Notenaut
EN
Request invite

Privacy statement

Last updated:

1. Who is responsible

The controller for this website (notenaut.com) within the meaning of the EU General Data Protection Regulation (GDPR) is:

IBS Technology GmbH, Ferdinand-Porsche-Str. 11, 60386 Frankfurt am Main, Germany
Email: privacy@notenaut.com · Phone: +49 (0)69 40897658

2. What this website does, and what it does not do

notenaut.com is an information website about the Notenaut learning app. It has one contact form (see section 7), no user accounts and no newsletter sign-up. When you click “Request invite” you move to the Notenaut app at app.notenaut.com. The app has its own privacy statement, which applies there.

3. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser automatically sends technical data, which Vercel processes to deliver the page and keep it secure: IP address, date and time, requested page, referrer URL, browser and operating system.

  • Purpose and legal basis: secure and stable delivery of the website, Art. 6 (1) (f) GDPR (legitimate interest).
  • Retention: log data is deleted automatically after a short period (generally no longer than 30 days).
  • Transfer to third countries: Vercel is certified under the EU-US Data Privacy Framework. We have also concluded a data processing agreement including the EU Standard Contractual Clauses.

4. Fonts

The fonts used on this website are hosted on our own server. No connection to Google Fonts or other font providers is made.

5. Language preference

If your browser language differs from the page language, we suggest the matching language version. When you switch language or close the suggestion, your choice (for example “de”) is stored in your browser’s local storage under the key notenaut-lang, so that we don’t ask again. It stays on your device, is never sent to us, and you can delete it in your browser settings at any time. Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary to provide the function you requested).

We only use cookies and similar technologies that are not strictly necessary if you consent. To ask for and store your consent we use the consent management tool Cookiebot (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark). It stores your choice in a cookie (“CookieConsent”, retention 12 months) and logs your consent (anonymised IP address, time, consent status) as proof.

  • Legal basis: Art. 6 (1) (c) GDPR together with § 25 (2) TDDDG (we are obliged to document consent).
  • Transfer to third countries: none intended; Cookiebot is operated within the EU.

You can change or withdraw your consent at any time with “Cookie settings” at the bottom of every page.

6. Web analytics (Google Analytics 4)

Only if you consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how visitors use the website (for example which pages are viewed and which buttons are clicked) so that we can improve it.

  • Data processed: usage data such as pages visited, time on page, clicks on buttons, approximate location (country/city, derived from a shortened IP address), device and browser information, and a pseudonymous identifier. Google Analytics 4 does not store full IP addresses.
  • Cookies: _ga and _ga_<ID>, retention up to 14 months.
  • Legal basis: your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
  • Transfer to third countries: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.
  • Retention: analytics data is deleted after 14 months.

We use Google Consent Mode. Until you consent, Google Analytics is not loaded.

7. Contacting us (contact form and email)

If you write to us by email (for example at hello@notenaut.com) or through the contact form, we process your name, your email address and the content of your message to answer your request. Legal basis: Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete your message once it has been dealt with, unless statutory retention periods apply.

  • Contact form: the form sends your message to our server function on Vercel (Frankfurt region), which forwards it by email via SendGrid (Twilio Inc., USA; EU-US Data Privacy Framework and standard contractual clauses) to our mailbox at Microsoft Ireland Operations Limited. The form itself does not store your message.
  • Spam protection (Cloudflare Turnstile): to protect the form against automated abuse we use Cloudflare Turnstile (Cloudflare, Inc., USA; EU-US Data Privacy Framework). It is loaded only on the contact page and checks, without a puzzle in most cases, whether you are a human. For this, Cloudflare receives technical data such as your IP address and browser characteristics. Legal basis: Art. 6 (1) (f) GDPR (security of our website) and § 25 (2) no. 2 TDDDG. We also use a hidden field and a time check, and we limit the number of requests per IP address through our hosting provider’s firewall; no IP addresses are stored by us for this.

8. Children

This website is directed at parents. It does not collect personal data from children. The Notenaut app has its own rules for children’s data, described in the app’s privacy statement.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). Write to privacy@notenaut.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

10. Visitors from Indonesia

If you are in Indonesia, you also have the rights of a data subject under Law No. 27 of 2022 on Personal Data Protection (UU PDP), including the right to information, access, correction, deletion and withdrawal of consent. You can exercise them at privacy@notenaut.com.

11. Changes

We update this privacy statement when the website or the law changes. The current version is always available on this page.

Back to home