Privacy notice for the AI literacy course
This notice supplements the RamzX privacy policy (in German). There you will find details of the controller, of Cloudflare as an upstream service, of visitor statistics, of your rights and of the competent supervisory authority. This English notice is a translation; in case of doubt, the German version prevails.
1. Learning without registration
You need no account and no e-mail address for the modules. Only your browser remembers your progress and the name you entered, in session storage (key kik_progress_v1); it also remembers whether the opening animation has been shown (kik:splash) and, during a running test, its identifier (kik_attempt_v1). Session storage is cleared when you close the tab; these entries are not transmitted to us – except the test identifier, which lets you continue the test after reloading the page.
2. Final test
When the test starts, we store: your name and, optionally, your office/company (for the certificate), the course language, which questions were shown in which order, your answers and a salted hash of your IP address. Name and hash are also used to allow no more than 3 test attempts per person per day and to prevent misuse; we do not store the IP address itself. All records of test attempts are deleted automatically after 24 hours. Marking is carried out automatically on our server.
Legal bases: for name and answers, the performance of the service you requested; for the hash, our legitimate interest in a fair test free of misuse, so that the certificate remains meaningful.
Source: Art. 6 GDPR – gdpr-info.eu
3. Certificate and verification
Only if you pass the test do we store permanently: your name, optionally your office/company, the result, the date of issue, the course language, the certificate number and an irreversible checksum of your deletion code. The purpose is to issue the certificate and to allow its authenticity to be verified. The legal basis is the performance of the service you requested.
Anyone who knows the number or the QR code can see name, office/company, date and result. That is the purpose of verification. You decide whom you show the certificate to. The number consists of 12 random characters and cannot be guessed; queries are additionally limited. Verification pages are blocked for search engines.
Retention period: three years from issue, then automatic deletion. You can delete the record earlier at any time yourself with your deletion code or by e-mail to [email protected].
Source: Art. 6 GDPR – gdpr-info.eu · Art. 17 GDPR – gdpr-info.eu
4. Self-assessment and request for a conversation
The self-assessment is voluntary. Without the “conversation requested” tick, your answers stay in your browser and are not transmitted.
If you tick the box, your name, office/company, e-mail address and answers are transmitted to us, stored and sent by e-mail to our mailbox in order to contact you. The legal basis is taking steps prior to entering into a contract at your request. We do not use the address for newsletters. The request is deleted after 12 months unless it results in an engagement.
Source: Art. 6 GDPR – gdpr-info.eu
5. No third-party content
We do not embed scripts, fonts or images from other providers in the course; the font is served from our own server. For Cloudflare, which is placed in front of our website, and for visitor statistics, see the privacy policy. Links to sources only open external pages when you click them.
6. Team package for companies
If a company creates a company account, we store the company name, the name of the contact person, the e-mail address, a non-reversible hash of the password and the course language. To confirm the address and to reset the password, we send a 6-digit code by e-mail; it is stored only as a hash and is valid for 30 minutes. Sign-in is remembered by a technically necessary cookie (kik_co, 14 days). The legal basis is the provision of the requested service. The company account can be deleted at any time within the account itself; all assignments are deleted with it.
Anyone who arrives via an invitation link sees the name of the inviting company. Only if you expressly agree when starting is your certificate (name, office/company, date, result, number, course language) assigned to that company account. The legal basis is your consent. You can withdraw it at any time: by deleting the certificate with your deletion code or by e-mail to [email protected]. Without consent, the certificate is issued as normal; the company does not see it. Your browser keeps the invitation code in session storage (kik_team_v1). The company uses the list in its account under its own responsibility.
Source: Art. 6 GDPR – gdpr-info.eu · Art. 7 GDPR – gdpr-info.eu
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority.
Source: Art. 15 GDPR – gdpr-info.eu · Art. 16 GDPR – gdpr-info.eu · Art. 17 GDPR – gdpr-info.eu · Art. 18 GDPR – gdpr-info.eu · Art. 20 GDPR – gdpr-info.eu · Art. 21 GDPR – gdpr-info.eu · Art. 77 GDPR – gdpr-info.eu