Data Protection (GDPR)

Effective Date: May 15, 2025

EXPLR is committed to protecting the personal data of our users in the European Union and United Kingdom. This page explains how we comply with the General Data Protection Regulation (GDPR) and UK GDPR, particularly in connection with credentialing, gated content, and National STEM Festival submissions.

1. EXPLR as Data Controller
   EXPLR PBC Inc. (82 Nassau Street, New York, NY 10038) is the Data Controller for personal data collected through credentialing, gated content, subscriptions, and National STEM Festival submissions. We determine the purpose and means of processing.

2. Age Requirements
   – European Union & UK: Users must be at least 16 years old to participate in credentialing programs, access gated content, or submit to the National STEM Festival independently.
   – United States: Users must be 13 or older (in line with COPPA).
   – Globally, EXPLR applies the higher threshold of 13, 16, or the age of majority in the user’s jurisdiction.

3. Lawful Basis for Processing
   We process personal data under the following legal bases:
   – Consent – when users opt in to credentialing, submissions, or subscriptions.
   – Contract – when processing is necessary to deliver services you request.
   – Legitimate Interests – for improving services, analytics, and security.
   – Legal Obligation – when required by applicable law.

4. Service Providers & Data Sharing
   EXPLR uses trusted third-party platforms to deliver credentialing, submissions, and gated content. We rely on each provider’s published GDPR commitments and standard contractual terms. Data is shared only to the extent needed for credentialing, submissions, or service delivery.

   Provider	Purpose	Data Shared	Data Location
   Airtable	Credentialing workflows and project tracking	Name, email, project/credential info	US (with SCCs & GDPR terms)
   Credly (Pearson)	Issuance and verification of digital credentials	Name, email, credential records	US/EU (with GDPR commitments)
   Tally.so	Submission forms for credentialing and challenges	Name, email, responses, project uploads	EU-hosted servers
   Uscreen	Hosting of gated content, courses, and subscriptions	Name, email, subscription activity, payments	US (with GDPR & CCPA compliance features)
   Submittable	Student submissions for the National STEM Festival	Name, email, project overview PDFs, video uploads	US (with GDPR & SCC commitments)

5. Data Retention
   We retain personal data only as long as necessary for the purpose collected, unless a longer period is required by law. Credentialing and submission records may be retained to preserve the integrity of issued credentials and competition results.

6. Your Rights under GDPR
   Users in the EU/UK have the right to:
   – Access their personal data
   – Correct inaccurate information
   – Request deletion (“right to be forgotten”)
   – Restrict or object to processing
   – Data portability (receive a copy in a structured format)
   – Withdraw consent at any time
   
   To exercise these rights, contact us at hello@explr-media.com. We will respond within the timeframes required by law.

7. International Transfers
   Where data is transferred outside the EU/UK (e.g., to the United States), we rely on providers’ published GDPR commitments, including Standard Contractual Clauses (SCCs) or equivalent safeguards, to protect your data.

8. Contact Information
   If you have questions about GDPR compliance or wish to exercise your rights, please contact:
   
   EXPLR PBC Inc.
   82 Nassau Street
   New York, NY 10038
   Email: hello@explr-media.com

Disclaimer
EXPLR has not executed bespoke Data Processing Agreements with Airtable, Credly, Tally.so, Uscreen, or Submittable. We rely on each provider’s published GDPR compliance terms and contractual commitments. This page will be updated if our approach changes or if additional providers are engaged.