Any collection, use, storage, deletion, or other use (hereinafter processing) of data is solely for the purpose of providing our services. The services of learnt.ai have been designed with the aim to use as little personal data as possible. In this context, personal data is understood to be all individual information about personal or factual circumstances of a specific or identifiable natural person (so-called data subject). 
The following privacy policy describes which types of data are collected when you call up our website, what happens to this data and how you can object to the use of data if necessary.

General information on data processing on this website

Responsible party
The responsible party in terms of the General Data Protection Regulation (GDPR) and the UK`s Data Protection Act 2018 (DPA) is Nimbus Learning Ltd (Company number 10708499), trading as Learnt.ai. The registered office address for Learnt.ai is 203 Tanworth Lane, Shirley, Solihull, England, B90 4DB.

E-mail: hello@learnt.ai

If you have any questions regarding data protection, you can contact us at the following e-mail address: hello@learnt.ai

Protection of your data
We have taken technical and organisational measures to ensure that the provisions of the GDPR and DPA are observed both by us and by external service providers working for us.

If we work with other companies, such as email and server providers, to provide our services, this is only done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in connection with technical and organisational capabilities in data protection. Your data will be stored on specially protected servers. Access to it is only possible for a few specially authorised persons. Our website is SSL/TLS encrypted, which you can recognise by the https:// at the beginning of the URL.

Deletion of personal data
learnt.ai processes personal data only as long as it is necessary. As soon as the purpose of the data processing is fulfilled, a blocking and deletion takes place according to the standards of the deletion concept, unless legal regulations oppose this.

Data use on this website and creation of log files
When you visit our website, our web servers temporarily store each access in a log file. In the process, the following data is collected and stored until automated deletion:

• IP address of the requesting computer
  
• Date and time of access
  
• Name and URL of the accessed file
  
• Amount of data transferred
  
• Message as to whether the retrieval was successful
  
• Identification data of the browser and operating system used
  
• website from which the file was accessed
  

In addition to this data, further data may be collected by us and our partners, more on this below. The processing of this data is based on our legitimate interest. Our legitimate interest is based on making our website accessible to you. Data processing is carried out for the purpose of enabling the use of the website (connection establishment). It is used for system security, the technical administration of the network infrastructure, as well as the optimisation of the Internet offer. The IP address is only evaluated in the event of attacks on our network infrastructure or the network infrastructure of our Internet provider. The data will be deleted as soon as they are no longer required for the above-mentioned purposes. This is the case when you close the website. Our hosting provider may use the data for statistical surveys. However, the data is anonymised for this purpose. Our hosting provider deletes the data after 14 days. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object. Use of cookies Our website uses cookies. These are stored on your computer when you use our website. Cookies are small text files, which are stored on your hard disk assigned to the browser you are using and through which learnt.ai or the body that sets the cookie receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They are used by us to enable you to log in to learnt.ai and to participate in our bonus programme as well as to analyse the use of learnt.ai in an anonymous or pseudonymous form and to present you with interesting offers on this website. In this way, various data can be transmitted

• Frequency of website visits
  
• Which functions of the website are used by you
  
• Your login for access control
  
• Your referrer ID for the bonus programme
  
• When you call up the website, a cookie banner informs you about the use of cookies and refers you to the privacy policy.
  

The legal basis for the processing is our legitimate interest. Our legitimate interest results from the guarantee of a smooth connection setup and a comfortable use of our website as well as for reasons of the evaluation of the system security and stability. The data processing also takes place in order to enable a statistical evaluation of the website use. Only persistent cookies are used on this website. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time. Please note that you may not be able to use all the functions of this website. The setting of cookies can also be prevented at any time by making the appropriate settings in your internet browser. You can learn more about cookies in general when visiting www.allaboutcookies.org an for specific information on the cookies we use please read our Cookie Policy. Registration on the website For this, it is necessary that the data subject enters personal data in the registration mask. The following data are collected for this purpose as a minimum:

