All app data is stored on ISO 27001-certified servers in a data center in Germany. AMADEE has sworn its employees to secrecy. No data is passed on to third parties or stored on foreign servers. Data will only be passed on to third parties without consent if we are legally obliged to do so. User data is processed in accordance with all legal provisions of the General Data Protection Regulation (GDPR) and the highest security standards for data processing and storage.

The data is transmitted exclusively SSL-encrypted between the data center and the end devices. Communication between the app server and the AMADEE music school administration is also exclusively SSL-encrypted.

The app does not store any data on the user's end devices (e.g. smartphones). Only internal employees have access to the data on the server and only to fulfill the respective functions of the app.

No cookies or analysis tools such as Google Analytics are used that have access to personal data.

Only necessary user data is stored within the app. This includes, for example, the user's e-mail address for registration within the app. A user name and password are required for registration, as well as a first and last name for identification purposes.

The user's IP address is also transmitted for technical communication. This is not stored, analyzed or tracked.

Teachers can view the names of their participants within the app and, if approved by the participant, also their e-mail address and telephone number. Participants' appointments are also shared for the use of the timetable and the attendance list.

Users are not saved via a mobile number, but by means of a unique internal ID. This means that mobile numbers do not have to be shared with other participants, but they can be specified as an option.

Messages can be exchanged within the app. These messages can only be sent to related persons. Such a relationship is, for example, a teacher and their participant. Communication with other participants of the music school is not possible. When

To send push messages (push notifications), the music school app must be registered with Apple and Google. The device ID generated in the process is transmitted by the app to the AMADEE server and stored there. These push notifications can be deactivated on the smartphone so that the app can no longer send messages to the user.

Your data is only stored for as long as is necessary for the purpose of processing.

As part of the processing of your personal data, you have the following rights under the GDPR:

• If your personal data is processed, you have the right to obtain information about the personal data stored about you
• If incorrect personal data is processed, you have the right to rectification.
• If the requirements are met, you can request the deletion or restriction of processing.

If you make use of your above-mentioned rights, the controller will check whether the legal requirements for this are met.

Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority:

The State Commissioner for Data Protection in Lower Saxony, Prinzenstr. 5, 30159 Hanover

E-mail: poststellelfd.niedersachsende