Last updated: 12 October 2026
Schoolkuz
Website: www.schoolkuz.com
Welcome to Schoolkuz.
Schoolkuz is an online community marketplace designed primarily for school communities in Spain. It allows users to buy and sell school-related items, offer and find tutoring services, and communicate with other members of the community.
Although Schoolkuz primarily serves users in Spain, the Website is technically accessible from other countries.
We are committed to protecting your personal data and being transparent about how we collect, use, store and share it.
This Privacy Policy explains:
This Privacy Policy applies to visitors and registered users of www.schoolkuz.com (the "Website").
We process personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
The person responsible for determining the purposes and means of processing personal data on Schoolkuz (the "Data Controller") is:
Name: Evgeny Kuznetsov
Country: Spain
Email: contact@schoolkuz.com
The Data Controller's postal address is available in the Website's Legal Notice.
For any questions concerning this Privacy Policy or the processing of your personal data, please contact contact@schoolkuz.com.
We collect different categories of personal data depending on how you use Schoolkuz.
When you create an account, we collect:
Your date of birth is used to determine whether you meet Schoolkuz's minimum age requirements, including the minimum age for maintaining a Schoolkuz account and, where relevant, creating or maintaining a Tutor Profile.
Your date of birth is retained as private account information. It is not displayed publicly or shared with other users through your profile.
You may correct your date of birth through your Account Settings. If a change to your date of birth affects your eligibility to use Schoolkuz or to maintain a Tutor Profile, the age-related procedures described in Section 7 apply.
Your email address must be verified through a verification link sent to your inbox.
Schoolkuz uses Supabase Auth to manage account authentication. Passwords are managed through this authentication service rather than stored as readable text in your public profile.
We do not require users to provide their gender, residential address, telephone number or school when registering.
Your first name, last name, email address, password and date of birth are required to create an account.
Without this information, we cannot complete your registration.
Other information, including profile photographs and additional contact methods, is generally optional.
However, certain information may be required to publish a particular type of marketplace listing or tutoring offer.
Where information is optional, you may choose not to provide it. This may limit the availability of the relevant optional feature but will not, by itself, prevent you from maintaining an account.
Users must provide accurate information and must not provide personal data relating to third parties unless they have an appropriate legal basis to do so.
Once registered, you may provide additional profile information, including an optional profile photograph.
Your first name and the first letter of your surname are displayed in relevant public-facing areas of the Website.
Your full surname and account email address are not automatically disclosed through your public display name.
If you upload a profile photograph, it may be visible to anyone visiting Schoolkuz, including unregistered visitors.
You may edit or remove your profile photograph through your account settings.
When you publish an item for sale, we may collect:
The information requested depends on the type of item being published.
School and school-year information are not collected as mandatory registration details. They may be provided when relevant to particular listings.
Published listings and their photographs may be accessible to anyone visiting the Website, including unregistered visitors.
Please avoid including unnecessary personal information in listing descriptions or photographs.
Tutor Profiles are available only to users who are at least 16 years old.
When you create a Tutor Profile, we may collect:
If you choose to make this optional confirmation, Schoolkuz stores that fact. A notice stating that the tutor has confirmed the accuracy of their information and can provide evidence on request is then displayed on the Tutor Profile and may therefore be visible to other users and unregistered visitors.
Schoolkuz does not collect or store certificates, academic grades, evidence of achievements or other supporting documents as part of the Tutor Profile feature.
Tutor Profiles may be publicly accessible, including to visitors who do not have a Schoolkuz account.
If a user's stored date of birth indicates that they are under 16, they cannot create a Tutor Profile. If an existing tutor changes their date of birth and the updated date indicates that they are under 16, their Tutor Profile will be scheduled for deletion within seven days unless the date of birth is corrected before the deletion is completed.
When publishing marketplace listings or tutoring offers, your account email address is used as a contact method.
You may also voluntarily provide an additional preferred contact method, such as:
Providing an additional contact method is optional.
Contact information is not automatically displayed publicly in listings or tutor profiles.
It may be disclosed to another user through the contact request process described in Section 5.
When you use our communication features, we process information including:
Messages and related conversation information are stored in our database to support the messaging functionality.
Schoolkuz does not currently support sending photographs or other file attachments through the internal messaging system.
Schoolkuz stores information about:
Favorites and Recently Viewed information is associated with your account and stored in our database.
Certain draft information may also be stored locally in your browser.
This information is used to provide the relevant Website features.
We do not currently use Favorites or Recently Viewed information to create advertising profiles or deliver personalised advertisements.
Schoolkuz does not currently maintain a separate history of users' search queries for advertising purposes.
