Skip to main content

Privacy policy

1. Data Controller

The data controller responsible for processing your personal data is:

Peter Huppertz
Rümelinbachweg 25
4054 Basel
Switzerland
peter@open-learn.org

2. Personal Data We Collect

We collect the following personal data:

Account and Profile Data

  • Name

  • Email address

  • Password securely hashed

  • Other optional data you provide

Usage and Technical Data

  • Anonymised usage data for analytical purposes

  • Log data (e.g. timestamps, course progress, technical events)

Payment Data

  • Payment-related data processed by Stripe (Open Learn does not store full payment details)

Newsletter Data

  • Email address processed via beehiiv

3. Purpose of Data Processing

We process personal data for the following purposes:

  • Providing and operating the learning platform

  • Managing user accounts and course access

  • Processing payments and subscriptions

  • Sending newsletters (if subscribed)

  • Improving the platform through anonymised analytics

  • Ensuring security and preventing misuse

4. Legal Basis (GDPR / Swiss FADP)

We process personal data based on:

  • Performance of a contract (providing access to courses)

  • Your consent (newsletter, optional profile data)

  • Legitimate interests (platform security, anonymised analytics)

  • Legal obligations (accounting and compliance)

5. Analytics and Anonymised Data

We collect anonymised usage data for analytical purposes. This data cannot be used to identify individual users and is used solely to improve the quality and performance of Open Learn.

6. Data Sharing and Third Parties

We share personal data only with trusted third parties where necessary:

  • Stripe – payment processing

  • beehiiv – newsletter distribution

  • Hosting and infrastructure providers supporting the self-hosted Moodle platform

All third parties are contractually required to protect your data and process it in compliance with applicable data protection laws.

7. International Data Transfers

Some third-party providers may process data outside Switzerland or the EU/EEA. Where applicable, we ensure appropriate safeguards, such as standard contractual clauses.

8. Data Retention

We retain personal data only as long as necessary for the purposes described:

  • Account data: for the duration of your account

  • Newsletter data: until you unsubscribe

  • Payment records: as required by Swiss legal obligations

  • Anonymised analytics data: may be retained indefinitely

9. Your Rights

Under Swiss data protection law and, where applicable, the GDPR, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Withdraw consent at any time

  • Request data portability (where applicable)

Requests can be sent to: {{Contact email}}

10. Data Security

We apply appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and encryption where appropriate.

11. Cookies

Open Learn uses essential cookies and similar technologies required for the operation of the Moodle platform. No non-essential tracking cookies are used without consent.

12. Changes to This Agreement

We may update these Terms of Service and Privacy Policy from time to time. The updated version will be published on the platform with a revised "Last updated" date.

13. Contact

If you have questions about these Terms or our data protection practices, please contact:

peter@open-learn.org