This data will no longer be accessible and will be fully removed from our systems on the next back-up, except as indicated below. If you wish to remove all the Device Data in your Qustodio Account, please, uninstall Qustodio of your devices, and send an email (as set out below), with a digital copy of your ID or other identification document to prove your identity requiring the deletion of all the data we have about you and the users or your Devices. Once your identity confirmed, we will immediately remove all Data from our active systems and back-ups within fifteen (15) days from confirmation of identity.<\/span><\/p>\n

11. Rights and Responsibilities of Qustodio.
\nQustodio shall:
\n\u2022 Process Device Data only on the basis of documented instructions from you, including transfers of Device Data to a third country or international organization, unless otherwise required to do so under Union law or applicable Member State law.
\n\u2022 Ensure that the persons authorised to process Device Data have undertaken to respect confidentiality or are subject to an obligation of confidentiality of a statutory nature.
\n\u2022 Take all appropriate technical and organisational measures to ensure a level of safety appropriate to the risk of processing.
\n\u2022 Respect the conditions for having recourse to a data processor, as established in the current legislation on protection of personal data.
\n\u2022 Communicate with subscribers prior to responding to requests for the exercise of the rights of the data subjects, in this case, the Users of Devices.
\n\u2022 At your choice, either destroy or return all personal data once the processing services have been completed and destroy any existing copies unless the retention of personal data is required under Union or applicable Member State law.
\n\u2022 Make available to you all information necessary to demonstrate compliance with the obligations established herein.
\n\u2022 Ensure that the DPO is involved in an adequate and timely manner in all matters relating to the protection of User Data.
\n\u2022 Adhere to a Code of Conduct that is approved by the European Commission or other competent authority, if applicable.
\n\u2022 Keep a record of processing activities in the case of processing personal data that may pose a risk to the rights and freedoms of the data subject and \/ or in a non-occasional manner, or which involves the processing of special categories of data and \/ or data relating to convictions and infractions.<\/span><\/p>\n

12. Data Subjects\u2019 Exercise of their Rights.
\nIf you or any Device user addresses a request or exercise any of the rights established in the General Data Protection Regulation, Qustodio shall provide the information requested and perform any required actions, without delay and, at the latest, within one month from receiving the request, which may be extended for a further two months if necessary, taking into account the complexity of the application and the number of applications. We shall consult with the subscriber prior to providing any Device Data to a device user. Similarly, in the event that Qustodio does not proceed with the request of the User, Qustodio shall inform the latter without delay, and no later than one month after receipt of the request, shall provide the User with the reasons why Qustodio has not acted and inform the User of his\/her\/their right to file a complaint before a competent authority and to file a judicial appeal. The response to the User\u2019s request shall be made in the same format as that used by the person concerned, unless he\/she\/they requests that it be done otherwise.<\/span><\/span><\/p>\n

13. Subcontracting.
\nQustodio may subcontract its obligations and\/or give access to Device Data to third party service providers, if it is necessary for the proper provision of the Services. For this purpose, you hereby expressly authorises Qustodio to subcontract the entities indicated in this Policy. Qustodio ensures a contract exists with each third-party subcontractor, which is sufficient to require the subcontractor to process Device Data in accordance with the applicable data protection laws and the Client\u2019s instructions.<\/span><\/span><\/p>\n

14. Security Breach of the Personal Data.
\nInsofar as there exists an instruction from a competent supervisory authority, a development of a national legislation or a delegated act, in the event of a security breach of the personal data, Qustodio shall notify you and the competent supervisory authority of such breach without undue delay, and if possible, no later than seventy-two (72) hours after it happened.<\/span><\/span><\/p>\n

15.Termination, Resolution & Expiration.
\nIn the event of termination, resolution or expiration of the contractual relationship for the provision of services hereunder between you and Qustodio, the latter shall not keep the Device Data unless otherwise legally required or advisable to do so. Otherwise, upon termination, resolution or expiration, or when no longer legally required to keep the data, Qustodio shall destroy or return to the Client all personal data and any copies of it, as well as any support or other document containing any personal data. This is without prejudice to the right of Qustodio to continue process Device Data where such data is being processed by Qustodio or for the defense of its legal interests.<\/span><\/span><\/p>\n

