GDPR Compliance
Effective Date: February 1, 2026
Mind the Gap is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). As an Irish-based company serving students across the EU, we take data protection seriously.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you. This includes your diagnostic results, study history, and account information. We will provide this data in a structured, commonly used, and machine-readable format within 30 days.
Right to Rectification
If any of your personal data is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly through your account settings, or contact us for assistance.
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data at any time. We will permanently delete your account and all associated data within 30 days, except where we have a legal obligation to retain certain information.
Right to Restrict Processing
You can request that we limit how we process your data in certain circumstances, such as when you contest the accuracy of your data or object to processing.
Right to Data Portability
You can receive your personal data in a portable format and transmit it to another service provider. We provide data exports in JSON and CSV formats.
Right to Object
You can object to processing of your personal data for direct marketing purposes or where we process your data based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affects you. While our platform uses AI for personalized recommendations, all study plans can be manually customized.
Lawful Basis for Processing
We process your data under the following legal bases:
- Consent: You provide explicit consent when creating an account and completing the diagnostic
- Contract: Processing is necessary to provide the services you've subscribed to
- Legitimate Interests: We process data to improve our platform and provide customer support
- Legal Obligation: We retain certain data to comply with financial and legal requirements
Data We Collect
We collect and process the following categories of personal data:
- Identity Data: Name, username, date of birth
- Contact Data: Email address, school affiliation
- Diagnostic Data: Learning profile, cognitive assessment results
- Usage Data: Study sessions, materials accessed, performance metrics
- Technical Data: IP address, device type, browser information
Data Retention
We retain your personal data for as long as you maintain an active account. After account deletion:
- Most data is immediately deleted
- Some anonymized data may be retained for research and analytics
- Financial records are retained for 7 years as required by Irish law
- Backup copies are purged within 90 days
International Data Transfers
Your data is primarily stored on servers within the EU (Ireland and Germany). If we transfer data outside the EU, we ensure appropriate safeguards are in place through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for certain countries
- Your explicit consent where required
Children's Data
For users under 16, we require verifiable parental consent before processing personal data. Parents and guardians can:
- Review their child's data
- Request corrections or deletions
- Withdraw consent at any time
- Access their child's study activity and progress
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the Irish Data Protection Commission within 72 hours
- Inform affected users without undue delay
- Provide details about the breach and steps taken to mitigate harm
Exercising Your Rights
To exercise any of your GDPR rights, contact our Data Protection Officer:
Email: dpo@mindthegap.ie
Address: Data Protection Officer, Mind the Gap Ltd., Dublin, Ireland
We will respond to requests within 30 days. For complex requests, we may extend this period by an additional 60 days with explanation.
Complaints
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with:
Data Protection Commission (Ireland)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Phone: +353 (0)761 104 800
Website: www.dataprotection.ie
Contact Us
For questions about GDPR compliance or data protection:
Email: dpo@mindthegap.ie
Phone: Available upon request
Address: Mind the Gap Ltd., Dublin, Ireland