Privacy Policy

Protecting your personal data is of particular importance to us. We process your data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Data Controller

2. Collection and Processing of Personal Data

Our web application is used for course management and digital attendance tracking using QR codes.

The following personal data is processed:

Participants

• First name
• Last name
• Email address
• Password (stored in encrypted/hashed form)
• Attendance timestamp (time of the QR code scan)

Trainers

• First name
• Last name
• Email address
• Password (stored in encrypted/hashed form)

3. Purpose of Data Processing

Your data is processed for the following purposes:

• Registration and management of user accounts
• User authentication
• Organization and administration of courses
• Attendance tracking using QR codes
• Documentation of attendance records
• Management of trainers and participants
• Ensuring the secure operation of the application

4. Legal Basis

Data processing is carried out in accordance with Article 6(1) GDPR, in particular on the basis of:

• Article 6(1)(b) GDPR (performance of a contract)
• Article 6(1)(f) GDPR (legitimate interest in secure and efficient course management)

5. QR Code Attendance Tracking

Participants record their attendance by scanning a QR code. The time of the scan and its association with the respective course are stored.

6. Password Security

Passwords are never stored in plain text. They are stored exclusively using modern cryptographic hashing algorithms.

7. Data Retention

Personal data is stored only for as long as necessary to fulfill the purposes stated above or as required by applicable legal retention obligations.

8. Disclosure to Third Parties

Personal data is generally not shared with third parties, unless:

• there is a legal obligation to do so,
• it is necessary for the performance of a contract, or
• it is shared with commissioned IT or hosting service providers under a data processing agreement in accordance with Article 28 GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, manipulation, and unauthorized access.

10. Your Rights

You have the right at any time to:

• Access your personal data
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Object to processing
• Withdraw any consent you have given

11. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent data protection authority.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy in the event of changes to legal requirements or our services. The current version published on our website shall apply.