Privacy Policy
Privacy Policy
1. Scope
This privacy policy applies worldwide to visitors of this website. It is intended to comply with the GDPR (EEA), the UK GDPR (United Kingdom), Swiss data protection rules, Google's EU User Consent Policy for advertising and measurement technology, and, where applicable, US state consumer privacy laws (such as CCPA/CPRA). If local rules are stricter than this policy, we follow those stricter rules. This policy applies to this site and to all websites and subdomains that use the same codebase as edupics.com.
2. Data we collect
2.1 Data collected automatically
On every visit we automatically process technical and usage data, including:
- IP address (full, unmasked), device identifiers and browser data;
- pages visited, click and scroll actions, timestamps;
- referrer and domain/subdomain used;
- consent status from the cookie banner/CMP;
- precise location data (for example at neighborhood or zip code level) where derived from your IP address or provided by your browser.
We use this data for security, error analysis, statistics, capacity planning and abuse prevention.
2.2 Data you provide
When you submit a form or use an account feature, we may receive the following data:
- name;
- email address;
- account or profile settings;
- the content of your message, feedback or submission.
We use this data to respond to your request, to manage accounts or to deliver the service you asked for.
2.3 Processing of granular technical data (IP addresses and precise geolocation)
To facilitate a secure and high-performance advertising environment, we and our authorized advertising technology partners (including Google Ad Manager and its bidding partners) collect and process the full, unmasked Internet Protocol (IP) address of your device. This data is used for the following purposes:
- Security and fraud prevention: we use the full IP address to identify and mitigate sophisticated invalid traffic (IVT), such as botnets, click farms and non-human engagement.
- Precise geolocation: we process the full IP address to determine your approximate location, typically at neighborhood or zip code level, in order to serve relevant local content and advertisements.
- Ad delivery and attribution: to ensure you do not see the same advertisement excessively (frequency capping) and to measure whether an ad led to a specific action.
Legal basis (EEA, UK, Switzerland): for security and fraud prevention we rely on legitimate interest (IAB TCF Special Purpose 2). For precise geolocation and ad personalization we rely exclusively on your explicit consent, given via our Consent Management Platform (IAB TCF Feature 3).
Data sharing: your full IP address is shared in real time with authorized third-party vendors (advertising technology providers and demand-side platforms) through the ad-bidding process. These vendors are contractually prohibited from using this data for any purpose other than those disclosed here. You can view the current list of these partners at any time through the "Cookie Settings" or "Privacy Settings" link in our footer, which opens our Consent Management Platform.
Data retention: IP addresses used for advertising purposes are typically anonymized or deleted by our partners within 9 to 18 months, in accordance with industry standards and Google's data retention policies.
Your rights and opt-out:
- Global users: you may withdraw consent for precise tracking at any time via the "Privacy Settings" or "Cookie Settings" button in our footer.
- California / US residents: you may limit the use of your "Sensitive Personal Information" (precise geolocation) by clicking the "Limit the Use of My Sensitive Personal Information" link in our footer.
3. Purposes and legal basis (EEA/UK/Switzerland)
We process personal data for the following purposes and on the following legal bases:
- to provide and secure the website: legitimate interest;
- to measure usage and performance: legitimate interest or consent, depending on the tool used;
- to show ads and perform ad measurement: only after consent via the banner/CMP;
- for communication, accounts and support: performance of a contract or pre-contractual steps;
- to comply with laws and regulations: legal obligation.
Where we ask for consent, you can withdraw it at any time via the banner. Withdrawal does not have retroactive effect.
4. Cookies, tracking and consent
4.1 Cookie banner/CMP linked to Google
On your first visit we display a cookie banner or consent management platform (CMP) that is linked to Google and comes from the AdSense/Google consent functionality. This is a Google-certified CMP that implements the IAB Europe Transparency and Consent Framework (currently TCF 2.2) for the EEA, the UK and Switzerland, so that your consents, including the TCF consent string and related signals, can be technically passed on to Google and to advertising and measurement partners. Through this banner you can consent to or refuse non-essential cookies, personalised ads and measurement/reporting. Without consent we only show non-personalised ads or we limit tracking. Certain limited processing by Google for security, fraud prevention and aggregated reporting may still occur based on Google's own legal basis. This is mandatory for visitors from the EEA, the UK and Switzerland. You can reopen your preferences later through the same banner. You can also block cookies in your browser, but this may limit the functionality of the site.
We use Google Consent Mode (currently version 2) to pass on the consent status you selected to Google for the categories ad_storage, analytics_storage, ad_user_data and ad_personalization. These signals determine whether ads may be personalised, whether only contextual or non-personalised ads are shown, and which measurement and reporting data is sent. Users can also opt out of some third-party vendors' uses of cookies for personalised advertising by visiting the industry opt-out pages that are available in their region. Third-party vendors, including Google, use cookies and other identifiers to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables Google and its partners to serve ads to your users based on their visit to your sites and/or other sites on the Internet. Users may opt out of personalised advertising by adjusting their advertising settings with Google or, where available, via industry-wide opt-out tools. If consent is refused, we only send limited, cookieless requests (pings) to Google so that basic reporting, security and fraud prevention can continue to function, in line with Google Consent Mode v2.
4.2 Types of cookies and technology
We may use the following types of cookies and similar technologies:
-
<
- strictly necessary cookies (session, security, language, load balancing and usage limits for generators);
- analytics (e.g. Google Analytics) for visitor statistics, if enabled;
- advertising and measurement tags (AdSense/Google Ads only) for ad delivery and performance measurement;
- consent storage to remember your choices.
