Datenschutzrichtlinie

This Moodle learning platform processes personal data exclusively for the provision of teaching and learning opportunities and to ensure technical operation. Processing is carried out in accordance with the GDPR. Data subjects have comprehensive data protection rights.

Privacy policy for the use of the eLeDia.community platform

The protection of personal data is a high priority for us. When using community.eledia.de, we process personal information in order to give users of the platform the opportunity to exchange ideas, share best practices and provide support for Moodle & e-learning. We provide the following services on community.eledia.de:

  • Practical ideas & tried and tested solutions
  • Experiences of other admins & exchange at eye level
  • Events & consultation hours for direct impulses

We treat all personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This privacy policy provides transparent information about which personal data we process as part of our learning platform, the purposes for which this is done and the rights to which you are entitled.

Person responsible

eLeDia GmbH
Wilhelmsaue 37
10713 Berlin
Phone: +49 30 5056 1070
Email: info@eledia.de

Represented by: Johannes Moskaliuk

Data protection officer

datenschutz nord GmbH
Kurfürstendamm 212, 10719 Berlin
Email: office@datenschutz-nord.de
Telephone: +49 421 69 66 32-0

Purpose and legal basis of data processing

The processing of personal data on our Moodle platform is carried out for the following purposes:

  • Setting up and managing user accounts
  • Providing self-study courses
  • Administration of course access, learning content and learning progress
  • Processing of communication
  • Provision of technical functions, security and stability of the platform

    • Legal basis for processing:

    • Art. 6 para. 1 lit. b GDPR (performance of a contract or implementation of pre-contractual measures)
    • Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient operation of the learning platform)
    • Art. 6 para. 1 lit. a GDPR (consent, if additional voluntary information is provided)

    Types of data processed

    Data for account creation (profile data)

    • First and last name
    • User name
    • E-mail address

    User and course data

    • Assigned courses
    • Contributions in forums, chats, messages or interactive learning modules

    Moodle log data and task log data

    • Usage log
    • IP address
    • Date and time of access
    • Pages accessed
    • Task status

    Server logs

    • IP address
    • Date and time of the request
    • Requested URL / resource
    • Referrer URL (from which page the user came)
    • User agent (browser, operating system, device type)

    Sources of the data

    The personal data collected originates from:

    • directly from the users
    • from automatically generated log data
    • from system backups
    • from the store software used when logging in via the eLeDia365 shop
    • from LinkedIn (for LinkedIn login via OAuth 2 Services)
    • from Google (for Google login via OAuth 2 Services)

    Use of cookies

    Moodle uses two functional cookies: MoodleSession and MoodleID.

    The MoodleSession cookie is necessary and must be allowed so that users remain logged in when changing pages. The cookie is deleted both on the server and in the browser when the user logs out or closes the web browser.

    The MoodeID cookie saves your login name in the web browser so that the login name does not have to be entered again when you visit the website again. The cookie can be disabled, which means that the login name must be re-entered each time you visit the website.

    Storage duration

    We only store personal data for as long as is necessary to fulfill the above-mentioned purposes or as long as we are legally obliged to do so.

  • User and course data: until revocation or deletion of the user account, provided there are no statutory retention obligations
  • Log data: 30 days
  • Task log data: two weeks
  • User accounts: Automatic deletion two years after the last login or within max. four weeks after request
  • Server logs: rotating, deletion always after 14 days
  • System backups: deletion usually after 90 days

    • Forwarding of the data

    Data is only passed on:

    • to technical service providers (hosting, payment providers, IT service providers) as part of order processing (Art. 28 GDPR)
    • if there are legal obligations

    Transfer to third countries does not take place unless this is expressly communicated and suitable protective measures are guaranteed.

    Hosting & technical implementation

    Technical support for the Moodle learning platform: eLeDia GmbH

    Hosting of the Moodle learning platform: Hetzner Online GmbH
    Server location: Germany

    There are order processing contracts with external service providers in accordance with Art. 28 GDPR

    Plugins

    If additional plugins are used, supplementary data protection notices may apply. Consent will be obtained separately if necessary.

    Your rights as a data subject

    When processing your personal data, the GDPR grants you certain rights as a data subject:

    Right of access (Art. 15 GDPR)

    You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

    Right to rectification (Art. 16 GDPR)

    You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data

    .

    Right to erasure (Art. 17 GDPR)

    You have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

    Right to restriction of processing (Art. 18 GDPR)

    You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the examination by the controller.

    Right to data portability (Art. 20 GDPR)

    In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.

    Right to object (Art. 7 GDPR)

    If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected by this.

    Right to object (Art. 21 GDPR)

    If data is collected on the basis of Art. 6 para. 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 para. 1 lit. e GDPR (data processing to protect the public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

    Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

    In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

    Enforcement of your rights

    Unless otherwise described above, please contact the following address to assert your rights as a data subject: support@eledia.de

    All data requests - e.g. export of data or data deletion - can alternatively be made via your own profile in the Community Moodle platform

    .

    Obligation to provide data

    It is necessary to provide certain data in order to participate in courses. Without this data, it is not possible to access the content or create a certificate.

    Automated decision-making / profiling

    There is no automated decision-making within the meaning of Art. 22 GDPR. Learning progress indicators are used exclusively for course organization and certificate creation.

    Up-to-dateness of the privacy policy

    This privacy policy is valid as of April 13, 2026 and will be updated as necessary.

    By clicking on I agree, you confirm that you have taken note of the privacy policy.

    Back
    Back to top