The data controller responsible for personal data is:

Compass to Wonder
Email: compasstowonder@gmail.com
Location: The Netherlands

We collect only the personal data necessary to operate the project.

a. Parents / Guardians

• Full name
• Email address
• Postal address
• City and country
• Optional phone number

b. Children (with parental consent)

• First name
• Age
• Preferred language
• Creative contributions (e.g., drawings)

c. Schools, Classrooms, and Partners

• Teacher/contact name
• School or organization name
• Email address
• Location (city/country)
• Number of participants and age group
• Optional project description

We do not intentionally collect sensitive personal data.

We collect only the data necessary to operate the project.

a. Parents / Guardians and Child Participation

· Parent/guardian name

· Email address

· Postal address (for sending materials)

· Country and city

· Child’s first name and age

· Language preference

· Optional information (e.g., drawing interests)

b. Schools and Classrooms

· Teacher/contact name

· School name

· Email address

· Location (city/country)

· Number of students

· Age group

c. Creative Partnerships

· Organization name

· Contact person

· Email address

· Location

· Organization type

· Project description (optional)

To exercise your rights, contact:
compasstowonder@gmail.com

We process personal data solely for the following purposes:

• To organize and manage participation in storytelling activities
• To send and receive drawings and materials by post
• To communicate with participants regarding the project
• To create, compile, and distribute collaborative story materials
• To share project materials with schools, partners, and publishers for production, distribution, or archival purposes
• To maintain essential administrative records
• To improve the project experience over time

We do not use personal data for advertising, profiling, or automated decision-making.

We process personal data on the following legal bases:

• Consent — provided by parents or legal guardians for children’s participation and data processing
• Contractual necessity — where processing is required to fulfill participation in the project

We do not rely on legitimate interest for processing children’s personal data.

We take the protection of children’s data seriously:

• Participation is permitted only with verifiable parental or guardian consent
• We take reasonable steps to confirm that consent is given by a parent or legal guardian
• We collect only minimal personal data (first name, age, language)
• We do not collect sensitive personal data
• Children’s data is never used for marketing or profiling

Children’s drawings and creative contributions are central to the project.

• Drawings may be used to create collaborative stories and materials
• Only a child’s first name and age may be used, and only with consent
• We avoid publishing full names, contact details, or precise location data of children
• Public sharing (e.g., website, exhibitions, publications) occurs only with explicit parental consent

Children and their parents/guardians retain ownership of all creative contributions.

By participating, parents/guardians grant Compass to Wonder and its partners (including publishers) a:

non-exclusive, worldwide, perpetual, and irrevocable license to:

• Use, reproduce, and share drawings within the project
• Adapt, edit, and incorporate drawings into collaborative stories
• Publish drawings in printed and digital formats (including books and archives)
• Distribute materials through partners and publishers
• Preserve and document the project over time

This license:

• Does not transfer ownership
• Is granted without compensation
• Remains valid indefinitely, including after participation ends
• Applies to existing and future project materials

For clarity:

• Personal data (e.g., names, email addresses) is protected under GDPR
• Creative contributions (e.g., drawings) are treated as creative works and are not considered personal data unless they contain identifiable information

Requests relating to personal data do not automatically apply to creative works already incorporated into project materials.

We do not sell, rent, or trade personal data.

Personal data may be shared only where necessary with:

• Postal and delivery service providers
• Essential service providers (e.g., hosting, form processing)
• Schools, classrooms, and project partners
• Publishers and collaborators, solely for the purpose of producing, distributing, or archiving project-related materials

All third parties are required to process data securely and in compliance with GDPR.

Postal address data is used solely for delivery purposes and is not shared beyond necessary logistics providers.

We retain personal data only as long as necessary:

• During active participation in the project
• For limited administrative, legal, or archival purposes after participation ends

Personal data may be deleted upon request, except where retention is necessary for:

• Legal obligations
• Administrative record-keeping
• Archival purposes in the public or creative interest

Creative contributions and published materials:

• May be retained indefinitely as part of the project archive
• May continue to be used under the granted license, even if associated personal data is deleted

We implement appropriate technical and organizational measures, including:

• Secure, password-protected systems
• Restricted access to authorized individuals only
• Careful handling of physical materials

While no system is completely secure, we take reasonable steps to protect all data.

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of personal data (subject to legal and archival limitations)
• Withdraw consent at any time
• Restrict or object to processing
• Request data portability

Withdrawal of consent applies to future processing of personal data and does not affect:

• The validity of licenses granted for creative contributions
• The use of materials already published or produced

To exercise your rights, contact:
compasstowonder@gmail.com

We maintain records of consent to demonstrate compliance.

• Only minimal cookies are used for essential functionality or anonymized analytics
• No advertising or tracking cookies are used
• Users may manage cookies via browser settings

For more details, see our Cookie Policy.

Where personal data is processed outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with GDPR.

We may update this Privacy Policy periodically.
The most current version will always be available on the website. Continued participation indicates acceptance of updates.

For questions about this Privacy Policy or data handling:

Compass to Wonder
Email: compasstowonder@gmail.com

If you believe your data has been handled improperly, you may lodge a complaint with:

Autoriteit Persoonsgegevens

https://autoriteitpersoonsgegevens.nl