(revised: 15th October 2025)
Pursuant to Article 13 of the EU General Data Protection Regulation (GDPR), this privacy policy informs you about the processing of personal data on HELBLING e-zone kids (hereinafter termed application).
For any queries on our processing of personal data, please contact us: [email protected].
All user data which is collected by the application is processed in compliance with data protection laws. HELBLING uses this data to grant users access to the services and the content provided by the application.
We will be happy to provide you with information about whether and which of your personal data is processed by us and for what purposes (Article 15 GDPR). In addition, you have the right to rectification (Article 16 GDPR), the right to restriction of processing (Article 18 GDPR), the right to erasure (Article 17 GDPR) and the right to data portability (Article 20 GDPR), provided the conditions to exercise such rights are met.
If our data processing is based on your consent as per Article 6 (1) a GDPR, you may freely withdraw this consent at any time without giving reasons (Article 7 (3) GDPR). Please note such withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.
Right to object: You may, at any time, object to the processing of your data for direct marketing purposes (Article 21 (2) GDPR). Furthermore, you may also object, on grounds relating to your particular situation, to any other processing of your personal data which based on our legitimate interests as per Article 6 (1) f GDPR (Article 21 (1) GDPR).
The exercise of these rights is free of charge.
Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the possibility to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria
Telefon: +43 1 52 152-0
E-Mail-Adresse: [email protected]
We employ comprehensive technical and organizational measures to protect your personal data from manipulation, loss, destruction or unauthorized access.
This application uses SSL or TLS encryption for security and to protect the transmission of confidential content, that you send to us as the site operator. If SSL or TLS encryption is activated, the data you transmit to us cannot be read in transit by third parties. Our technical and organizational measures are continuously adapted in accordance with technological progress.
We would like to point out that in general usage of the Internet (e.g. sending e-mails) may impose security risks. We cannot guarantee protection of the data while in transit to us, so we recommend to use the postal service for confidential information.
We do not process your personal data in the context of a procedure for automated decision-making (including profiling) and do not intend to initiate such processing.
The application uses country settings for non-registered and registered users. This is necessary due to country distribution restrictions for individual products. The country settings also allow the display of products available and relevant for the specific market (e.g. teaching and learning materials suitable for the national education system) and by doing so, help to prevent incorrect decisions. The country settings can be changed by users at any time. Please refer to the product descriptions for information on availability of a product in your country.
Legal basis of this processing is Art. 6 (1) f GDPR. Our legitimate interest lays in the prevention of misuse, the provision of a user-friendly application and the improvement of our services.
The HELBLING Account authorizes users to access specific applications. For the creation and usage of the HELBLING Account, provision of personal data (first name, last name, e-mail address, username, password) is mandatory to enable us to correctly assign and manage the account.
To access certain specific applications, additional information may be required (e.g., choice of user role, information about the user's school or country settings), e.g. in order to offer licenses bound to schools. Without providing such personal data, we are unable to operate such profiles and will reject registration.
The legal basis of this processing is the execution of the contract concluded between you and us regarding the account, i.e. Art. 6 (1) b GDPR. We will retain the data until your account is deleted. Statutory retention periods remain unaffected.
You can delete your HELBLING Account at any time, which will also terminate the user agreement regarding the account. Please remember to individually save any information you want to retain from the account as it will not be retrievable once the account is deleted.
If you contact us with a request, we will process your personal data given within such request to process, manage and answer your request. You may use our contact form provided by us for such contact. In such form, we ask you to provide a selection of personal data, such as your name and e-mail address, to allow to process, manage and answer your request in a meaningful way.
Legal basis for this processing of your data is Art. 6 (1) (b) GDPR, insofar as it concerns the initiation of a contract or customer support in the context of an existing contractual relationship. If you give us your express consent, legal basis is Art 6 (1) a GDPR. Otherwise, legal basis is Art. 6 (1) f GDPR, namely our legitimate interest to communicate with our customers as they requested.
We will store the data you provided when contacting us until you request us to delete it, revoke your consent to store it, or if the purpose for storing the data no longer applies (e.g. after we have completed processing your inquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.
