Looking for a Christmas present? A voucher for any amount – for all courses, instantly as a PDF. Give one now

Legal

Privacy

Privacy policy

The protection of your personal data is important to us. This policy informs you about which personal data we process when you visit our website and use our services, for what purpose and on what legal basis – and what rights you have. This English version is provided for convenience; only the German version is legally binding.

1. Controller

Robot School GmbH
Industriestraße 23b
61449 Steinbach (Taunus), Germany
Phone: +49 6171 279 2990
Email: info@robot-school.de

2. Summary

  • Our chat assistant answers questions using AI from the European provider Mistral AI (section 9).
  • We send our newsletter via the Mailchimp service – only with your consent or to customers for similar offers; you can unsubscribe at any time (section 13).
  • Without your consent we use no cookies and no advertising trackers, and no social media plugins at all. Only if you agree in the cookie banner do we use Google Ads to measure whether our ads lead to booking clicks (section 5). To improve the website, we measure visits and loading times without cookies and without recognising you using Vercel Web Analytics and Speed Insights – you can object to this at any time (section 4).
  • All fonts are loaded from our own server – there is no connection to Google or other third parties.
  • Bookings and Robot Club membership are handled via our booking system kutego.
  • The website is hosted by Vercel and delivered via a data centre in Frankfurt am Main.

3. Hosting and server log files

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). Vercel delivers the pages via a worldwide server network; for our website, the Frankfurt am Main (Germany) region is set as the processing location. We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR.

Each time our website is accessed, the server automatically records information transmitted by your browser (server log files): IP address, date and time of access, page or file accessed, amount of data transferred, referrer URL (the previously visited page), browser type and version and operating system.

This data is technically necessary to deliver the website, ensure its stability and security and detect misuse. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are only stored for as long as necessary for these purposes and are then deleted or anonymised. They are not combined with other data sources.

As Vercel is a company based in the USA, it cannot be ruled out that data is also transferred to the USA. Vercel is certified under the EU-U.S. Data Privacy Framework; there is therefore an adequacy decision of the EU Commission for the USA (Art. 45 GDPR). In addition, the EU Commission’s standard contractual clauses form part of the data processing agreement. Further information: vercel.com/legal/privacy-policy.

Our domain is managed by Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany.

4. Audience measurement and loading times (Vercel Web Analytics and Speed Insights)

To understand which pages are used and how fast they load, we use the Web Analytics and Speed Insights services of our host Vercel (address see section 3). Both work without cookies and without storing data in your browser; no user profile is created and you are not recognised across websites or over several days.

The following is processed: the page accessed (without query parameters), the referring website (referrer), time of access, country (derived from the IP address), device type, operating system and browser, and, for Speed Insights, technical measurements of loading speed (e.g. loading time, response time, layout shifts). To count unique visits, Vercel creates a hash value from the request that is recalculated daily and does not allow any conclusions about your person; your IP address is not stored. We only see aggregated statistics.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in designing our services according to demand and detecting technical problems. Processing takes place within the framework of our data processing agreement with Vercel; for transfers to the USA, the information in section 3 applies.

Objection: you can object to the measurement at any time. If your browser sends “Do Not Track” or “Global Privacy Control”, no measurement takes place. Alternatively, you can switch off measurement for this browser here; a marker (without personal data) is stored in your browser for this purpose:

We advertise our services with ads in Google Search. To find out whether these ads help, we use – only if you choose “Accept” in the cookie banner – the Google Ads conversion measurement of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, no connection to Google is established and no cookies are set.

With your consent, your browser loads the Google tag from Google servers. If you came to the website via one of our Google ads, Google sets a cookie (e.g. “_gcl_aw”, stored for up to 90 days) and records when you carry out one of these steps: clicking “Book now” or a link to our booking system, submitting the Robot Club enquiry or clicking our phone number. Your IP address, the ad’s click ID, browser and device information and the time and type of the step are processed. The content of your form entries is not transmitted to Google. We only receive aggregated figures from Google (e.g. “12 booking clicks via the holiday camp ad”), no information about individuals. We do not use personalised advertising (remarketing).

The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Google may also process data in the USA; Google is certified under the EU-U.S. Data Privacy Framework, so there is an adequacy decision of the EU Commission (Art. 45 GDPR). For the measurement, we and Google act as joint controllers or Google acts as an independent controller; Google’s terms for advertising services apply. Further information: Google’s privacy policy and privacy information for Google advertising products.

Withdrawal: you can withdraw your consent at any time with effect for the future – via the “Cookie settings” link at the bottom of every page. We store your choice in your browser’s storage (local storage, without personal data) so that the banner doesn’t appear on every page view.

