This Privacy Policy applies to the demo platform demo.eledia.ai. It explains what personal data we process when you visit the platform, register, or try out the AI features.

1. Data Controller

eLeDia GmbH
Wilhelmsaue 37
10713 Berlin
Phone: +49 30 50 56 10 70
Email: info@eledia.de

2. Data Protection Officer

Jan-Christoph Thode
datenschutz nord GmbH
Kurfürstendamm 212
10719 Berlin
Phone: +49 421 69 66 32-0
Email: office@datenschutz-nord.de

3. Purpose of the Platform

demo.eledia.ai is a demonstration and testing environment. Interested users can explore Moodle and the eLeDia.ai extensions here. Please do not enter any confidential information or third-party data on the platform. Courses, posts, and accounts can be reset at any time.

4. What Data We Process

4.1 Accessing the Website

When you access the platform, the web server processes technically necessary data: IP address, date and time, page accessed, amount of data transferred, browser, and operating system. We need this data to deliver the site and ensure its operation. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is to ensure secure and stable operation.

4.2 Registration and User Account

When you register, we store your first name, last name, email address, username, and password (as a hash value only). We will send you an email to confirm your email address. The legal basis is Article 6(1)(b) of the GDPR: You cannot use the demo without an account.

To protect against automated registrations, we use Cloudflare Turnstile on the registration page (see Section 5). The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is to protect the platform from misuse.

4.3 Use of the Platform

While you use the platform, Moodle stores your activities: course enrollments, submissions, forum posts, test results, grades, and logs of the pages you’ve visited. This data is necessary for learning activities. The legal basis is Article 6(1)(b) of the GDPR.

4.4 AI Features

The platform includes AI features, such as a learning tutor, the generation of questions and courses, and summaries. When you use an AI feature, your input, along with the necessary course content, is transmitted to a language model in the IONOS AI Model Hub and processed there. The model runs in a data center in Germany. IONOS does not use the data to train models. We store conversations with the tutor on the platform so that you can continue them. We delete usage analytics for the tutor after 180 days. The legal basis is Article 6(1)(b) of the GDPR.

AI responses may contain errors. Please do not enter any personal data of third parties into AI functions.

4.5 Translation of Content

Some of the course content is available in German and is automatically translated into English for the English interface using DeepL. Only the text to be translated is transferred; your account data is not. The translations are temporarily stored on the platform. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is to present the demo content in a comprehensible manner.

4.6 Emails

We send system messages—such as registration confirmations, password resets, and course notifications—via the Brevo email service. To do this, your email address, your name, and the content of the message are transmitted to Brevo. The legal basis is Article 6(1)(b) of the GDPR.

5. Recipients and Processors

We use the following service providers. We have a data processing agreement with each of them in accordance with Article 28 of the GDPR.

• Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Servers located in Germany.
• AI language models: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. Processing takes place in Germany.
• Translation: DeepL SE, Maarweg 165, 50825 Cologne.
• Email delivery: Sendinblue GmbH (Brevo), Köpenicker Straße 126, 10179 Berlin.
• Registration protection: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile uses technical characteristics of your browser to verify that the registration was made by a human. In doing so, data may be transferred to the U.S. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which means an adequacy decision has been issued by the European Commission (Art. 45 GDPR).

Furthermore, we will only disclose your data if we are legally required to do so.

6. Cookies

The platform uses only technically necessary cookies. The session cookie (MoodleSession) keeps you logged in during a visit and is deleted when you close your browser. If you wish, another cookie will remember your username for your next login. On the registration page, Cloudflare Turnstile may store technically necessary data in your browser. The legal basis for this is Section 25(2)(2) of the TDDDG. We do not use analytics or advertising cookies.

7. Retention Period

We store your data for as long as your account exists. Since this is a demo, the platform can be reset at any time. When this happens, all accounts and content will be deleted. You can request the deletion of your account at any time; simply send a brief email to info@eledia.de.

8. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). To the extent that we process data based on Art. 6(1)(f) of the GDPR, you may object to such processing (Art. 21 of the GDPR). You may withdraw your consent at any time with future effect.

You may also file a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

9. Changes

We will update this statement if the platform or the services used change.

Effective: October 2026