When you contact Schoolkuz, report a problem, submit feedback or make a complaint, we may collect:
Complaints, technical problems and reports of potentially illegal content can be submitted to contact@schoolkuz.com.
We use this information to respond to requests, investigate reported problems, protect users and comply with applicable legal obligations.
Where a report concerns another person, we may process relevant information about that person provided by the reporting user.
Where required by applicable law, we will provide relevant information to individuals whose personal data has been obtained from other users, subject to applicable exceptions and the need to protect the rights and safety of others.
When you visit or use Schoolkuz, certain technical information may be processed automatically by our hosting, authentication and infrastructure providers.
Depending on the relevant service, this may include:
This information is processed to operate the Website, maintain secure sessions, prevent abuse, investigate technical problems and protect our infrastructure.
Schoolkuz does not currently use Google Analytics or a dedicated third-party visitor analytics service.
We process personal data only where we have an appropriate legal basis under applicable data protection law.
The principal purposes and legal bases are set out below.
| Purpose | Legal basis |
|---|---|
| Creating and maintaining accounts | Performance of a contract — GDPR Article 6(1)(b) |
| Authenticating users and managing account access | Performance of a contract — Article 6(1)(b) |
| Checking and enforcing minimum age requirements for Schoolkuz accounts and Tutor Profiles | Performance of a contract, legitimate interests and applicable legal obligations, as appropriate — Articles 6(1)(b), 6(1)(f) and 6(1)(c) |
| Publishing and managing listings and tutor profiles | Performance of a contract — Article 6(1)(b) |
| Providing messaging and contact request functionality | Performance of a contract — Article 6(1)(b) |
| Sharing contact information following an accepted request | Performance of a contract — Article 6(1)(b) |
| Sending essential account and verification emails | Performance of a contract — Article 6(1)(b) |
| Sending optional service notifications | Performance of a contract or legitimate interests, as applicable — Articles 6(1)(b) and 6(1)(f) |
| Sending marketing communications | Consent — Article 6(1)(a) |
| Maintaining security and preventing misuse | Legitimate interests — Article 6(1)(f) |
| Investigating complaints and resolving disputes | Legitimate interests or legal obligation, as applicable — Articles 6(1)(f) and 6(1)(c) |
| Complying with applicable legal obligations | Legal obligation — Article 6(1)(c) |
Where we rely on legitimate interests, those interests include maintaining the functionality and security of the Website, protecting users, preventing misuse, investigating complaints and establishing, exercising or defending legal claims.
We take account of the interests, rights and reasonable expectations of users, including the particular protection required for minors.
Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Schoolkuz currently operates as a free platform and does not process payments for marketplace transactions or tutoring services.
Schoolkuz allows users to request contact information relating to marketplace listings and tutoring offers.
When a user submits a contact request, the recipient can accept or decline it.
If the recipient accepts the request:
Contact information is disclosed only following the recipient's acceptance of the relevant request.
Users should understand that accepting a contact request results in the disclosure of their selected contact details to another user.
Schoolkuz does not currently provide a separate feature for revoking an individual accepted contact disclosure.
Users should therefore only provide contact information that they are comfortable sharing with other members of the platform.
Following account deletion, stored private contact details are removed through the account deletion process.
However, Schoolkuz cannot guarantee the removal of information that another user has already copied, saved or transferred outside the Website.
Users who receive another person's contact information must respect that person's privacy and handle the information lawfully.
Schoolkuz provides an internal messaging system to facilitate communication about marketplace listings and tutoring services.
Messages and associated information are stored to provide the messaging service and maintain conversation history.
Users cannot currently delete individual messages or entire conversations through the Website interface.
Schoolkuz does not currently automatically scan messages for telephone numbers, email addresses or other contact information.
However, messages may be accessed by persons authorised to administer the platform where technically available and reasonably necessary for purposes such as:
Access to stored messages is restricted to authorised persons and should be limited to what is necessary for the relevant purpose.
Users should avoid sharing sensitive or unnecessary personal information through the messaging system.
Schoolkuz is designed for school communities and may be used by minors.
The Website applies the following age requirements:
During registration, users are required to provide their date of birth.
The date of birth is retained as private account information and is used to determine whether the user continues to meet Schoolkuz's applicable age requirements. It is not displayed publicly.
Users may correct their date of birth through Account Settings.
Registration is blocked if the date of birth entered during registration indicates that the user is under 14.
If an existing user changes their date of birth and the updated date indicates that they are under 14, ordinary Schoolkuz functions, including buying, selling, messaging and publishing, are restricted. The account is scheduled for deletion seven days after the change unless the date of birth is corrected before the deletion is completed.
