The FeedbackFruits Privacy Policy (Processor)
Date: 19 September 2025
Welcome to FeedbackFruits’ (FeedbackFruits, we, us, our) privacy policy aiming at supporting data controllers in meeting their obligations under the General Data Protection Regulation (GDPR) and other applicable data protection laws. This document outlines how FeedbackFruits processes personal data on behalf of its partners in the role of a data processor, and provides transparency to help the controller complete their own privacy notice.
In case you are a user of FeedbackFruits services through your educational institution, please note that this policy can only be used for information purposes only. Any data processing related questions or concerns should be directed to your educational institution directly.
In case you are a visitor to our website, engaging with us in other ways (email or phone), a Learning Design Community member, or any other individual whose personal data we may collect and process in the course of our business activities, then this policy does not apply to you and please be referred to here.
In case you are a user of FeedbackFruits services through your educational institution, please note that this policy can only be used for information purposes only. Any data processing related questions or concerns should be directed to your educational institution directly.
In case you are a visitor to our website, engaging with us in other ways (email or phone), a Learning Design Community member, or any other individual whose personal data we may collect and process in the course of our business activities, then this policy does not apply to you and please be referred to here.
1. Important information and who we are
The role of FeedbackFruits
FeedbackFruits provides certain services to educational institutions through their own Learning Management Systems (LMS). Through the provision of these products and services, we collect personal data from or about their students. We consider such personal data to be strictly confidential and do not use such data for any purpose other than improving and providing our services to the educational institution and on its behalf.
With regards to the collection and further processing of such data, the educational institutions act as controllers and our collection, use and sharing of such personal data is governed by our contracts with the educational institutions and applicable laws. FeedbackFruits only processes personal data as instructed by the controller, in accordance with a valid Data Processing Agreement (DPA).
With regards to the collection and further processing of such data, the educational institutions act as controllers and our collection, use and sharing of such personal data is governed by our contracts with the educational institutions and applicable laws. FeedbackFruits only processes personal data as instructed by the controller, in accordance with a valid Data Processing Agreement (DPA).
Contact details
For questions regarding our role as data processor, please contact the FeedbackFruits entity listed in the DPA, at:
The FeedbackFruits entity defined in the DPA
Email address: helpme@feedbackfruits.com
Postal address: Danzigerkade 17, 1013 AP, Amsterdam, NL
The FeedbackFruits entity defined in the DPA
Email address: helpme@feedbackfruits.com
Postal address: Danzigerkade 17, 1013 AP, Amsterdam, NL
2. Categories of data
The types of personal data we process depend on the FeedbackFruits services used and on how the controller is using the service, and may include:
Identity Data includes first name, last name, username or similar identifier, job title and gender
Contact Data includes email address and telephone number
Technical Data includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices used to access the service.
Profile Data includes username and password, preferences, feedback.
Usage Data includes information about how our products and services are being used.
Communication Data includes support tickets, chat logs.
FeedbackFruits does not knowingly process Special Categories of Personal Data (this includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data), unless explicitly agreed with the controller.
Identity Data includes first name, last name, username or similar identifier, job title and gender
Contact Data includes email address and telephone number
Technical Data includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices used to access the service.
Profile Data includes username and password, preferences, feedback.
Usage Data includes information about how our products and services are being used.
Communication Data includes support tickets, chat logs.
FeedbackFruits does not knowingly process Special Categories of Personal Data (this includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data), unless explicitly agreed with the controller.
3. Purposes of processing
FeedbackFruits uses the personal data collected about users only for specific purposes. This includes offering our services to the institution, to manage accounts and registration, maintaining the service, to support technical operations and customer support and to fulfill our legal obligations.The table below provides a description of the ways in which FeedbackFruits processes personal data, as well as the the legal bases to do so. We have also identified what our legitimate interests are where appropriate.
Managing users’ FeedbackFruits account and registration, including enabling access to the Learning Design System
Activity
Managing users’ FeedbackFruits account and registration, including enabling access to the Learning Design System
Personal Data
Identity Data
Contact Data
Technical Data
Profile Data
Usage Data
Contact Data
Technical Data
Profile Data
Usage Data
To communicate with users in general, particularly regarding providing support to the FeedbackFruits service
Identity Data
Contact Data
Technical Data
Profile Data
Usage Data
Contact Data
Technical Data
Profile Data
Usage Data
To administer and protect our business, to resolve disputes or troubleshoot problems and to prevent potentially prohibited or illegal activities.
Identity Data
Contact Data
Technical Data
Profile Data
Usage Data
Contact Data
Technical Data
Profile Data
Usage Data
4. Subprocessors
FeedbackFruits maintains an up to date list of Sub-processors engaged in the processing of personal data, which is available in our Trustcenter.
The Controller may access this list at any time and may subscribe to receive notifications of any intended updates or changes to the list.
The Controller may access this list at any time and may subscribe to receive notifications of any intended updates or changes to the list.
5. Data transfers
Some Sub-processors may be located outside of the EEA/UK. In such cases, we ensure appropriate safeguards in place, including Standard Contractual Clauses (SCCs) and data transfer impact assessments. For further information on data transfers, please feel free to contact us.
6. Security measures
FeedbackFruits implements appropriate technical and organisational security measures. Please be referred to the FeedbackFruits Trust Center for more information.
7. Data Retention
FeedbackFruits retains personal data for as long as instructed by the controller, and in accordance with the Data Processing Agreement in place. Upon termination, FeedbackFruits will not retain Personal Data made available to it in the context of the Agreement any longer than is necessary to comply with its statutory obligations.
8. Data subjects rights
FeedbackFruits is a processor, and does not respond to data subject requests directly. We will assist the controller in fulfilling requests under the GDPR where applicable and upon request.
9. Data breach notification
In case of a data breach, FeedbackFruits notifies the controller without undue delay and provides to the controller the information necessary for complying with regulatory obligations. Upon request, FeedbackFruits cooperates fully with the controller to manage the data breach and to fulfill any resulting obligations.
We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy. We do not list every individual recipient of personal data in this Privacy Policy because our service providers and partners may change over time and listing every recipient would make this policy less clear and more difficult to maintain. Instead, we provide a list of recipient categories, which we believe is a more transparent and user-friendly approach.
Please feel free to contact us if you wish to obtain more specific information about our current service providers.
We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy. We do not list every individual recipient of personal data in this Privacy Policy because our service providers and partners may change over time and listing every recipient would make this policy less clear and more difficult to maintain. Instead, we provide a list of recipient categories, which we believe is a more transparent and user-friendly approach.
Please feel free to contact us if you wish to obtain more specific information about our current service providers.