4.3 Consent logging
We log your consent or refusal in a log and/or through the CMP so that we can demonstrate that you made a choice and so that this choice can be applied again on future visits. We keep these records as long as needed to comply with applicable law and Google requirements. You can reopen your choice at any time through the banner.
5. Sharing of data
We do not sell personal data. We only share data with the following categories of recipients, and only insofar as necessary:
- hosting and infrastructure providers;
- analytics and advertising providers (such as Google) if consent has been given;
- advertising technology providers and demand-side platforms (DSPs) participating in the real-time bidding process, if consent has been given;
- consent/cookie management providers;
- competent authorities, if legally required.
Where possible we conclude data processing agreements or we rely on the standard terms of the provider.
5.1 Google AdSense, Google Ad Manager and advertising partners
We use Google AdSense and Google Ad Manager for ads and measurement. Google (Google Ireland Limited and, where applicable, Google LLC) may in that context process personal data as an independent controller for ad delivery, ad measurement, fraud prevention, reporting and improvement of ad products. Through Google Ad Manager's real-time bidding process, your data — including your IP address — may also be shared with authorized advertising technology providers and demand-side platforms (DSPs) participating in the auction. Google processes data according to its own privacy and advertising policies. More information is available at:
- Google Advertising Technologies: https://policies.google.com/technologies/ads
- How Google uses information from sites or apps that use our services: https://policies.google.com/technologies/partner-sites
Because you make your choices in the Google-managed CMP, the current list of advertising and measurement technologies can differ over time and per region. The version shown in the banner/CMP is leading.
6. International transfers
Because some of our providers operate globally, processing can take place outside the EEA (for example in the United States). In such cases we use appropriate safeguards, such as EU-approved standard contractual clauses, and we limit the transfer to what is necessary for the purpose.
7. Retention periods
- accounts and profile data: as long as the account is active; deletion within 30 days after termination;
- contact and support requests: up to 12 months after handling;
- log and security data: up to 12 months, longer in case of incidents or legal necessity;
- advertising logs (including IP address data processed for ad delivery, fraud prevention and measurement): typically anonymized or deleted within 9 to 18 months, in accordance with industry standards and Google's data retention policies;
- anonymised or aggregated statistics: unlimited, since this is no longer personal data;
- consent logs for cookies/ads: as long as needed to meet legal and Google obligations.
8. Minors
This website and the related tools are intended for teachers, educators, caregivers and parents who want to use material with children. The website is not intended for independent use by minors and is not aimed at direct processing of minors' personal data. If a minor does submit personal data without permission or involvement of an adult, we delete such data once we become aware of it. In regions where online consent for children is required (for example EEA, UK, Switzerland) we assume that the adult using the site has such consent or offers the material to the children themselves. We pass on to Google through the available settings and consent mode which ad settings apply to this type of use.
9. Your rights in the EEA/UK/Switzerland
If you live in the EEA, the UK or Switzerland, you can, depending on the legislation, exercise the following rights:
- right of access;
- right to rectification;
- right to erasure (where permitted);
- right to restriction of processing;
- right to object to processing based on legitimate interests;
- right to data portability;
- right to withdraw consent.
You can exercise these rights by sending an email to the address at the bottom of this policy. We may ask you to confirm your identity. Requests are handled within the legal timeframe.
10. Rights for residents of certain US states
If you live in a US state with a valid consumer privacy law (for example California/CPRA, Colorado, Connecticut, Virginia), you may have additional rights, such as:
- right to know which categories of personal data are collected and for what purposes;
- right to access your personal data;
- right to correct or delete your personal data;
- right to opt out of sale or sharing of personal data, if applicable;
- right to limit the use and disclosure of sensitive personal information (including precise geolocation);
- right to non-discrimination when exercising your rights.
To make these rights easy to exercise, we provide the following controls:
- "Do Not Sell or Share My Personal Information" — available as a link in the footer of every page. This allows California residents (and residents of other US states where this right applies) to opt out of the sale or sharing of their personal data in the context of Google AdSense, Google Ad Manager and comparable advertising and measurement technologies.
- "Limit the Use of My Sensitive Personal Information" — available as a link in the footer of every page. This allows California residents to limit the use of sensitive personal information, including precise geolocation derived from the IP address.
Where technically available on our site, we also respect browser-based opt-out signals (such as Global Privacy Control) for the sale or sharing of personal data insofar as this can be applied to the use of Google AdSense and comparable advertising/measurement technologies. If your state law grants rights that cannot be exercised through the footer links above, you can exercise them via the contact address below; we will process your request according to the applicable law and apply it to the Google services we use insofar as they fall under that law. If your request can be refused under local law, you will receive a motivation.
11. Security
We take technical and organisational measures proportionate to the risks, such as access control, secure connections and logging. Full security on the internet cannot be guaranteed. In case of a data breach that may affect your rights and freedoms, we follow the applicable notification obligations.
12. Complaints
You can first submit a complaint to us via the email address below. You also have the right, depending on your place of residence or establishment, to lodge a complaint with the competent data protection authority in your jurisdiction (for example a European supervisory authority, the UK ICO, the Swiss authority or the competent authority in your state or country). We follow the complaints procedure as prescribed by that authority.
13. Changes
We may amend this privacy policy if our processing changes, if our suppliers change, or if legislation or platform requirements (such as Google) change. The most recent version will always be published on the website.
14. Controller
Colorpix
Oude Molenstraat 13, 8400 Oostende, Belgium
Email: edupics.info@gmail.com
This policy applies to this site and to all websites and subdomains that use the same codebase as edupics.com. Where and insofar as privacy law outside the EEA (such as the UK GDPR or Swiss law) requires the appointment of a local representative, this is done through the controller named above or a representative appointed by them.