Users aged 14 or 15 may continue to use an ordinary Schoolkuz account but cannot create or maintain a Tutor Profile.
If an existing tutor changes their date of birth and the updated date indicates that they are under 16, the Tutor Profile is scheduled for deletion seven days after the change unless the date of birth is corrected before the deletion is completed. This does not otherwise prevent a user aged 14 or 15 from continuing to use the ordinary Schoolkuz account.
Under Spanish law, individuals aged 14 or older may generally provide their own consent to the processing of personal data, subject to exceptions established by law.
Other jurisdictions may impose additional age-related requirements.
Users must provide accurate information about their date of birth.
We recognise that personal data relating to minors requires particular protection.
Younger users should be especially careful when publishing:
Parents or legal guardians who have concerns about a minor's personal data or use of Schoolkuz may contact us at contact@schoolkuz.com.
If we become aware that an account is held by an individual who does not meet the applicable minimum age requirements, we may restrict the account and apply the age-related deletion procedure described above.
Schoolkuz uses email for account management and certain Website notifications.
We send emails necessary to provide and secure user accounts, including:
Authentication emails are managed through Supabase Auth.
These communications are necessary for the operation and security of the service.
Schoolkuz may send emails notifying users about:
Service notifications are processed through our database and email delivery infrastructure, including Resend.
Users can manage their optional service notification preferences through their account settings.
Disabling optional notifications does not prevent the delivery of essential authentication or security communications.
During registration, users may separately choose whether they wish to receive Schoolkuz news and marketing emails.
Marketing consent is optional and is not selected by default.
Schoolkuz does not currently send marketing email campaigns.
If marketing communications are introduced, they will be sent only where an appropriate legal basis exists, including valid consent where required.
Users will be able to withdraw marketing consent through the available account settings or an unsubscribe mechanism provided in marketing emails.
Refusing or withdrawing marketing consent will not prevent users from accessing the ordinary functions of Schoolkuz.
Schoolkuz does not currently use email open tracking or click tracking to analyse individual users' interactions with its emails.
Technical email delivery information may nevertheless be processed by our email providers to deliver messages, identify delivery failures and maintain service security.
Schoolkuz does not currently use advertising cookies or dedicated third-party visitor analytics technologies.
The Website uses technically necessary browser storage, including local storage or similar technologies, to support essential functionality.
This may include:
The Website may also store draft information locally where necessary to provide a feature requested by the user.
Schoolkuz does not currently use browser storage to create advertising profiles or track users for personalised advertising.
If non-essential analytics, advertising or tracking technologies are introduced in the future, we will update the relevant privacy information and implement any consent mechanisms required by applicable law.
Users may manage browser storage through their browser settings. Disabling essential storage may prevent certain Website functions from operating correctly.
Schoolkuz uses external technical services to operate the Website.
These services may process personal data to the extent necessary for their respective functions.
Certain personal data may be disclosed to other users through the ordinary operation of the Website.
This includes:
Information published on publicly accessible pages may be viewed by visitors who are not registered on Schoolkuz, including visitors located outside Spain.
Supabase provides:
The main Schoolkuz database is hosted in a European Union region.
Certain technical information may also be processed outside that region in accordance with the applicable service arrangements.
Vercel provides Website hosting and associated technical infrastructure.
It may process technical information required to deliver the Website, handle requests, maintain infrastructure and support security.
Cloudflare provides domain-related and associated network infrastructure.
Cloudflare Email Routing is used to forward incoming emails addressed to contact@schoolkuz.com.
Resend provides email delivery infrastructure for Schoolkuz service notifications.
It processes information required to deliver emails, including recipient email addresses, email content and technical delivery information.
Resend processes and stores relevant information in the United States.
Incoming correspondence sent to contact@schoolkuz.com is forwarded through Cloudflare Email Routing to a Gmail account used for Schoolkuz administration.
Google processes information associated with this Gmail service under the terms and privacy arrangements applicable to consumer Gmail.
Schoolkuz remains responsible for its own collection and use of personal data received through this correspondence, including the handling of data protection requests and complaints.
Such correspondence may include personal data and attachments voluntarily provided by the sender.
We may also disclose personal data where reasonably necessary to:
Any such disclosure will be limited to what is necessary and legally permitted.
Schoolkuz does not currently sell users' personal data or disclose it to third-party advertisers for their independent advertising purposes.
Schoolkuz is operated from Spain.
Our primary database is hosted in an EU region through Supabase.
However, certain service providers, including Vercel, Resend, Cloudflare and Google, may process or access relevant personal data outside the European Economic Area (EEA).
International processing may occur as part of hosting, authentication, email delivery, support correspondence or other technical services.