6. Encryption

For security reasons, our website uses SSL or TLS encryption. You can recognise an encrypted connection by the padlock symbol and “https://” in your browser’s address bar.

7. Fonts

We use the fonts “Lexend Exa”, “Instrument Sans” and “Unbounded” (licence: SIL Open Font License). They are stored locally on our server and loaded from there. No connection to servers of Google or other providers is established when a page is accessed.

8. Cookies and local storage

Our website does not set any cookies of its own. Google cookies are only set if you consent to Google Ads success measurement (section 5). We store your choice in the cookie banner in your browser’s storage (local storage). We only store further data in your browser’s storage (local storage) if you object to audience measurement (section 4) – in which case only this objection is noted there so that it is respected on further visits. If you use the chat assistant, the conversation history is stored in session storage and automatically deleted when you close the tab (section 9).

Technically necessary cookies may be used on the pages of our booking system kutego, for example for logging in to the customer account or for the booking process. Details can be found in kutego’s privacy information (section 11).

9. AI chat assistant

Using the chat circle at the bottom right, you can ask our AI chat assistant questions. The answers are generated automatically by an AI language model; they may contain errors and are not binding – our course pages and terms and conditions are authoritative.

When you send a question, your message and the previous conversation history of this session (at most the last ten messages) are transmitted in encrypted form to a server function of our website at Vercel (section 3) and from there to the AI provider Mistral AI SAS, 15 rue des Halles, 75001 Paris, France. Mistral processes the data in the EU to generate the answer and, according to its own information, stores it only temporarily to detect misuse; it is not used to train AI models. We only process your IP address briefly to limit the number of requests, and it is not passed on to Mistral. We do not store the chat content ourselves.

So that the conversation is retained when you switch between our pages, the history is stored in your browser’s session storage; it is automatically deleted when you close the tab or browser.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in answering questions about our services quickly and around the clock. Where your question serves to initiate a booking, Art. 6 (1) (b) GDPR also applies. We have a data processing agreement with Mistral pursuant to Art. 28 GDPR. Use of the chat is voluntary. Please do not enter any personal data in the chat (e.g. names, address, health information) – for personal matters you can reach us at info@robot-school.de or +49 6171 279 2990.

10. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, email address, phone number, content of your enquiry) to deal with your request. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is related to a contract or is necessary for pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We delete the data as soon as your enquiry has been fully dealt with and no statutory retention obligations prevent this.

11. Bookings and Robot Club membership via kutego

For booking workshops, holiday camps and the Learning Journey and for Robot Club membership, we use the kutego booking system of Kutego GmbH, Pariser Platz 6a, 10117 Berlin, Germany. When you click “Book now”, you are taken to our booking portal at buchungen.robot-school.de. Kutego processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

In particular, we process: name and contact details of the parents or guardians, name and date of birth or age of the child, booked courses and dates, payment and invoice data and – if you provide them – notes important for supervision (e.g. allergies or persons authorised to collect the child). The purpose is to carry out the booking, the courses and the membership, including billing and communication. The legal basis is Art. 6 (1) (b) GDPR. Where you provide us with health data about your child, we process it on the basis of your consent (Art. 9 (2) (a) GDPR) solely for safe supervision.

The customer account also stores the topics covered and your child’s projects (Learning Passport) so that you can follow learning progress.

If you register your child for a competition, we pass on surname, first name, date of birth and email address to the respective organiser (e.g. World Robot Olympiad or FIRST LEGO League Challenge) insofar as this is necessary for registration (Art. 6 (1) (b) GDPR).

Further information on data processing by kutego can be found at www.kutego.de/privacy.

Display of available places: on our course overview we show the places currently available. For this, your browser retrieves the date data directly from kutego (buchungen.robot-school.de) when the page is opened. For technical reasons, your IP address is transmitted to kutego; no personal data is entered. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in an up-to-date and reliable display of places.

12. Enquiries via forms: Robot Club, Learning Journey and birthday parties

Using the enquiry form on our “Robot Club” page, you can register your interest in membership and a place in the Learning Journey. We process your details: title, first and last name, email address, phone number, number and age of participants and your consent to processing. The purpose is to process your enquiry and inform you when booking opens. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measure at your request).

When submitted, the details are transmitted in encrypted form to a server function of our website at Vercel (see section 3), checked there and forwarded as an email via our email provider to our mailbox info@robot-school.de. The form data is not stored permanently on Vercel’s servers. To protect against misuse, your IP address is processed briefly to limit the number of requests (Art. 6 (1) (f) GDPR).

If no booking or membership results, we delete your details no later than three months after the start of the booking phase. Your enquiry is non-binding and can be withdrawn at any time by email.

