Privacy Notice

PhD candidate Alexander Scheuer is the controller responsible for conducting the research project and processing the data. business@school provides information about the project and facilitates contact. business@school / BCG is expressly not a controller within the meaning of the GDPR. The business@school initiative merely provides information about the project. Contact: Alexander Scheuer, info@aistrategyresearch.com (see Imprint).

Below we inform you about the nature, scope, and purpose of the processing of personal data as part of the AI Tutor Luka research project.

The platform is hosted via Lovable Cloud / Supabase within the EU. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the platform. A data processing agreement pursuant to Art. 28 GDPR is in place; EU Standard Contractual Clauses have been agreed for any transfers to third countries.

When you access the website, technically necessary access data (e.g. IP address, timestamp, user agent) is processed for a short period to ensure security and operation. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the aforementioned purposes.

We process the participant's master data in order to carry out registration on the platform: first name, surname, date of birth, email, place, school. Legal basis: consent pursuant to Art. 6(1)(a) GDPR. We also process the email address of the legal guardians of minor participants in order to obtain the guardians' consent to the minors' participation. Legal basis: Art. 6(1)(c) GDPR.

We process study data (responses from questionnaires, knowledge assessments, and conversation data with the AI tutor) in anonymized form, i.e. without reference to the respective participant.

The evaluation of the study data is carried out confidentially and with restricted access, exclusively by Alexander Scheuer. Publications of the scientific results are made only in aggregated and anonymized form.

If you request a demo via the website, we do not process any data.

Participant management, questionnaires, knowledge assessments, and tutor delivery are handled via the Sona8 study platform. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in conducting the study. A data processing agreement pursuant to Art. 28 GDPR is in place. Further information: https://sona8.com/data-policy.

We use the ElevenLabs service for conversations with AI Tutor Luka. During this process, the voice is converted to text in real time anonymously, i.e. without reference to a participant, and the tutor's response is output again as speech.

Zero Retention Policy. A so-called Zero Retention Policy has been agreed with ElevenLabs. This means: the voice recordings are not stored permanently. Storage and evaluation of conversation data for research purposes takes place exclusively on servers within the European Union.

No AI Training. The data is not used to train AI models. This is contractually excluded.

Personal data is retained only until the study is completed, including any follow-up waves, and is subsequently deleted or anonymized. Only an anonymized research dataset remains. Upon withdrawal of consent, the data record is deleted without delay.

When you contact us by email, the data you provide is processed to handle your inquiry and is deleted once the matter has been resolved, unless statutory retention obligations require otherwise. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is responding to inquiries.

Pursuant to § 25 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act), we currently use only technically necessary cookies. No analytics tools are used.

The website uses SSL/TLS encryption to protect transmitted data.

Under Art. 15–21 GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw your consent at any time pursuant to Art. 7(3) GDPR. Furthermore, you have the right to lodge a complaint with a competent data protection authority, Art. 77(1) GDPR.

We reserve the right to amend this Privacy Notice in order to keep it aligned with current legal requirements.