Resend processes certain email-related personal data in the United States.
International transfers relating to Resend's email delivery services are covered by the safeguards described in its Data Processing Addendum, including the European Commission's Standard Contractual Clauses.
Information about these safeguards is available at:
Other providers may process personal data internationally in accordance with their respective service arrangements.
Where applicable, international transfers must comply with the requirements of Chapter V of the GDPR, including the use of an adequacy decision, appropriate safeguards or another permitted transfer mechanism.
You may contact contact@schoolkuz.com to request further information about international transfers and the applicable arrangements, including how to obtain information about relevant safeguards.
Please also note that publicly accessible content, including marketplace listings, tutor profiles and the tutor confirmation described in Section 3.5, may be viewed by individuals located outside the EEA.
Similarly, when you accept a contact request, your contact information may be disclosed to a user located in another country.
We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of applicable legal obligations, security requirements and the establishment, exercise or defence of legal claims.
Our retention principles are described below.
Account information is generally retained while the account remains active.
This includes the user's date of birth, which is retained while necessary to apply Schoolkuz's account and feature age requirements.
Schoolkuz does not automatically delete accounts solely because they have been inactive for a particular period.
If a user's updated date of birth indicates that they are under 14, the account is scheduled for deletion within seven days unless the date of birth is corrected before deletion is completed, as described in Section 7.
When an account deletion request is submitted, the account deletion procedure described in Section 13 applies.
Published listings and tutor profiles are generally retained while they remain available on the Website or are otherwise necessary for the operation of the service.
A Tutor Profile may also be scheduled for deletion if an updated date of birth indicates that the tutor is under 16. In that case, the Tutor Profile is scheduled for deletion within seven days unless the date of birth is corrected before deletion is completed.
When an account deletion request is submitted, its public listings and tutor profiles are withdrawn from public view.
Associated personal data and files are subsequently deleted without undue delay, except where continued retention is justified by an applicable legal obligation or another lawful basis.
Messages and contact request information are generally retained while necessary to provide the messaging and contact request services.
When an account deletion request is submitted, associated personal data is deleted or appropriately anonymised through the account deletion procedure, unless specific information must be retained for a legitimate and documented purpose.
Where a particular conversation forms part of a complaint, investigation or legal dispute, only the relevant information may be retained for as long as necessary for that purpose.
Favorites, Recently Viewed information and saved drafts are generally retained while necessary to provide the relevant features.
Associated account information is removed as part of the account deletion process, subject to any applicable lawful retention requirements.
Information stored locally in a user's browser may also need to be removed through the browser's storage settings.
Ordinary support requests and complaints are generally retained for no longer than 12 months following the closure of the relevant matter.
This period allows us to review previous correspondence, address follow-up questions and maintain appropriate accountability.
Information may be retained for longer where a specific legal obligation, ongoing investigation or potential legal claim justifies continued retention.
In such cases, we seek to retain only the information necessary for the relevant purpose.
The need for continued retention is reviewed, and information is deleted when the relevant purpose or lawful basis no longer applies.
Where necessary for the investigation of serious misconduct, fraud, unlawful activity or legal claims, Schoolkuz may retain limited information in a restricted archive.
Depending on the circumstances, this may include:
Such retention is limited to information reasonably necessary for the specific purpose.
Access is restricted to authorised persons.
Where Spanish law requires the blocking of personal data following its rectification or erasure, the relevant information will be subject to the applicable restrictions on access, use and retention.
The applicable legal basis, scope of retention and retention period are determined according to the nature of the matter and relevant legal requirements, including applicable limitation periods.
The information is deleted when continued retention is no longer necessary or legally justified.
Marketing consent and withdrawal records may be retained where necessary to demonstrate compliance with applicable law and respect users' communication preferences.
Such records will not be retained longer than justified by those purposes.
Technical and security-related information is retained for periods appropriate to its operational, security or legal purpose.
Retention periods may also depend on the applicable service provider's technical arrangements.
Where temporary backups or residual copies exist, deletion from active systems may not result in their immediate removal from every backup.
Residual data is subject to applicable provider retention and deletion arrangements and must remain subject to appropriate safeguards.
Such information must not be restored into ordinary active use except where necessary and lawful.
Personal data is deleted or irreversibly anonymised when it is no longer required and no lawful basis for continued retention applies.
Users may request the deletion of their Schoolkuz account through their account settings.
They may also submit a personal data deletion request by emailing contact@schoolkuz.com.
When an account deletion request is submitted:
These measures are intended to prevent further ordinary use of the account while the remaining deletion process is completed.