D. DATA COLLECTED THROUGH SCHOOL MANAGER AND SHOWN VIA THE QUSTODIO SERVICE
\nFor the specific services of Linewize provided in conjunction with Qustodio, in addition to the general terms outlined in this Privacy Policy, the following data will be collected and processed as data controller the following personal data through the Services:
\nIf you child\u2019s school subscribed to Linewize Inc\u2019s service \u201cSchool Manager\u201d, you may be able to see data about your child\u2019s usage of the school\u2019s devices (\u201cSchool Manager Data\u201d) on the Qustodio Service.
\nThe data controller of the School Manager Data is the school that subscribed to the service, please contact the school for more information on the school\u2019s privacy practices.
\nQustodio processes the School Manager Data as a data subprocessor for Linewize, solely for the purpose of presenting those data to you via our user interface, under the instructions of the school. We treat all data we process with utmost confidentiality under the same conditions as indicated above for our Qustodio Service. We inform you that in order to present the School Manager Data via our user interface, we use certain IT service suppliers indicated above who process the data for us (support, data management and analysis and user experience management).
\nWe will store the School Manager Data until the school, as Data Controller, requests us to delete them. You and your child have the right to exercise your data subject rights as indicated in section A.5, should we receive any request on how Linewize or the school process personal data, we will forward such request to them.
\nShould you have any questions on how School Manager process your child\u2019s data, please contact privacy@qoria.com.<\/span><\/span><\/p>\n

Appendix 1
\nDetails of Processing
\nFor CCPA compliance purposes, Qustodio has collected the following types of personal data\/information from the consumers described below within the past twelve months. Under the GDPR, the data indicated below are data that Qustodio processes as data controller under the instructions of the Client.
\nCategories of Data Subjects\/consumers
\nUsers of the devices which are monitored by Qustodio. Third parties who interact with the users of such devices.
\nType of personal data\/personal information
\na) Identifiers such as real name, alias or account name, unique personal identifier, online identifier, IP address, email address.<\/span><\/span><\/span><\/p>\n

(b) Information about the Monitored Devices usage, depending on the functionalities configured by the Account Owner in the dashboard, such as the URL of the visited websites on the supported web browsers, each website usage time and number of visits, each application usage time, the Monitored Devices usage times, and the Monitored Device location information. All data collected by such devices, including identification and contact data, Internet browsing and content viewing data, behavioural data.<\/span><\/p>\n

(c) technical information about the Monitored Device, such as the model ID.
\nFor iOS devices, after installing the MDM profile, Qustodio will have access to all the traffic of the device. This information (coming from the device) only goes to Qustodio servers and is not shared with any third party. The specific information collected through MDM is:
\n\u2022 Domain names, user agent and operating system version; in order to categorize websites and applications visited by the device, and thus make the filtering established by the parent. It is also used to report activity to the parent.
\n\u2022 The URL address in the web search engines; to report the search to the parents.<\/span><\/p>\n

List of third parties accessing the User Data
\n\u2022 Amazon Inc.\u00a0provides\u00a0Qustodio the service of data hosting outside the European Economic Area (USA).
\n\u2022 ZenDesk Inc.\u00a0provides Qustodio with support services outside the European Economic Area (USA).
\n\u2022 The third parties for the provision of their services:<\/span><\/p>\n