• First name, last name
  
• E-mail address
  
• Location and country
  
• Payment Details
  

The data provided by the data subject in the registration mask will be used for processing.  You may have the opportunity to create a profile, which consists of information about you, and may include Personal Information, photographs, examples of your work, information on work previously performed, feedback ratings and other information. The information in your Profile may be visible to all Learnt.ai users and the general public. You may edit certain information in your Profile via your account and may choose to limit who is able to view certain content you post to your Profile. Both during and after registration, the data subject is free to change, correct or delete the personal data provided. Please contact us at hello@learnt.ai if you would like to remove any of the data held and connect see how to perform this action within the Learnt.ai dashboard. If you think that there may have been an unauthorised profile has been created about you, you can request for it to be removed by contacting us at hello@learnt.ai. We collect public and private feedback from users about their experience with other Learnt.ai service users. Please note that feedback may be publicly viewable via Learnt.ai. On rare occasions, we may remove feedback pursuant to the relevant provisions of our Terms of Service. We also collect feedback about our the Learnt.ai. We use this information to respond to your enquiries, improve the website, and develop new products and features. Trackers and analysis tools In order to continuously improve our offer on learnt.ai, we use the following analysis tools. You can find out which data is processed in each case and how you can contact the respective service provider below: Google Analytics Our website learnt.ai uses Google Analytics. This is a service for analysing access to websites of Google Ireland Limited (Google) and enables us to improve our internet offer. The data processing for the European Economic Area and for Switzerland is carried out by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies enable us to analyse your use of our website. The information collected by means of a cookie is:

• IP address,
  
• time of access,
  
• access duration
  

and is transferred to a Google server in the USA and stored there. The evaluation of your activities on our website is transmitted to us in the form of reports. Google may pass on the information collected to third parties if this is required by law or if third parties process this data on behalf of Google. The Google tracking codes on our website use the _anonymizeIp() function, which means that IP addresses are only processed in abbreviated form in order to exclude any possible direct personal connection with you. You can find more information on the terms of use and data protection of Google Analytics at https://policies.google.com/privacy and at http://www.google.com/analytics/terms/  The legal basis for the processing of personal data is our legitimate interest. Our legitimate interest results from enabling the demand-oriented and continuous optimisation of our website. The processing of your personal data enables us to analyse your surfing behaviour. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymising the IP address, the interest of users in the protection of their personal data is adequately taken into account. The data will be deleted 26 months after your last visit to our website. You can also prevent the installation of cookies from Google Analytics yourself by setting your browser software accordingly. In this case, however, you may not be able to use all the functions of our website to their full extent. Google Analytics can also be deactivated and controlled by browser extensions, e.g. http://tools.google.com/dlpage/gaoptout?hl=en.  Data transfer to a third country In order to be able to provide our services, we use the support of service providers from the European area as well as from third countries. In order to ensure the protection of your personal data even in the event of data transfer to a third country, we conclude special order processing agreements with each of the carefully selected service providers. All of the service providers we use have sufficient proof that they ensure data security through appropriate technical and organisational measures. Our service providers from third countries are either located in countries that have an adequate level of data protection recognised by the EU Commission or the Information Commissioner`s Office have provided appropriate guarantees.  Your rights You have the following rights in relation to us in respect of personal data relating to you: Right to withdraw consent If you have given your consent to the processing of your data, you may revoke it at any time. Such a revocation affects the permissibility of processing your personal data for the future after you have expressed it to us. It can be made (remotely) verbally or in writing by post or e-mail to us. Right to information  In the event of a request for information, you must provide sufficient details of your identity and proof that the information in question is yours. The information concerns the following information:

• the purposes for which the personal data are processed;
  
• the categories of personal data which are processed; and
  
• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
  
• the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
  
• the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
  
• the existence of a right of appeal to a supervisory authority;
  
• any available information on the origin of the data if the personal data is not collected from the data subject;
  
• the existence of automated decision-making, including profiling, and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
  

Right to rectification or erasure  You have a right to rectification and/or completion if the personal data processed concerning you is inaccurate or incomplete. The controller must make the correction without delay. In addition, you may request the erasure of the personal data concerning you if one of the following reasons applies to you:

• the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  
• you withdraw your consent on which the processing was based pursuant to your consent and there is no other legal basis for the processing.
  
• you object to the processing  and there are no overriding legitimate grounds for the processing, or you object to the processing.
  
• the personal data concerning you have been processed unlawfully.
  
• the erasure of the personal data concerning you is necessary for compliance with a legal obligation under to which we are subject.
  
• the personal data concerning you has been collected in relation to information society services.
  
• if we have made the personal data concerning you public and we are obliged to erase it, we shall take all reasonable steps to also inform other data controllers that you have requested the erasure of all links to, or copies or replications of, that personal data.
  
• the right to erasure does not apply to the extent that the processing is necessary
  
• for the exercise of the right to freedom of expression and information;
  
• for compliance with a legal obligation which requires processing under law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes, insofar as the right referred to is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
  
• to assert, exercise or defend legal claims.
  

Right to restriction of processing Under the following conditions, you may request that we restrict the processing of personal data relating to you:

• if you dispute the accuracy of the personal data relating to you for a period of time that enables us to verify the accuracy of your personal data;
  
• the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  
• we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defence of legal claims; or
  
• if you have objected to the processing and it is not yet clear whether our legitimate grounds override your grounds.
  

