Privacy policy

The controller for data processing within the meaning of the GDPR is the provider (name, address and email are shown at the top of this page). The provider is the controller for the data of accounts, billing, the waitlist and operations. For the data of guests of a session, the moderator or their organisation is the controller (see "Guests of a session"). The provider processes this data on their behalf.

Anyone who takes part in a session as a guest uses Quiz Planner on behalf of the host (the moderator or their organisation). The host is responsible for this data and informs the guests. The provider processes it as a processor under Art. 28 GDPR. For access, rectification and deletion, contact the host. You do not have to enter a real name. Choose a nickname if you want to.

• Guests: Nickname, team, answers, response times and points of a session. A random token in the browser recognises you when you reload the page. Only a hash of this token is stored on the server.
• Moderators and owners: Name, email address, language, password (only as a hash), role in the workspace, invitations and log entries on administrative actions (for example who invited or removed whom).
• Sign-in session: When you sign in, we store the IP address and the browser identifier (user agent) of the session, so that you can see and end your sessions under "My account" and so that we can detect abuse. They are deleted when the session ends (after 7 days) or you end it.
• Content: Quizzes, questions, answer options and texts that moderators and guests enter.
• Limits against abuse: When joining, registering and attempting to sign in, the server reads the IP address to limit too many attempts. These counters exist only in working memory and disappear on restart.
• Billing: Name of the workspace (for private individuals your name, for companies the company name), email address, billing address, VAT ID, payment data. Only Stripe stores the payment data (card, bank details), not us. We store which pass a workspace has and what its Stripe customer and its subscription are called.
• Emails: We send confirmation, password, invitation and notice emails about the pass (for example when a payment fails). If an email bounces, we store the address and the reason so that we do not send it any more emails.
• Waitlist (existing contacts): Email address and language.
• Technical access data: When pages are requested, the web server may briefly log technical data (IP address, time, requested address). Error messages of the server may contain the recipient address of an email that could not be delivered. These logs are continuously overwritten.

The app sets only technically necessary data. Moderators receive a sign-in cookie. Guests receive a token in the browser's local storage so that they stay in the session after a reload. The language choice is stored in a cookie. No consent is needed for this. There are no analytics and no advertising services. On Stripe's payment page, Stripe's terms apply.

Your browser does not load content from third-party servers, except when paying. We pass data on only to these processors with whom we have contracts under Art. 28 GDPR:

• Hetzner Online GmbH (Germany): Hosting of the servers and external storage for backup copies.
• Brevo (Sendinblue SAS, France): Sending of system emails and, for waitlist contacts, the newsletter list (email address, language).
• Stripe Payments Europe, Ltd. (Ireland, with a parent company in the USA): Payment processing. When you buy, your browser opens Stripe's payment page. Stripe receives email address, name of the workspace, billing address, VAT ID and payment data and manages the subscription. For its own purposes (for example fraud and money laundering prevention), Stripe is a controller in its own right.

We do not pass data on to third parties otherwise, unless we are legally obliged to. To the extent data reaches countries outside the EU (for example at Stripe), this takes place on the basis of Art. 44 et seq. GDPR (for example adequacy decision or standard contractual clauses).

• Session data stays stored until a moderator deletes the associated quiz. Its sessions, teams, participants and answers disappear with it. The owner of a workspace can also set ended sessions to be deleted automatically after 30, 90, 180 or 365 days.
• A deleted account loses access immediately. We confirm the deletion by email to the old address. Log entries on administrative actions lose their link to the person in the process.
• We keep invoice and booking data for as long as tax and commercial law requires (currently up to ten years).
• Sign-in sessions expire after 7 days.
• If an address has bounced permanently (bounce), we keep only this address with the reason so that we do not send it any more emails.
• We overwrite backup copies daily in rotation. Deleted data can therefore remain in backup copies for up to about 14 days.
• If the provider deletes a workspace, only a log entry remains (name of the workspace, time, acting admin).

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Moderators download their account data under "My account" and the data of their workspace under "Workspace" themselves as a JSON file and can delete their account there. Guests contact the host. For everything else, contact us (kontakt@gremiumhub.de). You can withdraw a consent you have given at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority.

The details named are necessary for an account and for buying a pass. Without them we cannot perform the contract. Guests only have to give a nickname.

We do not make decisions that are based solely on automated processing and have legal effect.