Privacy policy

2. The main principles

Data processing by card2brain follows a few simple principles:

1. We only collect and process the data from you that we need to provide our service as a flashcard platform and to continuously improve our services.
2. We do not share your personal data with anyone, unless you have given your consent or it serves to protect the rights of third parties.
3. We give you the opportunity to contact us regarding data protection. We will give you information about your data stored with us at any time and delete it immediately if you want us to.
4. We give you control over your data: You decide what information you want to share and with whom based on your privacy settings.
5. We do not rent or sell your personal data to third parties.

3. Contact

3.1 Responsible company

Responsible for data protection is the owner and operator of card2brain:

webapps Burgdorf GmbH
Bahnhofstrasse 88
CH-3400 Burgdorf
Website: webapps.ch

3.2 Data protection officer

We have the following data protection officer as a point of contact for data protection-related inquiries:

Mathias Zaugg
Bahnhofstrasse 88
CH-3400 Burgdorf
Email: [email protected]

4. What data do we store and for what purpose?

4.1 First name, last name, email address

When you register with card2brain, we store your first and last name for the purpose of easy and transparent platform communication. And we store your e-mail address for the purpose of authentification and to inform you ...

• about invitations from other users or your subscription status.
• about comments, reviews and ratings on your content.
• about card2brain products.

If you log in to card2brain with an existing account from Microsoft, Google, Apple or similar, we receive first name, last name and email address from these services. The same applies to single sign-on authentication via learning platforms that integrate card2brain (OpenOlat, Moodle or similar).

We may use your email address to alert you to additional services, discount promotions or opportunities to win at card2brain. When sending marketing e-mails, we rely on the legitimate interest to take measures that are necessary for the financing and further development of our offers - including the extensive and free BASIC offer. Each marketing email comes with a link that allows you to unsubscribe forever.

You will only receive our e-newsletters if you actively subscribe to them. Once subscribed, you can unsubscribe from the e-newsletter at any time, both via a corresponding link in each e-newsletter and in your profile settings.

You can deactivate the notification e-mails regarding new comments, reviews and ratings on your content in your account settings.

4.2 Learning content

Once you are registered with us, the flashcards including the attached image and audio files that you create or copy on the web and on the mobile apps of card2brain will be stored in your account so that you and other users can learn this content in our services.

4.3 Learning progress

Once you are registered with us, your account will store the learning progress you make on your and other users' flashcards, so that the progress ...

• doesn't get lost from one learning session to the next.
• is always up to date on all channels and devices.
• can be graphically displayed for you.
• helps you to learn better.

4.4 Comments and reviews

Once you are registered with us, comments and reviews from you will be stored in your account to be displayed to other users on the relevant learning content. The goal is that ...

• other learners can get an idea of the quality of the content.
• the authors of this content get hints for improvement possibilities.
• the quality of the content is continuously improved.

4.5 Address data

Once you are registered with us, we store in your account the address data you provide when purchasing upgrades or paid content from our store for the purpose of order processing.

4.6 General visit information, server log files

When you visit card2brain.ch, the server automatically logs general technical visit information. This data includes IP address, browser type, internet service provider, referring pages, operating system and date/time stamp. They are necessary to provide our service permanently, user-friendly and reliable, and to ensure data security and thus in particular the protection of personal data.

5. What data can other users see?

5.1 Learning content

You can create public and private sets of flashcards.

Your public sets have a public URL and are automatically displayed in the library of card2brain if they contain have more than 7 flashcards. They can be searched and the content of the flashcards can be viewed by all visitors and users of the platform. All your public sets can be learned, reviewed, rated and single flashcards can be commented by all logged users. Your private sets of flashcards can only be viewed and learned by people you make co-learners or co-authors by individual, group, school or company share.

5.2 First and last name

Registered users will see your first and last name on your sets of flashcards. In the privacy settings, you can restrict the visibility of your first and last name for non-logged visitors to your initials or choose an anonymous username as your display name on your public sets. On your private sets of flashcards, your first and last name can only be seen by people you have made co-learners or co-authors by individual, group, school or company share.

5.3 Comments and reviews

You can comment on single flashcards and review a whole set of flashcards. Your comments and reviews show your first and last name and are visible as the respective content is visible for other logged users.

5.4 Web profile

With your registration at card2brain you will get a public profile page where registered users and non-logged visitors of the platform can see the following at most:

1. Your profile picture.
2. Your first and last name.
3. Since when you are a member.
4. Your public sets of flashcards.
5. The public sets of flashcards you are learning.
6. Your awards.

In the privacy settings, you can restrict the visibility of your first and last name for non-logged visitors on your profile page or choose an anonymous username as your display name.

5.5 Groups

In your groups ...

• all other members see your profile picture and your first and last name.
• teachers and administrators will see your progress on the flashcards in this group.

You can leave a group at any time. By doing so, you accept that you will lose access to the flashcards in this group.

6. Infringement of third party rights

By accepting our GTC you agree to respect the copyright and related rights of third parties. Because the law is not easy to understand, we have compiled the most important principles and a guide for you at Copyright.

If your conduct on the platform violates the rights of third parties, we reserve the right to disclose your name, first name and email address to the complaining party, even without a court order.

7. Where do we store your data?

All data in your account is stored on servers in a Swiss data center operated by Equinix.