When you use our application and view its contents, some information on the connection and the device used is transmitted. We will store and analyze such information as needed for technical and security reasons to protect the HELBLING systems against attacks (e.g. protection against attacks such as brute force attacks or DDoS attacks) as well as for statistics in order to improve the offers.
Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional application and satisfying user experience, to set access authorizations and in ensuring the stability and security of the services involved. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.
We use technical means for various services and functions, which are stored on your device. These are, in particular, so-called cookies, but also similar identifiers, such as tracking pixels or web beacons (all such technical means are referred to in the following as "cookies"). Third parties may also be given the opportunity to store cookies on your device, especially if content or functionalities of such third parties are integrated in the application and used and/or activated by the user. Which elements of our application use cookies is explained in this Privacy Policy.
Most of the cookies we use are so-called "session cookies": they are automatically deleted from your device after the end of your visit. Other cookies remain stored on your device for a set storage time or until you delete them. These cookies enable us to recognize your browser on your next visit.
Our application employs technically necessary cookies ("functional cookies") to provide the essential basic functions of the service. Without these functions, our application cannot be displayed completely and correctly. Hence, you cannot deselect these cookies if you wish to use our application. Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional application and a satisfying user experience, while complying with legal requirements. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.
You can deny the storage of cookies on your device at any time in the set-up of your browser software or may delete all cookies when you close the browser by default. Each browser has its own, specific cookie management options, and we recommend adapting them to your preferences. However, please note that if you refuse employment of all (or specific) cookies, you will not be able to use all (or specific) functions of this application to their full extent.
Please see a list of tutorials explaining the deletion of cookies (last updated 15th Octobre 2025, please check your browser version):
We enable you to control our use of Cookies with the help of our Consent Manager. The Consent-Manager will be displayed on your first visit to our application and will give you the opportunity to select and manage your consent to our usage of Cookies. The Consent-Manager will store a functional cookie in your browser, to memorize the consent you have given, as well as their rejection or revocation. This data will not be passed on to third parties.
Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional application and a satisfying user experience, while complying with legal requirements. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.
The cookies used by this application and the load balancer are essential for directing traffic to the correct servers and ensuring a stable data flow at all times. Session information is required to store and verify application and profile settings, thereby ensuring authorized access to the application and its content.
CloudFlareThe application is being used by users / devices worldwide and a huge number of requests are sent to our applications. We use the security features, analytics and the content delivery network with DNS of Cloudflare Inc, 101 Townsend St, San Francisco, California 94107, USA ("Cloudflare").
Technically, the information transfer between your browser and our application is routed through Cloudflare's network. Cloudflare is thus able to analyze the traffic between users and our application, for example, to detect and prevent attacks on our services. In addition, Cloudflare may store cookies on your computer for optimization and analysis.
Cloudflare collects statistical data about visits to our application. The access data includes: name of the page accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type along with version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical analysis for the purpose of operation, security and optimization of the offer.
Legal basis for this processing is Art. 6 (1) f GDPR, namely our legitimate interest in the protection and security of our systems. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Cloudflare participates in the EU/US Data Privacy Framework. Any data transfers to the USA potentially associated with our use of Cloudflare’s services are permissible as per Art. 45 (1) GDPR.
DataDogWe use monitoring and security services of Datadog Inc., 620 8th Ave., 45th Fl., New York, NY 10018 USA (“DataDog”) to improve the security of applications and the availability of our application. We have concluded a Data Processing Agreement with DataDog in accordance with Art. 28 GDPR. The Data Processing Agreement incorporates Standard Contractual Clauses as per Art. 46 (2) c GDPR. You may find DataDog’s privacy policy here: https://www.datadoghq.com/legal/privacy/.
Legal basis for this processing is Art. 6 (1) f GDPR, namely our legitimate interest in the protection and security of our systems. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Any data transfers to the USA potentially associated with our use of DataDog’s services are permissible as per Art. 46 (2) c GDPR.
In addition to functional cookies, we use "Optional cookies" ("Performance Cookies" and "Marketing Cookies"). These will only be employed with your express consent, which you may (or may not) express via the Consent Manager. Such cookies may serve in particular to enable us to analyze and improve visits to our application, to make it easier for you to use it via different browsers or terminal devices, to recognize your browser on a visit or to improve the user experience.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You maye revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
Google AnalyticsWe would like to know how users use our application and how we can improve our application. To analyze user behavior, we use the service Google Analytics on our application. The service employs cookies and processes the IP address used by your device.