\u2022 Amazon Web Services (Amazon.com, Inc.) provides\u00a0us with cloud hosting services outside the European Economic Area (USA). For more information, visit Amazon\u2019s Privacy Policy at:\u00a0 https:\/\/aws.amazon.com\/privacy\/
\n\u2022 Braze, Inc. allows us to improve the experience of our users. For more information, visit Braze\u2019s Privacy Policy:\u00a0 https:\/\/www.braze.com\/privacy
\n\u2022 CHARGEBEE INC. provides us with billing and payment services. More information is available on Chargebee\u2019s Privacy Policy at:\u00a0\u00a0 https:\/\/www.chargebee.com\/privacy\/
\n\u2022 Chart.io allows us to combine data from different systems and databases to perform data analysis to provide and improve the service. For more information, visit their Privacy Policy:\u00a0 https:\/\/chartio.com\/about\/legal\/privacy\/
\n\u2022 Cleverbridge, Inc. provides us with billing services. For more information, visit Cleverbridge\u2019s Privacy Policy at:\u00a0 https:\/\/www.cleverbridge.com\/corporate\/privacy-policy\/
\n\u2022 Mailchimp (The Rocket Science Group LLC d\/b\/a Mailchimp): is our mail marketing service provider. For more information, visit Malchimp\u2019s Privacy Policy at:\u00a0 https:\/\/mailchimp.com\/es\/help\/about-the-general-data-protection-regulation\/
\n\u2022 PayPal, Inc. provides us the billing service \u201cBraintree\u201d. You can find more information here\u00a0 https:\/\/www.braintreepayments.com\/en-es\/legal
\n\u2022 Segment.io, Inc. (Twilo, Inc. d\/b\/a\/ Segment.io, Inc.) provides us with a CDP (Customer Data Platform) to manage our customers\u2019 data to provide the service. For more information, visit Segment\u2019s Privacy Policy at:\u00a0 https:\/\/segment.com\/legal\/privacy\/
\n\u2022 Stripe, Inc. provides us with the payment services. You can find more information, visit Stripe\u2019s Privacy Policy:\u00a0 https:\/\/stripe.com\/it\/privacy-center\/legal
\n\u2022 Zendesk Inc.\u00a0provides Qustodio with support services outside the European Economic Area (USA). For more information, visit Zendesk\u2019s Privacy Policy at: https:\/\/www.zendesk.com\/company\/agreements-and-terms\/privacy-notice\/<\/span>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

QUSTODIO FAMILY PRIVACY POLICY Last Updated: [2025 04 14] Qustodio Technologies SL (\u201cQustodio\u201d, the \u201cCompany\u201d, or \u201cwe\/us\u201d) is committed to respecting and protecting your privacy and that of your Users. This Privacy Policy explains our practices regarding the use of personal data collected and processed through our Qustodio Family Services (the \u201cServices\u201d or \u201cQustodio Services”). […]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"\r\n

Qustodio Privacy Policy<\/h1>\r\n

Qustodio Technologies S.L. (the \u201cCompany\u201d or \u201cWe\/us\u201d) is committed to respecting and protecting the privacy of all visitors of our Website (www.qustodio.com) This Privacy Policy explains our practices regarding the use of personal data collected and processed through our Website or otherwise provided to us by email or via other websites that link to us. Please note that this privacy policy doesn\u2019t regulate the processing of personal data collected through our services, if you want to know more about how we process our users\u2019 data, please read the legal terms of our services.<\/p>\r\n

The data controller of the data you provide us with is Qustodio Technologies SL, with domicile at Roger de Flor Street, 193, bajos, 08013 Barcelona, Spain.<\/p>\r\n

You can contact the Data Protection Officer to send any suggestions, queries, doubts or complaints regarding data protection by writing to:\u00a0dpo@qustodio.com<\/a><\/p>\r\n

1. User acceptance of this Privacy Policy<\/strong><\/p>\r\n

By accessing to or using our Website, and in particular by providing your personal information to us, or contacting us for any reason, you are required to explicitly accept this Privacy Policy and provide us with full consent, when needed, to the collection, storage and processing of personal data for which you are responsible in accordance with the terms set out in this policy, including the sending of electronic communications, as the case may be.<\/p>\r\n

2. Personal data collection<\/strong>\u00a0Contact data:<\/strong>\u00a0If you send us any email with personal data about you or a third party, we will process the personal data you send us.<\/p>\r\n

Navigation data.<\/strong>\u00a0Due to internet communication standards, when you visit our Website we automatically receive the URL of the site you came from and the site you visit when you leave our website. We also receive the Internet Protocol (\"IP\") address of your computer and the type of browser you are using. We use this information to analyze overall trends to improve the service. This information is not shared with third parties without your consent. Other than the above, and as stated in our\u00a0cookie policy<\/a>, we do not collect any personal data if you are only browsing the website.<\/p>\r\n

3. Legal basis<\/strong>\u00a0The legal bases of this processing are:<\/p>\r\n