GDPR Information

This notice supplements our Privacy Policy and describes how Macenta Publishing & Digital Solutions processes personal data of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland when they use Learn with Odi(the "Service"), in accordance with the General Data Protection Regulation (GDPR) and applicable local laws.

1. Data controller

Macenta Publishing & Digital Solutions
Istanbul, Turkey
Email: destek@macenta.com.tr

Where your school or organization contracts with us, we may process student data on behalf of the institution as a processor; the institution remains responsible for providing appropriate notices to students and parents.

2. Categories of personal data

• Identity and account data (username, role, school affiliation);
• Educational and usage data (progress, assignments, assessments, badges);
• Technical and security data (IP address, device logs);
• Communication data (support requests, notification preferences).

3. Purposes and lawful bases

We process personal data for the purposes below on the following bases:

• Contract — to provide the Service under agreements with schools and authorized users;
• Legitimate interests — to secure the platform, prevent misuse, and improve functionality, balanced against your rights;
• Legal obligation — where we must comply with applicable law;
• Consent — where required, for example optional push notifications (you may withdraw consent at any time).

4. Recipients and processors

We use trusted subprocessors, including cloud hosting and authentication services, that process data only on our instructions and subject to data protection agreements. We do not sell personal data.

5. International transfers

Personal data may be transferred outside the EEA/UK. Where required, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms approved under GDPR.

6. Retention

We retain personal data only for as long as necessary for the purposes described above, including contractual, educational, and legal retention requirements. When data is no longer needed, we delete or anonymize it.

7. Your rights under GDPR

Subject to conditions in law, you have the right to:

• Access — obtain a copy of your personal data;
• Rectification — correct inaccurate data;
• Erasure — request deletion in certain circumstances;
• Restriction — limit processing in certain circumstances;
• Data portability — receive data you provided in a structured, commonly used format where processing is based on consent or contract and carried out by automated means;
• Object — object to processing based on legitimate interests;
• Withdraw consent — where processing is based on consent, without affecting prior lawful processing.

To exercise these rights, email destek@macenta.com.tr. We may need to verify your identity and coordinate with your school where accounts are institution-managed.

You also have the right to lodge a complaint with your local supervisory authority. In Türkiye, you may contact the Personal Data Protection Authority (KVKK). In the EU/UK, contact the authority in your country of residence or work.

8. Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects solely based on automated processing.

9. Cookies and similar technologies

We use essential cookies and local storage required for authentication and session management. Optional analytics or marketing cookies, if introduced, will be described in an updated notice with choices where required by law.

10. Updates

We may update this GDPR notice. Material changes will be reflected on this page with an updated "Last updated" date.

11. Contact

For GDPR-related requests: destek@macenta.com.tr.