Following an account deletion request, Schoolkuz processes the deletion of remaining personal data without undue delay.
Our current operational target is to complete ordinary account deletion processing within 14 days of the request.
This period is an internal operational target. It does not authorise unnecessary retention or override applicable legal requirements.
The deletion process may include:
Certain information may be retained where continued processing is necessary and legally justified.
This may include information relating to:
Such retention is limited to the information required for the specific purpose.
Where appropriate, retained information is separated from ordinary active account data and subject to restricted access.
Where applicable law requires the blocking of personal data, Schoolkuz will apply the relevant requirements.
Deleting your Schoolkuz account does not necessarily remove information that another person has independently saved outside the Website.
For example, another user may have copied your contact details after you accepted a contact request.
Schoolkuz cannot directly delete independent copies held by other users outside its systems.
Users may contact contact@schoolkuz.com to request information about the deletion of their personal data or to exercise other applicable data protection rights.
We will assess and respond to such requests in accordance with applicable law.
We implement technical and organisational measures intended to protect personal data against unauthorised access, unlawful disclosure, accidental loss, alteration and misuse.
These measures include the use of authentication infrastructure, access restrictions and security controls provided through our technical service providers.
Administrative access to Schoolkuz's database and associated systems is restricted to authorised persons.
Access to personal information should be limited to what is necessary for the relevant administrative, technical, security or legal purpose.
However, no method of storing or transmitting information over the internet can guarantee absolute security.
Users are responsible for protecting their account credentials and avoiding unnecessary disclosure of personal information.
If you believe that your account or personal data has been compromised, please contact contact@schoolkuz.com.
Where the GDPR applies, you have certain rights concerning the processing of your personal data, subject to the conditions and exceptions established by law.
You may request confirmation of whether we process your personal data and obtain access to that information.
You may request the correction of inaccurate or incomplete personal data.
You may request the deletion of your personal data where the conditions for erasure are satisfied.
You may request the restriction of certain processing activities in circumstances established by law.
Where applicable, you may request personal data in a structured, commonly used and machine-readable format.
You may also have the right to request its transmission to another controller where technically feasible.
You may object to processing based on legitimate interests, subject to the applicable legal conditions.
You may also object to processing for direct marketing purposes.
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where applicable, you have rights concerning certain decisions based solely on automated processing, including profiling.
Schoolkuz uses automated checks based on the date of birth provided by the user to determine eligibility for a Schoolkuz account and for Tutor Profiles.
These checks may result in registration being refused, account functions being restricted, or an account or Tutor Profile being scheduled for deletion under the age requirements described in Section 7.
Users can correct their date of birth through Account Settings where the stored date is inaccurate. If you believe that an age-related eligibility decision has been made incorrectly, you may also contact us at contact@schoolkuz.com.
Apart from these age eligibility checks, Schoolkuz does not currently use automated profiling to make decisions producing legal or similarly significant effects on users.
To exercise your rights, please contact:
Please provide sufficient information for us to identify your account and understand your request.
Where reasonably necessary, we may request additional information to verify your identity.
We will normally respond within one month of receiving your request.
Where permitted by applicable law, this period may be extended by up to two additional months, depending on the complexity and number of requests.
If an extension is necessary, we will inform you within the initial one-month period.
Exercising your data protection rights is generally free of charge, subject to the exceptions permitted by law.
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Spain, the relevant authority is:
Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es
Depending on your circumstances, you may also have the right to contact another competent supervisory authority.
You may contact us first so that we have an opportunity to address your concerns, but doing so is not a condition for lodging a complaint with a competent supervisory authority.
Schoolkuz currently operates as a free platform.
We do not currently use personal data to deliver behaviourally targeted advertisements.
In particular:
If advertising features are introduced in the future, we will assess the applicable data protection requirements, including the specific rules concerning minors.
Where necessary, we will update this Privacy Policy and implement appropriate safeguards before introducing new forms of personal data processing.
Schoolkuz may contain links to external websites or services.
Users may also choose to communicate with one another outside the Website, including through email, WhatsApp, Telegram or Instagram, after contact information has been disclosed.
These external services operate under their own terms and privacy policies.
Schoolkuz does not control the independent processing of personal data carried out by those services.
We encourage users to review the privacy policies of external services before using them.
We may update this Privacy Policy to reflect changes in:
The updated version will be published on the Website with a revised "Last updated" date.
Where required by applicable law, we will provide additional notice or obtain appropriate consent before introducing processing activities that require it.
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact:
Schoolkuz
Data Controller: Evgeny Kuznetsov
Email: contact@schoolkuz.com
Website: www.schoolkuz.com
The Data Controller's postal address is available in the Website's Legal Notice.