Privacy policy

Last updated July 18th 2024

The Study Planner team is passionate about consumer protection. Please don't hesitate to reach out to us regarding your rights as a user. We also encourage you to take a look at the source code in order to verify the technical claims listed here.

Data controller

Linus Bolls (linus.bolls@code.berlin)
CODE University of Applied Sciences
Karl-Marx-Straße 101
12043 Berlin
Germany

Data collection and processing

Vercel

A cloud provider we use for web hosting. The server our website, including backend, runs on is located in Frankfurt, Germany. Relevant privacy policy

Scaleway

A cloud provider we use for hosting our SQL database. The server our database runs on is located in Amsterdam, Netherlands. Relevant privacy policy

Sentry

Used for automated error reports. The servers our Sentry project runs on are located in the European Union. Sentry receives logs about you including date and time of access, your ip address, and information about your hardware, operating system, and browser. This helps us provide a better service by discovering issues. Relevant privacy policy

CODE Learning platform

When you sign into Study Planner using Google SSO or a bearer token, we use the same authentication mechanism as the Learning Platform.
This means that we "create a session for you" with the LP servers. Using a token created by the LP servers, we communicate with them both from your browser and from our own servers. This token gives us unrestricted access to your LP account and doesn't get stored on our servers.

We never modify any of your data stored by the Learning Platform, we just access it. This may change in the future as we expand the scope of Study Planner to allow users to e.g. sign up for modules and assessments.

Requests we make from your browser to the LP servers get proxied over our own servers. This means that we have temporary access to all data the Study Planner requests from the LP as the data passes through our servers. Most of this data doesn't get permanently stored.

Data we request from the LP in your name and have temporary access to includes:

Your LP authentication token
Your LP profile, including your full name and email
All modules you have taken in the past or are currently taking, including assessment results

Data we permanently store in our database includes:

Your user id for the Learning Platform. This can be linked back to your LP profile.
What module handbook you're on (e.g. BSc_SE_v2)
The modules you plan to take in the future

Both of these lists are subject to change as we add new features to the Study Planner.

You can find the privacy policy of the learning platform attached to the email with your study contract you got from CODE back when you enrolled. Search your emails for "CODE Study Contract".

Your data subject rights

As defined in articles 15 - 21 of the GDPR, you have the following rights:

Right of Access (Article 15) You have the right to obtain confirmation as to whether or not we process personal data concerning you, and, if so, the purpose of such processing.
Right to Rectification (Article 16) If we process incorrect data about you, you have the right to have it rectified without undue delay.
Right to Erasure (Article 17) You can request at any time that we erase all personal data we hold about you, provided there are no legal obligations preventing such deletion.
Right to Restriction of Processing (Article 18) If you believe that we are processing your data incorrectly, you can request the restriction of processing until the matter is fully resolved.
Notification Obligation (Article 19) If we rectify or erase your data, or restrict its processing, you have the right to be informed about it.
Right to Data Portability (Article 20) You have the right to have the data we have collected about you transferred to another controller, should you so desire.
Right to Object (Article 21) Any consent you have given (e.g., for a newsletter) can be withdrawn at any time without providing a reason.