Privacy policy

2. The main principles

Data processing by card2brain follows a few simple principles:

1. We only collect and process the data from you that we need to provide our service as a flashcard platform and to continuously improve our services.
2. We do not share your personal data with anyone, unless you have given your consent or it serves to protect the rights of third parties.
3. We give you the opportunity to contact us regarding data protection. We will give you information about your data stored with us at any time and delete it immediately if you want us to.
4. We give you control over your data: You decide what information you want to share and with whom based on your privacy settings.
5. We do not rent or sell your personal data to third parties.

3. Contact

3.1 Responsible company

Responsible for data protection is the owner and operator of card2brain:

webapps Burgdorf GmbH
Bahnhofstrasse 88
CH-3400 Burgdorf
Website: webapps.ch

3.2 Data protection officer

We have the following data protection officer as a point of contact for data protection-related inquiries:

Mathias Zaugg
Bahnhofstrasse 88
CH-3400 Burgdorf
Email: info@card2brain.ch

4. What data do we store and for what purpose?

4.1 First name, last name, email address

When you register with card2brain, we store your first and last name for the purpose of easy and transparent platform communication. And we store your e-mail address for the purpose of authentification and to inform you ...

• about invitations from other users or your subscription status.
• about comments, reviews and ratings on your content.
• about card2brain products.

If you log in to card2brain with an existing account from Microsoft, Google, Apple or similar, we receive first name, last name and email address from these services. The same applies to single sign-on authentication via learning platforms that integrate card2brain (OpenOlat, Moodle or similar).

We may use your email address to alert you to additional services, discount promotions or opportunities to win at card2brain. When sending marketing e-mails, we rely on the legitimate interest to take measures that are necessary for the financing and further development of our offers - including the extensive and free BASIC offer. Each marketing email comes with a link that allows you to unsubscribe forever.

You will only receive our e-newsletters if you actively subscribe to them. Once subscribed, you can unsubscribe from the e-newsletter at any time, both via a corresponding link in each e-newsletter and in your profile settings.

You can deactivate the notification e-mails regarding new comments, reviews and ratings on your content in your account settings.

4.3 Learning content

Once you are registered with us, the flashcards including the attached image and audio files that you create on the web and on the mobile apps of card2brain will be stored in your account so that you and other users can learn this content in our services.

4.3 Learning progress

Once you are registered with us, your account will store the learning progress you make on your and other users' flashcards, so that the progress ...

• doesn't get lost from one learning session to the next.
• is always up to date on all channels and devices.
• can be graphically displayed for you.
• helps you to learn better.

4.4 Comments and reviews

Once you are registered with us, comments and reviews from you will be stored in your account to be displayed to other users on the relevant learning content. The goal is that ...

• other learners can get an idea of the quality of the content.
• the authors of this content get hints for improvement possibilities.
• the quality of the content is continuously improved.

4.5 Address data

Once you are registered with us, we store in your account the address data you provide when purchasing upgrades or paid content from our store for the purpose of order processing.

4.6 General visit information, server log files

When you visit card2brain.ch, the server automatically logs general technical visit information. This data includes IP address, browser type, internet service provider, referring pages, operating system and date/time stamp. They are necessary to provide our service permanently, user-friendly and reliable, and to ensure data security and thus in particular the protection of personal data.

5. What data can other users see?

5.1 Learning content

You can create public and private sets of flashcards.

Your public sets have a public URL and are automatically displayed in the library of card2brain if they contain have more than 7 flashcards. They can be searched and the content of the flashcards can be viewed by all visitors and users of the platform. All your public sets can be learned, reviewed, rated and single flashcards can be commented by all logged users. Your private sets of flashcards can only be viewed and learned by people you make co-learners or co-authors by individual, group, school or company share.

5.2 First and last name

Your first and last name will be displayed on your own sets of flashcards. You can restrict the visibility of your first and last name on your public sets to the logged users in the privacy settings. On your private sets of flashcards, your first and last name can only be seen by people you have made co-learners or co-authors by individual, group, school or company share.

5.3 Comments and reviews

You can comment on single flashcards and review a whole set of flashcards. Your comments and reviews show your first and last name and are visible as the respective content is visible for other logged users.

5.4 Web profile

With your registration at card2brain you get a profile page where other users can see the following at most:

1. Your profile picture.
2. Your first and last name.
3. Since when you are a member.
4. Your public sets of flashcards.
5. The public sets of flashcards you are learning.

In the privacy settings you can restrict the visibility of your profile to the logged users or to you alone. And you can define who can see which public sets you are learning: all visitors and users, only logged users or only you.

