We take the protection of personal data seriously. This policy explains how we process data through our website, online tutoring, Konomondo and our communication with learners and customers.
The controller is edventure Studios GmbH, Elisabethstraße 85/W616, 8010 Graz, Austria. Email: office@edventure.studio, phone: +43 676 945 05 30. Swiss data-protection law is additionally considered where applicable.
Our website, internal systems and customer data are hosted on servers operated by Hetzner Online GmbH in Germany. Data may include IP addresses, access logs, website, customer, contract and communication data, and learning materials.
Processing supports service delivery, administration, contracts and IT security under Article 6(1)(b) and (f) GDPR.
Technically necessary access data such as IP address, time, requested pages, browser, operating system, referrer and server logs are processed to provide and secure the website and analyse errors under Article 6(1)(f) GDPR.
When you use a newsletter, trial-session, support or contact form, we process the data you enter and the time of consent. This may include email, name, phone number, school type, year group, subject, message, organisation, tutoring needs and contact preferences.
After completing the optional entry assessment, you may send us your assessment. We store your email address, selected learning route, year group, individual answers, the related questions and correct answers, the server-calculated total score and the skills profile. With your consent, we use this data to review the result free of charge, email the complete assessment to you and contact you by email.
Newsletter signups are currently forwarded to edventure Studios as an internal email request. They are not yet added to a newsletter mailing list automatically. Form confirmations and internal notifications are sent through an SMTP service; delivery status and bounded error messages are stored in an outbox. Open and click tracking is disabled by default. Processing is based on consent, pre-contractual steps or our legitimate interest under Article 6(1)(a), (b) or (f) GDPR. Consent can be withdrawn at any time by email.
For registration, bookings and contracts we may process customer and learner names, contact and billing details, selected package, year group, tutoring needs and organisational information. This is necessary for contracts, scheduling, billing, payments and learner support under Article 6(1)(b) and (c) GDPR.
Customer, contract and tutoring information is managed in a Nextcloud instance on our server. This may include contacts, billing, package, payment status, appointments and support notes under Article 6(1)(b) and (f) GDPR.
Our own Jitsi server may process display name, live audio and video, chat, connection data, participation time, IP address, device and browser details. Sessions are not recorded unless everyone concerned has expressly agreed.
Miro guest links support interactive tutoring without requiring a learner account. Whiteboard content, text, drawings, comments, files and technical usage data may be processed to deliver the session under Article 6(1)(b) GDPR.
WhatsApp Business may be used voluntarily for scheduling and support. Names, phone numbers, profile data, messages, files, photos, screenshots and learning materials may be processed under Article 6(1)(a), (b) or (f) GDPR. Email remains available as an alternative.
Submitted exercises, notes, photos, screenshots and other school materials are processed to prepare, deliver and review tutoring. They are normally deleted no later than twelve months after the contract ends unless legal retention or a legitimate reason applies.
Konomondo may process email address, player ID, progress, completed questions, answers, learning-goal analyses and technical data. Unity authentication may be required. Processing supports app delivery and personalised learning under Article 6(1)(a) or (b) GDPR.
Learning-goal reviews may contain completed questions, correct and incorrect answers, progress, recommendations and support notes. They are used to deliver and improve tutoring under Article 6(1)(b) GDPR.
We use self-hosted Matomo, not Google Analytics. Anonymised IP address, page views, time, duration, browser, operating system, referrer and interactions may be processed. The legal basis is Article 6(1)(f), or consent under (a) where required.
The site may use strictly necessary cookies and analytics technologies. Where the law requires it, non-essential technologies are activated only after consent, which can be changed or withdrawn.
We currently do not actively embed YouTube videos. Future third-party embeds may transfer data to their provider and will be identified before activation.
With consent, contact details may be used for offers, new services and price changes. Consent can be withdrawn by email. Contractually necessary information is sent independently of marketing consent.
Where necessary, data may be shared with hosting, email and newsletter, video, communication, whiteboard, authentication, payment, accounting and IT providers, professional advisers or competent authorities.
Data is retained only as long as needed. Contract and invoice records follow statutory retention duties. Consent-based data is deleted after withdrawal unless another legal basis applies.
We use appropriate technical and organisational safeguards, HTTPS encryption and restricted access to internal systems.
You may request access, correction, deletion, restriction, portability, object to processing, withdraw consent and complain to a data-protection authority. Contact office@edventure.studio.
In Austria, the Austrian Data Protection Authority is the relevant supervisory authority. Third-party sites are responsible for their own processing.
This policy may be updated when our processing, systems or legal requirements change. Last updated: 4 September 2026.
