Privacy Policy

The controller responsible for data processing is:

Virtual Dimension Center (VDC) w.V.
Auberlenstraße 13
70736 Fellbach, Germany
Email: info@vdc-fellbach.de
Phone: +49 (0) 711 585309-0

Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we provide comprehensive information on how your data is handled.

Note on Project Funding: This project and its underlying IT infrastructures are funded by the Federal Ministry of Education, Family Affairs, Senior Citizens, Women and Youth (BMBFSFJ). Data processing in connection with this project is performed in strict compliance with legal provisions and to fulfill reporting and documentation requirements towards the funding provider (legal basis: Art. 6 (1) (c) and (f) GDPR).

1. Access Data and Hosting

You can visit our website without providing any personal information. Every time a web page is accessed, the web server automatically stores a "server log file", containing, for example, the name of the requested file, your IP address, the date and time of the request, the volume of data transferred, and the requesting provider (access data), and documents the access. This access data is analyzed solely for the purpose of ensuring the trouble-free operation of the website and improving our offering. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the correct presentation of our offering in accordance with Art. 6 (1) (f) GDPR. All access data is processed only as long as is necessary to achieve the aforementioned processing purposes.

1.1 Hosting & Deployment (Astro & Cloudflare Pages)

Hosting and website display services are provided via the Cloudflare Pages platform (provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). The source code of the website and editorial contents are maintained via the git-based repository gitlab.opencode.de. Unless otherwise specified in this Privacy Policy, all access data and any data collected in designated forms on this website are processed on Cloudflare's servers. If you have questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Our service providers are located in and/or use servers in the following countries for which the European Commission has established an adequate level of data protection by decision: USA.

The adequacy decision for the USA (EU-US Data Privacy Framework) serves as the basis for third-country transfers, provided the respective service provider is certified. A certification exists.

Our service providers are located in and/or use servers in countries outside the EU and EEA for which the European Commission has established an adequate level of data protection by decision.

Our service providers are located in and/or use servers in countries outside the EU and EEA. No adequacy decision of the European Commission is in place for these countries. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

1.2 Content Delivery Network

For the purpose of shorter loading times, we use a so-called Content Delivery Network ("CDN"). In this service, contents, e.g., large media files, are delivered via regionally distributed servers of the external CDN provider Cloudflare. Consequently, access data is processed on the servers of this service provider. Our service providers act on our behalf under a Data Processing Agreement. If you have questions about our service providers and the basis of our cooperation with you, please use the contact option described in this Privacy Policy.

The legal basis for the transfer to third countries corresponds to the provisions mentioned under Section 1.1.

2. Data Processing for Contract Performance and Contact

Data Processing to Provide the Learning Platform and Services (Hetzner, Keycloak, Moodle, LRS)

For the interactive applications of this project, we operate a dedicated backend infrastructure on a Virtual Private Server (VPS) provided by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in their datacenter in Nuremberg, Germany. Processing is performed based on a Data Processing Agreement pursuant to Art. 28 GDPR. No transfer of personal data to third countries takes place within this infrastructure.

We collect and process personal data when you register for our services, create a user account, or use the learning platform. The data collected is visible in the respective input forms. We use the data provided by you for contract performance and the provision of services in accordance with Art. 6 (1) (b) GDPR for the following systems:

  • User Management & Authentication (Keycloak): For identity verification and to provide a Single Sign-On (SSO) access, we process your registration credentials (email address, username, encrypted password).
  • Learning Platform (Moodle): To deliver the learning courses offered, we process your profile details, course enrollments, performance records, forum contributions, and individual learning progress.
  • Learning Record Store (LRS): To document learning activities (e.g., interactions via the xAPI format), interaction details (e.g., completion states) are recorded pseudonymously or anonymously. This serves to optimize our pedagogical offerings and fulfill our project goals in accordance with Art. 6 (1) (f) GDPR.

After the complete fulfillment of the user relationship, your data will be restricted for further processing and deleted after the expiry of statutory retention periods (tax, commercial, or funding-related) in accordance with Art. 6 (1) (c) GDPR, unless you have explicitly consented to further use.

Contact

In the context of communication, we collect personal data to process your requests in accordance with Art. 6 (1) (b) GDPR if you voluntarily share it when contacting us (e.g., by email). Mandatory fields are marked as such because we strictly need this information to process your request. Once your inquiry has been fully resolved, your data is deleted, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.

3. Email Advertising

Email Newsletter with Subscription

If you subscribe to our newsletter, we use the data required or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.

4. Cookies and Other Technologies

4.1 General Information

In order to make your visit to our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted at the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).

Protection of Privacy on End Devices

When using our online services, we only use technologies that are strictly necessary to provide the digital service explicitly requested. The storage of information in your end device or access to information already stored in your end device does not require consent. Since no tracking or marketing cookies requiring consent are used on this website, no cookie consent banner is integrated.

5. Use of VR Headsets ("Meta for Work")

To run our Virtual Reality applications, Meta Quest Headsets may be used. These devices are deployed and managed under a commercial "Meta for Work" (Meta Business) framework agreement, which guarantees strict data protection and privacy standards for enterprise use.

There is no transfer of personal user or learning data (such as names, email addresses, Moodle progress, or LRS records) to backend systems of Meta Platforms Technologies, LLC. All personal profile and progress data remains strictly on our own self-hosted Hetzner servers in Nuremberg. Meta only processes technical, device-related telemetry data strictly necessary for device management, system security, and operational stability.

For further details regarding data processing in connection with Managed Meta Accounts, please refer to the official Meta Horizon Managed Solutions Privacy Disclosure.

6. Use of Embedded External Media

YouTube Video Plugin

For the purpose of embedding video content, the YouTube Video Plugin collects data (IP address, time of visit, device, and browser information) in the extended data protection mode we use, transmits it to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), and is processed by Google only if you actively play a video. This is done on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

7. Social Media

Our Online Presence on LinkedIn

Provided you have given your consent in accordance with Art. 6 (1) (a) GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), from which user profiles are created using pseudonyms. LinkedIn Corporation (USA) usually transfers data to servers in the USA. This transfer is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses of the European Commission.

8. Contact Options and Your Rights

8.1 Your Rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • pursuant to Art. 16 GDPR, the right to immediately request the correction of incorrect or the completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise, or defense of legal claims;
  • pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, provided that the accuracy of the data is contested by you; the processing is unlawful, but you oppose its deletion; we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or you have objected to the processing in accordance with Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, place of work, or our company headquarters for this purpose.

The supervisory authority competent for us (company headquarters in Fellbach, Baden-Württemberg) is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Website: www.baden-wuerttemberg.datenschutz.de

Right to Object

To the extent that we process personal data as explained above to safeguard our legitimate interests that predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If processing is for direct marketing purposes, you can exercise this right at any time as described above. If processing is for other purposes, you only have a right to object on grounds relating to your particular situation.

After exercising your right to object, we will not process your personal data further for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In this case, we will not process your personal data further for this purpose.

8.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to inquire about, correct, restrict, or delete data, as well as revoke any consent given or object to a specific use of data, please contact us directly using the contact details in our legal notice (Impressum).