This translation is provided for convenience; only the German version is legally binding.
Website, teacher survey and pilot pre-registration · last updated 13 September 2026.
Provider addresses: Imprint. Conditions for the pilot programme: Terms of participation.
The controller for the website, the teacher survey and the pilot pre-registration is Laura Rochet, reachable at the provider addresses in the imprint and at datenschutz@laura.school. This statement describes the website and survey process. For the processing of pupil data in the app, the information on the chosen processing mode and the agreements with the responsible school apply in addition.
The website and the API are operated at Vercel. For transmission and protection, the IP address, the time, the requested path, the HTTP status and technical browser details in particular are processed. This serves provision and the defence against disruption on the basis of our legitimate interest under Art. 6(1)(f) GDPR. Operating logs are processed only for as long as they are needed for technical provision, error analysis and the defence against specific abuse attempts. The survey API does not output contact fields, answer content or access keys in error messages. Please submit personal details only in the forms provided for that purpose, never in a URL.
The voluntary survey is aimed at teachers; participation is open after a short registration. First name, surname, email address, telephone number and consent to the processing of the survey data are required for registration. An access code is no longer requested. The survey is unlocked immediately afterwards. Contact data is encrypted on the server and stored separately from the answers in the dedicated LAURA Supabase project in Frankfurt. Participation is pseudonymised, not anonymous: authorised operators can link answers and contact via the participation ID. The questionnaire version, the consent version and the time of documentation are recorded as well, along with interim states, progress and the time of completion. Changes are saved automatically after a short pause in typing. The basis is your consent under Art. 6(1)(a) GDPR. Without the required details the registered survey is not possible; the rest of the website remains accessible. Please do not name pupils or other people in free-text fields.
An HttpOnly cookie named laura_survey_resume recognises the participation on the browser used so far for at most 180 days. A session expires after twelve hours; its key is held in tab-scoped sessionStorage. Returning on the same browser requires no further entry. Signing out ends the current session; the browser assignment is kept for resuming later. Someone else's email address gives no access to other people's answers. These storage items serve the expressly requested protected questionnaire (Section 25(2) no. 2 TDDDG). For unconfirmed answers the browser keeps a draft encrypted with AES-GCM in IndexedDB. It is removed after confirmed saving or signing out and is no longer used after 24 hours; expired remnants are cleaned up on the next access. You can delete it at any time via the browser storage. The key is not exportable, but it does not protect against a compromised browser or access to your unlocked device. A random registration ID in sessionStorage allows safe repeats without a duplicate sign-up; it contains no contact values. A withdrawal from the analysis is stored locally under laura.research.stop.v1 until you clear the browser storage; it serves to respect your decision.
The usage analysis rests on the consent given orally in advance according to the organiser. We record public page views, active dwell time, scroll depth, click areas and mouse positions and link them to your participation. Field content, keyboard input and screen recordings are not recorded. You can end the analysis at any time; the survey and the pilot pre-registration remain accessible. The analysis begins after successful registration and after this browser has been linked to the personally invited circle of teachers. According to the organiser's confirmation, consent was obtained orally beforehand; there is therefore no renewed consent request in the browser. We document this confirmation and the scope version without inventing an unknown date of conversation. The basis is consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The purposes are comprehensible processes, the evaluation of drop-offs and interest in the pilot programme. On released public pages the analysis stays active both before completion and after it. Website visits that are not linked, from before the registration, are not recorded. App, login, class and pupil pages are excluded. No query parameters or full referrers are transmitted, and no data is transmitted to advertising platforms. The HttpOnly cookie laura_research runs for at most 30 days. The button „Analyse beenden und Daten löschen“ (end analysis and delete data), shown in German, stops collection immediately in the browser; stored analysis data is deleted after a successful server call. A connection error is displayed and the deletion is attempted again.
At the end you can ask without obligation to be pre-registered for three free months in the pilot programme. Only upon your express request do we store the time of the request and the accepted version of the conditions. The necessary email communication serves to handle your request under Art. 6(1)(b) GDPR. Registration and pre-registration allow no general advertising. For voluntary follow-up questions or product tests you can give separate express consent at the end of the survey; the decision and its time are documented. The analysis and the completion of a survey trigger no automatic admission to the app. There are no decisions based solely on automated processing which produce legal effects or similarly significant effects. You can withdraw the pre-registration via the contact address.
Access is granted to authorised operators for conducting the survey and handling requested pilot admissions, and to technical service providers to the extent necessary. Vercel provides website and API hosting, Supabase the database. Frankfurt denotes the database location; it is not an assurance that all hosting, support or sub-processing takes place exclusively in Germany. The service providers describe their sub-processors and the safeguards for international transfers in their contractual information. Participation, contact, answer and pre-registration data are removed 180 days after registration in the next daily deletion run. Analysis data including the associated note expires 30 days after registration in the next daily deletion run. A withdrawal deletes the analysis data earlier; the withdrawal note prevents renewed activation and likewise expires after 30 days. Separate deletion cycles apply to backup copies and technical provider logs; they do not serve as active survey evaluation. Separate app contracts are documented independently. Which service providers are involved in detail is set out in the two following sections.
The following service providers receive personal data in the ongoing operation of the website and the survey. Purpose, type of data and place of processing are stated. Information on their sub-processors and on safeguards for international transfers is kept available by the service providers in their own contractual information; the corresponding references are at the end of this page.
The following service providers belong to functions outside the website and survey process. They receive personal data only once the relevant function is used; for cloud recognition, additionally only in the processing mode expressly chosen for it. The local mode is preset, and cloud recognition can be switched off separately. We name them here because a statement that is only brought up to date once data is already flowing comes too late.
Under the GDPR you can request access, rectification, erasure, restriction and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw consent at any time with effect for the future; the lawfulness of the processing carried out up to that point remains unaffected. Please contact datenschutz@laura.school. For attribution we check your authorisation before we disclose or change data. You can lodge a complaint with a data protection supervisory authority, in particular at your place of residence or at the seat of the controller, for example with the Berlin Commissioner for Data Protection and Freedom of Information.
Service provider information: Vercel and Supabase. Information on the processing of pupil data: Processing modes.