5.5 Groups

In your groups ...

• all other members see your profile picture and your first and last name.
• teachers and administrators will see your progress on the flashcards in this group.

You can leave a group at any time. By doing so, you accept that you will lose access to the flashcards in this group.

6. Infringement of third party rights

By accepting our GTC you agree to respect the copyright and related rights of third parties. Because the law is not easy to understand, we have compiled the most important principles and a guide for you at Copyright.

If your conduct on the platform violates the rights of third parties, we reserve the right to disclose your name, first name and email address to the complaining party, even without a court order.

7. Where do we store your data?

All data in your account is stored on servers in a Swiss data center operated by Equinix.

8. Data security

We protect your data in particular with the following technical and organizational security measures against accidental, unlawful or unauthorized manipulation, deletion, alteration, access, disclosure, use or loss:

1. The connections between the user (browser or app) and the server are encrypted (TLS).
2. The data is hosted in a secure, ISO:27001-certified data center.
3. Only selected employees have access to the database.
4. Possibility of 2-factor authentication via Google or Microsoft with single sign-on (SSO).
5. Daily backups.

9. How long do we keep your data?

9.1 Data stored in your account

Account information, learning content, learning progress as well as comments and reviews will be stored for a maximum of as long as we offer our services or until you delete your account.

You can delete your account ...

• either by logging in to card2brain on the web and clicking on the "delete account"- link at the bottom of the page,
• or by writing to us at info@card2brain.ch with a request to delete your account.

9.2 Contact and consultation requests

We store your contact and consulting requests via email only as long and to the extent necessary to process them or for legal reasons.

10. Cookies

We only use functional, consent-free cookies. On the one hand, these are cookies that have the advantage, for example, that you do not have to re-enter your access data every time you log in, or that our store can remember the items that you have placed in your shopping cart. On the other hand, these are technically necessary cookies that are required for the operation of Google AdManager.

Google AdManager is a third-party ad delivery service that we use in "Limited ads"- mode without sharing or using personal information.

11. Processing of personal data by third-party services

11.1 UserVoice

We use UserVoice as a feedback and support tool for application support and ongoing improvement of our service.

The service is used to process support tickets that you enter via the contact form when logged in, as well as to manage and prioritize new ideas that you share in our feedback forum. Because this is a communication tool, when you use the feedback and support features, your first name, last name, and email address, as they are stored on your card2brain account, are transmitted to UserVoice.

For the use of our feedback forum, an account is created at UserVoice, which you can delete at any time by logging into card2brain.uservoice.com, navigating to "Settings" and clicking on the "Delete my profile"-link there. If you delete your card2brain account, the UserVoice profile you created with card2brain will be deleted automatically.

We keep your support tickets in our UserVoice account for a maximum of one year. Afterwards they will be deleted by us. If you delete your account at card2brain, all your support tickets in our UserVoice account will be anonymized immediately.

UserVoice stores your data on servers in the USA and processes them on our behalf in accordance with the EU General Data Protection Regulation (GDPR). You can read more about this in UserVoice's privacy policy, about GPDR compliance in particular here and at GDPR Compliance.

11.2 Mailchimp

We use Mailchimp to send our e-newsletter, which keeps you informed about the further development of our offer.

When you subscribe to the newsletter, your first name, last name and email address, as they are stored on your account at card2brain, are transmitted to Mailchimp for sending the e-newsletter.

Mailchimp stores your data on servers in the USA and processes them on our behalf in a GPDR-compliant manner. You can read more about the GDPR compliance of Mailchimp as a processor of your personal data at Data Processing Addendum.

You can unsubscribe from our e-newsletter at any time by deactivating it in your account settings, clicking the appropriate link in the e-newsletter, or writing to us at info@card2brain.ch to have us deactivate it for you.

Once you have unsubscribed, your personal data will be deleted from our Mailchimp account.

12. Rights

When we process personal data about you, you have the following rights under applicable data protection laws in connection with your personal data:

1. Right to access your personal data.
2. The right to have incorrect personal data corrected.
3. Right to erasure (right to be forgotten).
4. Right to restrict the processing of your personal data.
5. Right to data portability.
6. Right to object to the processing of your personal data.
7. Right to lodge a complaint.

The latter means that you have the right to complain to the Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies, to your competent supervisory authority.

Please contact us first before filing a complaint. This way, we can try to resolve your concern directly. The best way to contact us is by email at info@card2brain.ch.

13. Modification of the privacy policy

We may change this privacy policy at any time. New versions will become effective for you as soon as we have notified you of them by publication on our website.