Who processes the data
The data of website visitors and of persons who submit an enquiry is processed by Հովհաննես Խարազյան ԱՁ (Tax ID 78046621, Մամիկոնյանց 21/1, ք. Երևան, Հայաստան). For any question, use the email address given at the bottom of the page.
Two different roles: this is the most important section
Campus Life is a B2B platform, and our role in respect of data differs depending on whose data is concerned.
- In respect of the data of website visitors, of persons who submit an enquiry and of dashboard users, we are the party responsible for the processing: we ourselves determine why and how that data is processed.
- In respect of the data of the students, parents and staff of the Academy, the responsible party is the Academy. We act as a party acting on its instructions: we store the data and keep the system running, but we do not determine whose data is collected or why.
In practice this means the following. If you are a student and wish to know what data has been collected about you, contact your academy. We cannot provide or delete it without instructions from the academy, because it is not our data.
What data we collect
The enquiry form on the website:
- the name of the academy;
- the name of the contact person;
- a telephone number and an email address;
- the range of the approximate number of students;
- your message, if you have filled it in;
- the fact of consent, with its date and the version of the document.
The dashboard account:
- first name and surname;
- an email address;
- the hash of the password: we do not store the password itself and cannot recover it, only replace it with a new one.
Technical data:
- the hash of the IP address, used to limit the rate of form requests; we do not store the address itself;
- the type of browser and the time of the request, in the server logs;
- information about errors, used to analyse failures.
We do not collect and do not ask for data on health, religious beliefs or any other special category of data, nor for payment card details.
Why we process the data and on what basis
- To answer an enquiry and to demonstrate the platform. The basis is your consent, which you give when submitting the form.
- To perform the contract: granting access, issuing invoices, technical support. The basis is the contract or the steps taken towards concluding it.
- To protect the service against spam and bulk requests. The basis is our legitimate interest in keeping the service running reliably.
- To comply with the requirements of the law: retention of accounting and tax records. The basis is the law.
You may withdraw your consent at any time by writing to us. Withdrawal does not affect the lawfulness of the processing carried out before it.
Cookies and browser storage
The website has no visitor counters, no advertising pixels and no other third-party tracking tools. This is enforced technically: the security policy of the website prohibits any script loaded from outside.
5.2One cookie is used, __Host-cl_session: it holds the session of a user signed in to the dashboard, and without it signing in is impossible. It is technically necessary, and for that reason we do not show a separate consent dialogue.
5.3Your browser storage (localStorage) holds only presentation settings: the light or dark theme and interface preferences. This data is not sent to the server.
How long we keep the data
- Enquiries: up to 3 years from the date of the enquiry, so that the history of contact can be reconstructed.
- Dashboard accounts: for the duration of the subscription and for 30 days after its termination.
- Server logs: up to 90 days.
- Accounting records: for the period laid down by the legislation of the Republic of Armenia.
Once the period has expired the data is deleted, including from backups, within a reasonable time.
Who we share the data with
We do not sell data and do not share it for advertising purposes. We share it only with the suppliers without which the service would not work, and only to the extent necessary:
- the cloud infrastructure provider, for servers and databases;
- the domain and network protection provider;
- the email delivery provider;
All suppliers act on our instructions and are obliged to maintain confidentiality. The current list is in the last section; it is updated whenever a supplier changes.
7.3Data may also be provided to the competent state authorities, in the cases and in the manner laid down by law.
Where the data is stored
The servers are located outside Armenia, with a cloud provider operating in the countries of the European Union. A cross-border transfer of data therefore takes place.
8.2The selected jurisdiction affords a comparable level of protection of personal data, and relations with the provider are governed by confidentiality terms.
Security
- All transmission takes place over an encrypted connection (HTTPS).
- Passwords are stored as a one-way hash, not in clear text.
- Each academy has a separate database and separate storage.
- Access to the areas of the dashboard is determined by role: an academy technically cannot reach the data of another academy.
- Backups are performed regularly.
No system can guarantee absolute security. In the event of a data breach that presents a risk to rights, we notify the persons concerned and the competent authority in the manner laid down by law.
Your rights
Under the law of the Republic of Armenia on the protection of personal data you have the right:
- to know whether your data is being processed, and to obtain a copy of it;
- to know the purpose of the processing, its legal basis and the range of persons to whom the data is disclosed;
- to require the correction of inaccurate data;
- to require the deletion of the data or the blocking of its processing, in the cases provided for by law;
- to withdraw consent given earlier;
- to appeal against our actions.
Send your request to the email address given at the bottom of the page. We reply within the period laid down by law. To confirm your identity we may ask for additional data: this is done so that your data is not disclosed to someone else.
10.3If our reply does not satisfy you, you may apply to the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.
Data of minors
The website is addressed to the managers of training centres, not to children. We do not collect the data of minors directly.
11.2The data of students who are minors is entered into the platform by the Academy, and it is the Academy that obtains the consent of a parent or legal representative, in accordance with the division of roles described in section 2.
The mobile app
The mobile app collects the same data as the web version, plus only what it cannot work without:
- a notification identifier (push token) — only if you have enabled notifications; it lets a notification reach your device and reveals nothing else about you;
- technical details of the device and app: model, operating system version and app version — for diagnosing failures;
- the permissions you grant — for example access to the camera or photo library if you upload a profile picture; they are requested at the moment of the action and can be withdrawn at any time in the device settings.
The app contains no advertising or third-party analytics tools: we do not collect the advertising identifier, do not track users across apps, and do not sell data.
Deleting an account and its data
Deletion can be requested without contacting us: a student does it in the app, an academy in the dashboard. The procedure, the list of data erased and retained, and the timing are described on a separate page at campuslife.am/account-deletion.
13.2A student’s learning data is controlled by their academy, so the academy carries out their request. If the academy does not reply, write to us and we will pass the request on as the data processor.
Changes to this document
This policy may be updated as a result of a change in the service or of the requirements of legislation. The current version is always available at campuslife.am/privacy, with the date of the last update.
14.2We give notice of material changes by email or in the dashboard.
Annex: the current list of suppliers
This list is updated separately, without changing the rest of the policy. As matters currently stand:
- Google Cloud — cloud infrastructure: servers and databases.
- Cloudflare — domain services and network protection.
- An email provider — delivery of service messages.
Payment is made by bank transfer against an issued invoice. We do not request, process or store payment card details. This document is a translation. In case of any discrepancy the Armenian version published at campuslife.am prevails.
Service provider
Հովհաննես Խարազյան ԱՁ
- Tax ID
- 78046621
- Website
- campuslife.am
- Address
- Մամիկոնյանց 21/1, ք. Երևան, Հայաստան
- [email protected]