Privacy Policy

1. Introduction

Welcome to Evox Exam. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you use our platform, in compliance with the General Data Protection Regulation (GDPR).

The Data Controller responsible for your information is The Evox Exam Team, located in Croatia.

2. Information We Collect

We collect different types of information to provide our exam services effectively:

• Identity Data: Name, username, email address, and profile picture.
• Exam Data: Questions created, answers submitted, test scores, completion time, real-time online presence status during an exam, and feedback provided within the platform.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, device information, and specific interactions during an exam (such as switching tabs, losing window focus, or exiting fullscreen mode). This is used for security and anti-cheat mechanisms.
• Usage Data: Information about how you use our website (e.g., pages visited, session duration).

3. Legal Basis for Processing (GDPR)

Under GDPR, we rely on the following legal bases to process your personal data:

• Contractual Necessity: We need to process your Identity and Exam Data to create your account, administer exams, and grade results as per our Terms of Service.
• Legitimate Interests: We process Technical Data to maintain platform security, prevent fraud (cheating), and improve our services.
• Legal Obligation: We may keep certain records to comply with tax or legal requirements.

4. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Generally, account data is kept until you delete your account. Exam results may be anonymized and retained for analytical purposes.

5. Information Sharing

We do not sell your personal data. We may share your data with:

• Service Providers: Third-party companies that provide hosting, database management, and email services. They are authorized to use your personal data only as necessary to provide these services to us.
• Legal Authorities: If required by law or in response to valid requests by public authorities.

6. International Data Transfers

Some of our external third parties (like cloud hosting providers) are based outside the European Economic Area (EEA) (e.g., in the USA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by using specific contracts approved by the European Commission (Standard Contractual Clauses).

7. Your Data Protection Rights

If you are a resident of the EEA, you have the following rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct any information you believe is inaccurate.
• Right to Erasure ("Right to be Forgotten"): You can request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data.
• Right to Data Portability: You can request that we transfer the data that we have collected to another organization, or directly to you.

To exercise these rights, please contact us at support@evox-exam.jakovcicek.from.hr.

8. Cookies

We use essential cookies to keep you logged in and ensure the platform functions correctly. We do not use tracking or advertising cookies without your explicit consent. You can set your browser to refuse all or some browser cookies, but this may cause parts of the Service to function incorrectly.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: support@evox-exam.jakovcicek.from.hr.