Privacy policy for users of the website ClassNinjas.at

Dear user,

in the following we inform you about your rights when collecting and processing your personal data by us. This information is provided in accordance with Article 13 of the Basic Data Protection Regulation (DSGVO).

1. Who is responsible for data processing and whom can you contact if you have any questions

The person responsible for data processing is:

ClassNinjas GmbH
Reklwskigasse 18, Top 5
1230 Vienna
FN 503520x, Commercial Court Vienna

For questions regarding privacy please contact: team [at] classninjas.com, 0699 180 498 11

2. What data are processed and where do they come from?

When you register, we process the following personal data:

Name
E-mail address
School level
Data related to the learning profile
Registration via social media login, if applicable

If you make use of our payable services, we also process the following personal data:

Details of the payment transaction
Data concerning your subscriptions (status, duration etc)
For underage users, the e-mail address of the user's legal guardian

When using the website (even without registration), cookies and Google Analytics are also used. You will find more information on this in point 6.

3. On what legal basis and for what purposes is the data processing carried out?

We process your personal data for the purpose of your use of our platform in accordance with our terms of use, in particular for user administration, payment processing and the storage of your learning success (Article 6 paragraph 1 letter b DSGVO).

In addition, we process your personal data for legitimate interests, provided that, in the context of a balancing of interests, your right to confidentiality of this data does not outweigh our interest in processing it (Article 6 paragraph 1 letter f DSGVO). Our legitimate interests lie in sending you direct advertising about our products and services. You may object to the processing of personal data for advertising purposes at any time (for further details, please see point 6).

Personal data is also processed for the purpose of fulfilling various legal obligations (Article 6 paragraph 1 letter c DSGVO). Examples of such data processing based on a legal obligation are

Keeping proper accounts;
Information to prosecuting authorities and courts in case of an incident.

4. To whom will your data be passed on?

For the operation of the technical infrastructure necessary for the platform, the IT service providers commissioned by us receive your data as part of the technical support. Our IT service providers are:

Host provider

Heroku", Salesforce.com, inc, The Landmark @ One Market, Suite 300, San Francisco, California 94105, USA (certified under the EU-US Privacy Shield);
Amazon Web Services, Inc, 410 Terry Avenue North Seattle WA 98109, USA USA (certified under the EU-US Privacy Shield);

Chat plugin

"Chatra.io", Roger Wilco LLC, 2200 Clarendon Blvd., Suite 1400A Arlington, VA 22201, USA (certified under the EU-US Privacy Shield)

Video platform

YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (certified under the EU-US Privacy Shield)

Payment service provider

Adyen N.V. German Branch, Hackescher Markt 4, Gebäude 44, 10178 Berlin, Germany; in addition, the data will be passed on to the respective payment service chosen by you (e.g. PayPal, Sofortüberweisung) for the purpose of payment processing.

Social Media Login (Facebook / Instagram)

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (certified under the EU-US Privacy Shield) and Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland

In addition, other contract processors commissioned by us will receive your data, insofar as this is necessary to fulfil the respective service. All processors are contractually bound to treat your data confidentially and only process it within the scope of our assignment.

If required by law, we will transfer personal data to public bodies and institutions (e.g. tax office, courts, public prosecutor's office).

5. How long will your data be processed and stored?

We process your personal data only as long as this is necessary. As soon as your data is no longer needed, it will be automatically deleted. We store the personal data necessary for the fulfilment of the contract in any case for the duration of the entire business relationship, i.e. until the deactivation of your user account, and beyond that in accordance with the legal storage and documentation obligations.

6. Data processing in regards to use of the website

Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. We use Google Analytics exclusively with the code "anonymizeIp" to ensure an anonymized collection of IP addresses (so-called IP-Masking). The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including the IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link ((https://google.com/dlpage/gaoptout).

You can also prevent Google Analytics from collecting this data by clicking on the following link and following the instructions there to set an opt-out cookie that will prevent future collection of your data when you visit this website: developers.google.com

You can find more information on terms of use and data protection under or at

Cookies

Cookies are used to recognize and store temporary data; the cookies remain stored on your computer and allow us to recognize your browser the next time you visit us. You can set your browser so that you are informed when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited and you may not be able to use all functions of this website to their full extent.

YouTube

This website includes videos from the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("YouTube"). YoueTube is certified under the EU-US Privacy Shield (see point 4). We use YouTube in conjunction with the "Enhanced Privacy Mode" feature. According to YouTube's own information, this means that no data about your user behaviour is collected. In addition, we have marked our website as a "website for children", which, according to YouTube's own information, also means that no tracking is carried out for advertising purposes.

When you actually play a video, it connects to YouTube's servers, which allows YouTube to collect your computer's IP address, the date and time, and the website you visited. If you are logged in to YouTube, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our site or change the settings in your YouTube account.

The embedding of YouTube videos and the associated data processing are necessary for the fulfilment of the contract with you - i.e. the offering of educational videos (legal basis: Art 6 para. 1 lit b DSGVO).

7. What rights do you have?

Right of access to information

If we process personal data about you, you have the right to be informed about the purposes of the processing, the categories of personal data processed, the recipients of such personal data, the duration of storage, your rights to which you are entitled, the origin of the personal data and the existence of automated decision making.

Correction and deletion

You are entitled to request the correction of incorrect or incomplete personal data concerning you. You have the right to request the deletion of personal data concerning you, unless the processing of the data is lawful and there are no legal obligations on our part against the deletion.

Restriction of processing

You are entitled to demand the restriction of the processing of your data.

Data transferability

Objection

For reasons arising from your particular situation, you are entitled to object at any time to the processing of personal data concerning you. If you object, we will not further process personal data concerning you, unless there are compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. If you object to processing for advertising purposes, we will in any case stop processing for this purpose.

Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, +43 1 531 15-202525, e-mail: dsb@dsb.gv.at, if your data protection rights are violated.

Contact

To exercise your rights in relation to your data processed by us, please contact team@classninjas.com, +43 (0)699 180 498 11.