Privacy Policy

1. Controller

Future Builder UG (haftungsbeschränkt)
Hammer Dorfstraße 148, 40221 Düsseldorf
Represented by: Corinna Klus und Alexandra Schneider (Geschäftsführerinnen, jeweils einzelvertretungsberechtigt)
Email: corinna@future-builder-academy.com

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. Hosting

The platform runs on Microsoft Azure (Microsoft Ireland Operations Ltd., Dublin) in the North Europe region (Ireland). Application, database and uploaded files are stored there. When you visit the site, the server processes technically necessary data such as IP address, time, requested page and browser details to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement with Microsoft is in place.

3. Account and sign-in

For an account we process your email address, your name, your password (only as an encrypted hash) and the version of the terms of use you accepted. Legal basis: Art. 6(1)(b) GDPR (user agreement).

4. Onboarding and personal playlist

During onboarding you tell us about your role, stage, goals, challenges and focus areas. We use this to build your personal playlist. We also store your learning progress (e.g. content marked as done and learning sessions). Legal basis: Art. 6(1)(b) GDPR. These details are voluntary; without them only the general playlist is available.

5. Community comments

Comments you post in the community are visible to other signed-in users together with your name. You can edit or delete them at any time. Legal basis: Art. 6(1)(b) GDPR.

6. Error and performance monitoring (Azure Application Insights)

Our server uses Azure Application Insights to record technical data about requests, response times and errors so we can run the platform reliably. This happens on the server only; nothing is stored in your browser for it. Legal basis: Art. 6(1)(f) GDPR.

7. Storage in your browser

We do not use cookies for advertising or analytics. Your browser's local storage only holds your sign-in token and your choice in the cookie banner. This is technically necessary (§ 25(2) TDDDG).

8. Embedded videos and podcasts (YouTube, Spotify)

Videos from YouTube (Google Ireland Ltd.) and podcasts from Spotify (Spotify AB) only load after you allow the respective service in the cookie banner (YouTube and Spotify can be chosen separately). Only then is data such as your IP address sent to the provider, who may set cookies and transfer data to the USA. We embed YouTube in privacy-enhanced mode (youtube-nocookie.com). Legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via "Cookie settings" at the bottom of every page. For transfers to the USA the providers rely on the EU-US Data Privacy Framework.

9. Retention

We keep your data as long as your account exists. If you delete your account or request deletion, we delete your personal data within 30 days unless statutory retention obligations apply.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Just write to the email address above.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

Last updated: 30.09.2026