If the processing of personal data relating to you has been restricted, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted. Right to information  If you have asserted your right to rectification, erasure or restriction of data processing against us, we are obliged to inform all recipients of your personal data of the rectification, erasure or restriction of data processing. This only applies insofar as this notification does not prove impossible or would involve a disproportionate effort. You have the right to know which recipients have received your data. Right to data portability You have the right to receive your personal data from us in a common, machine-readable format in order to have it transferred to another controller if necessary, provided that

• the processing is based on consent pursuant to your consent or on a contract and
  
• the processing is carried out with the help of automated procedures.
  

When exercising your right to data portability, you have the right to have the personal data transferred directly from us to another controller, insofar as this is technically feasible. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. Right to object to processing Insofar as we base the processing of your personal data on a legitimate interest or on our part, you may object to the processing.  When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing. Right to complain to the competent supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR or the DPA. How to exercise these rights To exercise these rights, please contact us using hello@learnt.ai. Our social media presence learnt.ai operates the following own presences in social media.

• Twitter
  
• Facebook
  
• LinkedIn
  

We use the services of

• Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA and Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (Facebook).
  
• LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland and LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA (LinkedIn)
  
• Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (Twitter)
  

The operators of presences on social media and the operators of the social media themselves are deemed to be joint data controllers. We would like to point out that you use our presences in the social media and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information that we make available in the social media on our own website. You can reach the data protection officers of the respective social media via the respective social media. You can reach the data protection officer of Faceboo via the following linked contact form: https://www.facebook.com/help/contact/540977946302970  You can reach the data protection officer for LinkedIn via the following linked contact form: https://www.linkedin.com/help/linkedin/ask/TSO-DPO  You can reach the data protection officer of Twitter via the following linked contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp  When you visit our social media sites, the operators of the social media collect, among other things, your IP address as well as other information that is present on your PC in the form of cookies. This information is used to provide us, as the operator of the site, with statistical information about the use of the site. The data collected about you in this context is processed by the operators of the social media and may be transferred to countries outside the European Economic Area. What information the operator of the respective social network receives and how it is used is described in the privacy policies of the social networks. There you will also find information on how to contact them. In what way the operators of the social media use data from the visit of our presence in the social media for their own purposes, to what extent activities on the presences in social media are assigned to individual users, how long the operators store this data and whether data from a visit to the presences in social media are passed on to third parties, is not conclusively and clearly stated by the operators of the social media and is not known to us. When accessing our appearances in social media, the IP address assigned to your end device is transmitted to the operator of the respective social network. The social networks also store information about the end devices of the users (e.g. as part of the login notification function); if necessary, the operators of the social media are thus able to assign IP addresses to individual users. If you are currently logged in to the respective social network as a user, a cookie with your individual identification in this social network is located on your end device. This makes it possible to track that you have visited a certain page and how you have used it. This data can be used to offer content or advertising tailored to you. If you want to avoid this, you should log out of the respective social network or deactivate the stay logged in function, delete the cookies present on your device and close and restart your browser. In this way, login information that can be used to directly identify you will be deleted. This allows you to use our social media presence without revealing your user ID. When you access interactive features of the site (like, comment, share, message, etc.), a login screen will appear. Once you have logged in, you will again be recognisable to the social network you are using as a specific user. Information on how you can manage or delete existing information can be found on the above-mentioned support pages of the respective social network. The data you enter on social networks, especially your username and the content published under your account, are processed by us insofar as we reply to your messages, if applicable. In addition, your published posts, ratings and comments refer to your account on the respective social network. If you mention us via an @ or a # or similar, this mention will be published under your user name on our page, if applicable. The data freely published and disseminated by you on the respective social network may thus be included by us in our offer and made accessible to other users of the respective social network. If you mark our appearance in the social media with Like or Follow or a similar interaction, this will be communicated to us by the respective social network with your user name and link to your account. We, as the provider of the information service, do not collect and process any further data from your use of our appearances in the social media. The data processing on our part is based on our legitimate interest. The data you provide in this context and which may be accessible to us (e.g. user name, pictures, interests, contact data, if applicable) are processed by us exclusively for the purpose of customer and prospect communication. Our legitimate interest is to provide you with a platform on which we can display up-to-date information and with the help of which you can address your request to us and we can respond to your request as quickly as possible. As far as we are able, your data will be deleted when our social media presence is discontinued.   Miscellaneous and closing Automated decision-making We do not use automated decision-making or profiling. Do Not Track Do Not Track is a privacy preference you can set in most browsers. We support Do Not Track because we believe that you should have genuine control over how your info gets used and our Services responds to Do Not Track requests. Accuracy It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data. Children Data Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us, and we take the necessary steps to remove that information from our server. External Links Our website contains links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers. Changes and updates to the privacy policy We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification. Queries and Complaints  Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.