Privacy Policy

Free AI tools (Project Health Check, AI Readiness Check)

When you use one of our free analysis tools, we collect your name, your email address, optional information about your role, and your answers to that tool’s questions. This data is stored on our own server (Neon, EU) and serves to produce your result and to notify us, as the provider of the tool, that a new result has come in. For the written evaluation of your answers we use the interface of Anthropic, PBC (San Francisco, USA). Only your answers and the scores calculated from them are transmitted — not your name and not your email address. Anthropic processes the data as a processor and does not use it for training. The transfer to the USA is based on the European Commission’s standard contractual clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Legal basis for the processing: your request to carry out the analysis (Art. 6(1)(b) GDPR).

Contact form

When you complete a form (for example a contact request), your name and email address are collected and stored on our own server. Legal basis: pre-contractual measures and legitimate interests (Art. 6(1)(b) and (f) GDPR).

Emails about courses and offers

If you opt in to receiving news by ticking the corresponding box, we store your email address, your name and the page through which you signed up. You first receive a confirmation email; your consent is given only once you click the link in it (double opt-in). We record the time of that confirmation — it is the proof required by Art. 7(1) GDPR. Legal basis: your consent (Art. 6(1)(a) GDPR, § 7(2) UWG, the German Act Against Unfair Competition).

If you have purchased a course, we may also send you emails about our own similar offers without your prior consent (§ 7(3) UWG).

In either case you can opt out at any time — by withdrawing your consent (Art. 7(3) GDPR) or by objecting to direct marketing (Art. 21(2) GDPR). The unsubscribe link in every email works with a single click, without any login and without stating reasons. Withdrawal and objection take effect for the future; the lawfulness of processing carried out until then is unaffected. Emails about your account and your purchased courses (order confirmation, invoice, certificate) are not affected — they form part of the contract and are not advertising.

Praxis by Agile Forge learning platform

This policy covers both sites: agile-forge.com and the learning platform at praxis.agile-forge.com. There is only this one document — the platform footer links here.

Signing in with a Google account

You may register either with an email address and password or with your Google account. If you choose Google, you are taken to Google’s sign-in page and grant the required permission there. Google then passes us your email address, your name and your Google identifier; we never receive a password. Google is thereby made aware that you are signing in to our service.

The legal basis is your consent to using this sign-in method (Art. 6(1)(a) GDPR) together with performance of the user contract (Art. 6(1)(b) GDPR). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Signing in via Google is optional — registration with an email address is available as an equivalent alternative.

Community and course discussions

Inside the platform you can publish posts and replies. Your first and last name, your post and the time of posting are visible to every other participant on that course. If you have not provided a name, you appear as “Teilnehmer:in” (participant); your email address is never shown.

What you write there is voluntary. Legal basis: performance of the user contract (Art. 6(1)(b) GDPR). You can delete your own posts, and deleting your account removes them as well. Bear in mind that until then a post may have been read and quoted by other participants.

Users assigned by a company (team licences)

Where a company purchases a team licence, it assigns the seats to its employees. We then process the assigned person’s name and work email address as well as their learning progress and any certificates obtained. The legal basis is our legitimate interest and that of the company in performing the licence agreement (Art. 6(1)(f) GDPR) — the assigned person is not themselves our contracting party.

Selecting those individuals, and the lawfulness of passing their data to us, is the company’s responsibility. The company’s licence administration can see the name, email address, course progress and completion status — but not notes, conversations with the AI learning assistant or answers given in exercises. You may assert the rights set out in section 5 against us here as well, including the right to object under Art. 21 GDPR.

Withdrawal via this website

If you use the online withdrawal function, we process your name, contract reference, email address, any voluntarily stated reason, as well as the content of your declaration and the date and time of its receipt. We need these details to process the withdrawal (Art. 6(1)(b) GDPR) and to evidence its receipt, which we are required to do under § 356a BGB (German Civil Code) (Art. 6(1)(c) GDPR).

The function is deliberately accessible without signing in, so that guest orders can be withdrawn too. To prevent abuse, the number of declarations per IP address is limited for ten minutes; the IP address is processed only transiently for that purpose and is not stored permanently (Art. 6(1)(f) GDPR). Declarations of withdrawal are retained for the duration of the statutory commercial and tax retention periods.

Server log data

When this website is accessed, our hosting provider Vercel automatically records technical log data (HTTP method, path, timestamp, status code, user agent). IP addresses are not stored in application logs, and log data is deleted after no more than one day. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).