8. Data security

We protect your data in particular with the following technical and organizational security measures against accidental, unlawful or unauthorized manipulation, deletion, alteration, access, disclosure, use or loss:

1. The connections between the user (browser or app) and the server are encrypted (TLS).
2. The data is hosted in a secure, ISO:27001-certified data center.
3. Only selected employees have access to the database.
4. Possibility of 2-factor authentication via Google or Microsoft with single sign-on (SSO).
5. Daily backups.

9. How long do we keep your data?

9.1 Data stored in your account

Account information, learning content, learning progress as well as comments and reviews will be stored for a maximum of as long as we offer our services or until you delete your account.

You can delete your account ...

• either by accessing the "Delete account" link under “Settings” in the card2brain app,
• or by writing to us at [email protected] with a request to delete your account.

9.2 Contact and consultation requests

We store your contact and consulting requests via email only as long and to the extent necessary to process them or for legal reasons.

10. Cookies

We use cookies and similar technologies on our website to provide functionality, analyze the use of card2brain.ch, and continuously improve our services.

Cookies are small text files that are stored on your device when you visit card2brain.ch. They allow, for example, your browser to be recognized or certain settings to be saved.

We distinguish between the following categories of cookies:

• Technically necessary cookies: These cookies are required for card2brain.ch to function properly and to provide essential features.
• Analytics and statistics cookies: These cookies help us understand how the platform is used so that we can continuously optimize content and features.
• Marketing and tracking cookies: These cookies are used to display relevant content and advertisements and to measure the effectiveness of advertising campaigns.

Analytics and marketing cookies are used exclusively on the basis of your consent via our cookie banner in accordance with Art. 6(1)(a) GDPR and Art. 31 revDSG (Switzerland). You may withdraw or adjust your consent at any time with future effect via the cookie settings.

You can also configure your browser to block cookies or delete existing cookies. Please note, however, that certain functions may then be limited.

10.1 Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies that enable an analysis of the use of card2brain.ch.

These cookies are only used after your explicit consent via our cookie banner in accordance with Art. 6(1)(a) GDPR and Art. 31 revDSG (Switzerland), and your consent may be withdrawn at any time. IP anonymization is activated so that your IP address is truncated by Google within Switzerland, the EU, or the EEA before transmission.

The information generated by the cookies may be transmitted to and stored on Google servers in the United States. Google uses this information on our behalf to evaluate the use of card2brain.ch and to compile reports on platform activity.

Further information on data processing by Google can be found in the Google Privacy Policy.

10.2 Use of the Meta Pixel

This website uses the so-called "Meta Pixel" of Meta Platforms Ireland Ltd. for the analysis, optimization, and economic operation of our online offering.

With the help of the Meta Pixel, Meta is able to identify visitors to our website as a target group for the display of advertisements (so-called "Meta Ads"). Accordingly, we use the Meta Pixel to display advertisements placed by us only to users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products) that we transmit to Meta (so-called "Custom Audiences").

The Meta Pixel also enables us to measure the effectiveness of Meta advertisements for statistical and market research purposes by determining whether users were redirected to our website after clicking on a Meta advertisement (so-called "conversion tracking").

10.2.1 Data Processed

In particular, the following data may be processed:

• Pages visited and interactions on the website
• Access times
• Device and browser information
• IP address (shortened)
• Referrer URL

This data may be combined by Meta with other data that Meta has stored about you (e.g., through an existing Meta account).

10.2.2 Legal Basis

The use of the Meta Pixel is based exclusively on your explicit consent via our cookie banner in accordance with Art. 6(1)(a) GDPR and Art. 31 revDSG (Switzerland), and such consent may be withdrawn at any time.

10.2.3 Data Transfers to Third Countries

The data collected through the Meta Pixel may be transferred to the United States. Meta relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10.2.4 Withdrawal of Consent and Opt-Out

You may withdraw your consent at any time via the cookie settings on our website. You may also disable personalized advertising in your Meta account settings: https://www.facebook.com/settings?tab=ads

Further information on data processing by Meta can be found in Meta's Privacy Policy: https://www.facebook.com/privacy/policy/

11. Processing of personal data by third-party services

11.1 Mailchimp

We use Mailchimp to send our e-newsletter, which keeps you informed about the further development of our offer.

When you subscribe to the newsletter, your first name, last name and email address, as they are stored on your account at card2brain, are transmitted to Mailchimp for sending the e-newsletter.

Mailchimp stores your data on servers in the USA and processes them on our behalf in a GPDR-compliant manner. You can read more about the GDPR compliance of Mailchimp as a processor of your personal data at Data Processing Addendum.

You can unsubscribe from our e-newsletter at any time by deactivating it in your account settings, clicking the appropriate link in the e-newsletter, or writing to us at [email protected] to have us deactivate it for you.

Once you have unsubscribed, your personal data will be deleted from our Mailchimp account.

12. Rights

When we process personal data about you, you have the following rights under applicable data protection laws in connection with your personal data:

1. Right to access your personal data.
2. The right to have incorrect personal data corrected.
3. Right to erasure (right to be forgotten).
4. Right to restrict the processing of your personal data.
5. Right to data portability.
6. Right to object to the processing of your personal data.
7. Right to lodge a complaint.

The latter means that you have the right to complain to the Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies, to your competent supervisory authority.

Please contact us first before filing a complaint. This way, we can try to resolve your concern directly. The best way to contact us is by email at [email protected].

13. Modification of the privacy policy

We may change this privacy policy at any time. New versions will become effective for you as soon as we have notified you of them by publication on our website.