1. Scope
This policy applies to use of the data literacy training quiz, its informational pages and any contact functionality added to the final result page. It does not govern third-party websites reached through external links.
2. Technical data
When a website is requested, hosting infrastructure may process technical information needed to deliver and protect it. This can include an IP address, request time, requested page, browser and device information, referring page, response status and security logs. The precise data depends on the hosting configuration.
3. Purposes and lawful bases
Technical data may be used to provide pages, maintain availability, diagnose errors and prevent misuse. Depending on the circumstances, processing may be based on steps requested by the visitor, legitimate interests in reliable and secure delivery, consent where required, or a legal obligation. Legitimate interests should be balanced against the rights and expectations of visitors.
4. Consent
Where processing requires consent, visitors should receive a clear choice before the relevant processing begins. Consent may be withdrawn for future processing as easily as it was given. Withdrawal does not affect processing that was lawful before withdrawal.
5. Cookies and similar storage
The static quiz does not require advertising or profiling cookies. Essential storage may be used by hosting or security services where necessary to deliver the site. Any optional analytics, preference or marketing technology added later should be described and, where required, remain inactive until consent is provided.
6. Contact-form data
If you use a contact area added to the result page, the submitted fields may include your name, work contact details, organisation or team context, selected training interests and any message you choose to provide. Only information reasonably needed to understand and respond to the enquiry should be requested.
Do not submit confidential datasets, special-category personal data, passwords or information about other people unless there is a clear and lawful reason to do so. A submission should not be understood as creating a training agreement or guaranteeing a response.
7. Recipients and service providers
Data may be accessible to service providers that support hosting, security, maintenance or contact-message handling. They should receive only the information needed for their tasks and be subject to appropriate contractual and confidentiality safeguards. Information may also be disclosed when required by applicable law.
8. International transfers
Some infrastructure providers may process data outside Germany or the European Economic Area. Where this occurs, an appropriate transfer mechanism and supplementary safeguards should be considered, taking account of the destination, provider and nature of the data.
9. Retention
Personal data should be kept only as long as needed for the relevant purpose, including security, enquiry handling and applicable legal requirements. Retention periods may vary according to the type of record, whether an exchange is ongoing and whether preservation is legally necessary. Data should then be deleted or anonymised where appropriate.
10. Security
Reasonable technical and organisational measures should be used to reduce risks such as unauthorised access, accidental loss, alteration or disclosure. No internet transmission or storage method can be promised to be completely secure.
11. Your rights
Subject to applicable conditions, individuals in Germany may have rights to request access, correction, deletion, restriction, data portability or objection to certain processing. Where consent is the basis, it may be withdrawn for future use. Individuals may also have the right to lodge a complaint with a competent data-protection supervisory authority.
How a request can be submitted should be shown beside any server-added contact mechanism. Additional information may be needed to verify identity without collecting disproportionate data.
12. Minors
This site is intended for professional and adult learning contexts and is not designed to solicit personal information from children. A minor should involve a parent, guardian or appropriate educational representative before submitting personal information.
13. Policy updates
This policy may be revised when site functionality, providers or legal requirements change. The current version should remain available on this page, with material changes communicated in an appropriate way.