Security, Privacy & Compliance
Detailed information about our security practices, data protection measures, infrastructure, subprocessors, and GDPR compliance. This section is intended for administrators, IT departments, and data protection officers evaluating the platform.
- Data Processing Agreement (DPA / AAV)If you use our platform in an educational or institutional context, you may need a Data Processing Agreement (DPA) according to Art. 28 GDPR (German: Auftragsverarbeitungsvertrag – AAV).
- Hosting, Infrastructure and Data ProtectionProtecting user data and ensuring reliable service operation are central priorities for our platform. This page explains where our services are hosted, how data is processed, and what measures we take to ensure privacy and security.
- SubprocessorsTo operate and maintain the platform, Lumi Education UG (haftungsbeschränkt) uses selected service providers (subprocessors) that process personal data on our behalf. All subprocessors are carefully selected and contractually bound through Data Processing Agreements (Art. 28 GDPR). They process personal data only according to our documented instructions and must implement appropriate technical and organizational security measures.
- Technical and Organizational Measures (TOMs)To protect personal data, we implement a variety of technical and organizational measures (TOMs) in accordance with Art. 32 GDPR (DSGVO). These measures ensure the confidentiality, integrity, availability, and resilience of systems and services that process personal data. This page provides an overview of the security measures implemented by Lumi Education UG (haftungsbeschränkt).
- Data Protection FAQ for SchoolsThis page answers common questions from schools, school authorities, IT administrators, and data protection officers regarding the use of our platform in educational environments. If you need additional information, please contact us at [email protected].