Birthday party enquiry: via the enquiry form on our “Birthday parties” page, we process the first name and age of the birthday child, desired theme, package, date and time, number of children, location of the party (the address if the party is at home), desired extras, any information you voluntarily provide in the free-text fields and the first and last name, email address and phone number of the person making the enquiry. The purpose is to plan and confirm the party; the legal basis is Art. 6 (1) (b) GDPR. Transmission and forwarding take place as described above via a server function at Vercel by email to info@robot-school.de, without permanent storage at Vercel. If no booking results, we delete your details no later than three months after the requested date; in the case of a booking, the statutory retention periods for invoice data apply.

13. Newsletter (Mailchimp)

Our newsletter informs you about new courses, holiday camps, workshops, the Learning Journey and ROBOT SCHOOL news. You receive the newsletter if you have expressly subscribed to it (legal basis: consent, Art. 6 (1) (a) GDPR). If you have already booked a course with us and provided your email address, we also inform you about our own similar offers unless you have objected (§ 7 (3) UWG, Art. 6 (1) (f) GDPR; our legitimate interest is informing our customers). We point out this right to object when collecting the address and in every newsletter.

We process your email address, your name if applicable and the date and time of registration or consent. For sending, we use the Mailchimp service of The Rocket Science Group LLC d/b/a Mailchimp, 405 N Angier Ave. NE, Atlanta, GA 30308, USA (an Intuit Inc. company). Mailchimp processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The data is also processed in the USA; Mailchimp is certified under the EU-U.S. Data Privacy Framework, so there is an adequacy decision of the EU Commission for this transfer (Art. 45 GDPR). The EU standard contractual clauses also apply.

Our newsletters contain a small, invisible image and links with identifiers through which Mailchimp records whether and when a newsletter was opened and which links were clicked. Technical information such as IP address, browser and device is also processed. We use this analysis to improve our newsletters. The legal basis is the legal basis applicable to the sending in each case (consent or legitimate interest). If you deactivate the loading of images in your email program, opening is not measured.

Unsubscribing: you can unsubscribe from the newsletter at any time – via the unsubscribe link at the end of each newsletter or by email to info@robot-school.de. This withdraws your consent or objects to receiving it with effect for the future. After unsubscribing, we delete your address from the mailing list; we may store it on a block list so that you do not receive any further newsletters (Art. 6 (1) (f) GDPR). Further information: Intuit/Mailchimp privacy statement.

14. Job applications

If you apply to us by email, we process your details and documents to carry out the application process (§ 26 BDSG in conjunction with Art. 88 GDPR or Art. 6 (1) (b) GDPR). If your documents contain special categories of personal data (e.g. health information), we only process them insofar as this is necessary for the process. If no employment relationship results, we delete your documents no later than six months after the end of the process, unless you have consented to longer storage.

15. Data of children and teenagers

Our services are aimed at children and teenagers. Bookings and memberships are concluded by the parents or guardians, who provide the child’s data. We ask children under the age of 16 not to send us any personal data without the consent of their parents or guardians.

16. Storage period

We only store personal data for as long as necessary for the respective purpose. We also retain contract data where statutory retention obligations exist – in particular under commercial and tax law (usually six or ten years).

17. Your rights

You have the right at any time to information about your stored data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). Simply contact info@robot-school.de.

Right to object: where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint: you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, datenschutz.hessen.de.

18. Changes to this privacy policy

We adapt this privacy policy as soon as our website or the services used change. The version published here applies.

Copyright and intellectual property rights

All content on our websites, including texts, images, graphics, audio and video files, is our property unless expressly stated otherwise. Without consent, this copyright-protected content may only be used for private, i.e. not public or commercial, purposes (downloads, copies). Changes, translations or other adaptations of the content require prior written approval from Robot School. Unauthorised or improper use of any Robot School GmbH trademarks and logos is expressly prohibited. Please note that infringement of our copyright or other intellectual property rights may result in civil and/or criminal consequences.

Disclaimer

Our websites may contain external links (hyperlinks) to third-party websites. Robot School GmbH is not aware of the content of third-party websites and therefore accepts no guarantee or liability for any unlawful content or other legal violations on third-party websites. The links to these websites have been compiled and checked with all due care. Nevertheless, we cannot accept any responsibility for the timeliness, accuracy, completeness or quality of third-party websites. This website is for general information only and in no way replaces professional advice. Robot School GmbH accepts no responsibility for actions taken on the basis of this website. Use of this website and downloading data is at your own risk. Robot School GmbH accepts no responsibility for any resulting damage.

Last updated: October 2026