List of active policies

Cookies & Privacy

Updated: 25 September 2026

1. Operator and privacy contact

Bizlearn – Simon Worzischeck, Bergstraße 5, 93342 Saal an der Donau, Germany. Email: info@bizlearn.de · Telephone: +49 (0) 9441 181 796 4. Simon Worzischeck is the business owner and your contact for privacy questions.

This notice applies to lms.bizlearn.de. For training commissioned by your company, Bizlearn may process participant data as a processor under its instructions. In that case your company is the controller for that processing and its privacy information also applies. Bizlearn is the controller for its own processing purposes. The specific allocation depends on the training arrangement.

2. Data and purposes

To provide training, we process in particular names, email addresses, login account data, course assignments and the learning activities, progress, answers and results generated in the relevant course. The data comes from you, where applicable from the commissioning company, and from your use of the platform.

The data supports account administration, training delivery and assistance. Training-related messages concern content or organisational and technical changes. Required details are necessary to set up and use a personal training account.

Access also involves technical data such as IP address, browser, operating system, requested page and access time. This supports platform delivery, troubleshooting and security. The platform connection is encrypted using HTTPS.

3. Legal bases and acknowledgement

Where Bizlearn performs a contract directly with you or takes preparatory steps at your request, Article 6(1)(b) GDPR applies. Article 6(1)(f) GDPR may apply to platform security and reliability; the legitimate interest is protecting the platform and its users. Legal obligations may require processing under Article 6(1)(c) GDPR.

For processing on behalf of a company, that company determines the legal basis for training. A contract between Bizlearn and your employer does not automatically provide a basis under Article 6(1)(b) GDPR for your participant data.

Where processing relies on your consent, Article 6(1)(a) GDPR applies. Confirming this notice records acknowledgement only. It is not blanket consent to all cookies, video providers or other processing.

4. Hosting and reports

The platform is hosted by Weber. The customer portal identifies the booked hosting as operated in Germany. A processing agreement is in place; Weber confirmed its conclusion on 10 October 2018.

Reports on learning progress and training results are provided to clients exclusively in anonymised form. They must not identify anyone directly or in combination with other information. Personal individual reports are not provided. This does not mean that data within your learning account is anonymous.

5. Cookies and browser functions

Moodle uses cookies and technical browser functions for login and platform operation. Section 25(2) of the German TDDDG provides an exception to consent for storage or access strictly necessary to provide a service expressly requested by the user. Non-essential storage or access generally requires separate consent under Section 25(1) TDDDG. The data-protection basis for subsequent processing must also be assessed.

You can delete or block cookies in your browser. Blocking cookies necessary for login may prevent reliable access to your personal training account. The detailed inventory of cookies and their lifetimes is not yet complete.

6. Vimeo and Dacast

Training videos use Vimeo and, for playback in mainland China, Dacast. Loading external players or retrieving videos may transmit IP addresses, browser and device information and usage data to the providers involved. Transmission only after starting playback has not yet been technically confirmed.

Vimeo describes itself as an independent controller for its regular service, including embedded players. The current data-transfer agreement applicable to the account is being checked. Evidence of the specific Dacast agreement is also being clarified.

Processing outside the EU/EEA, particularly in the United States, is possible. The specific recipients, retention periods and applicable transfer safeguards have not yet been fully verified. General provider privacy notices do not replace this assessment or any consent that may be required.

7. Account deletion and retention

Unless training continues, our regular practice is to delete participant accounts manually twelve months after the latest course enrolment. A further enrolment restarts this period. When planning further training, we also remove accounts of participants who no longer need them.

This describes account administration. It does not mean that all course data, logs and backup copies are deleted simultaneously. Technical deletion behaviour, log retention and backup retention are still being checked. Processing on behalf of a company must also follow that controller’s agreed instructions. Statutory retention duties for separate business records remain unaffected.

8. Your rights

Subject to the relevant legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You can withdraw consent at any time for the future; this does not affect the lawfulness of previous processing.

For processing based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to direct-marketing processing at any time. Contact info@bizlearn.de. Where your company is the controller, you may also exercise your rights with that company.

You may complain to a supervisory authority, particularly where you habitually live, work or where an alleged infringement occurred. The Bavarian State Office for Data Protection Supervision is responsible for private businesses in Bavaria.

9. Ongoing assessment

This version improves the previous information using the facts currently established. Assessment of video integration, cookie lifetimes, logs, backups and current provider agreements is not yet complete. The relevant details will be supplemented after verification.

Vimeo Privacy · Dacast Privacy · Bayerisches Landesamt für Datenschutzaufsicht