"Google" is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC. We have concluded a Data Processing Agreement with Google Ireland Ltd. as our service provider in accordance with Art. 28 GDPR. Further information on Google Analytics as well as Google's privacy policy can be found here: https://policies.google.com/privacy.
We use Google Analytics using the "anonymization of the IP address" functionality. According to Google, the IP address used by your device is shortened and anonymized by Google immediately when read out, with anonymization taking place within the European Union. According to Google, non-anonymized IP addresses only reach the USA in exceptional cases. According to Google, the IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.
The information generated by the cookies, about your use of this application, which because of the anonymization of the IP address regularly cannot be assigned to any person, is usually transmitted to a Google server in the U.S. and stored there. On our behalf, Google will use this information for the purpose of evaluating your use of the application, compiling reports on application activity and providing other services relating to application activity and internet usage to the application operator.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You may revoke your consent anytime using our Consent-Manager. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are permissible as per Art. 45 (1) GDPR.
You can also prevent the described processing through the set-up of your browser, for example, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
Google AdsWe would like to know the benefit of advertisements we place on other application and in search engines. For this purpose, we use service Google Ads-Conversion on our application. The service employs cookies.
"Google" is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC. We have concluded a Data Processing Agreement with Google Ireland Ltd. as our service provider in accordance with Art. 28 GDPR. Further information on Google Analytics as well as Google's privacy policy can be found here: https://policies.google.com/privacy.
When we place advertisements on other websites and search engines, these advertisements are displayed via an ad server. If you are routed to our application by clicking on such advertisement from displayed by such ad server, Google Ads-Conversion will employ an individual cookie on your device ("conversion cookie"). These cookies have a storage time of 30 days. As long as the cookie is active, we can recognize that a user has clicked on the Google Ads advertisement. By means of the so-called "view-through conversions", we can track how many users have seen our ad without clicking on it and have later engaged with our application. This allows us to understand user behavior and their response to our ads. The information obtained with the cookies is used solely to generate conversion statistics for us as Google Ads customers. Thus, we learn, among other things, the total number of users who have clicked on one of our ads and were redirected to a page of ours provided with a conversion tracking tag.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You may revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are permissible as per Art. 45 (1) GDPR.
Using Google's general evaluation tools, we are only able to see how many users, subdivided according to general criteria not associated with personal data, have seen our advertising. Please note, however, that we cannot exclude Google processing this data under its own responsibility, over which we have no control. If you do not agree or no longer agree with this, please do not declare your consent or revoke your consent in our Consent-Manager.
Bing AdsTo position the platform in Bing's search engine results, the Microsoft service “Bing Ads” is used (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399). This service makes it possible to track the activities of website visitors after a Bing Ad has been clicked. No identity-related information is collected. You can refuse the Bing cookie and prevent Microsoft from processing this data: https://account.microsoft.com/privacy/ad-settings/signedout and for cross-device tracking: https://choice.microsoft.com/en-us/opt-out. Further information about data protection and the cookies used by Microsoft and Bing Ads can be found here: https://privacy.microsoft.com/en-us/privacystatement.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You may revoke your consent anytime using our Consent-Manager.
Microsoft participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Microsoft services are permissible as per Art. 45 (1) GDPR.
WistiaWe display videos which are stored by the video hosting service "Wistia" on their servers. Operator of Wistia is Wistia, Inc, 120 Brookline Street, Cambridge, MA 02139, USA. By integrating Wistia's video player into the respective page, we embed such videos into our application so the videos can be displayed and viewed as part of our application.
Once the player is activated, Wistia will receive your IP address and appoint it to the video with a time-stamp. You can find more information about Wistia and Wistia's privacy policy here: https://wistia.com/privacy.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given when activating Wistia. Wistia participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Wistia services are permissible as per Art. 45 (1) GDPR.
YoutubeWe display videos which are stored by the video hosting service "Youtube" on their servers. Operator of Youtube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de&gl=de). By integrating Youtube's video player into the respective page, we embed such videos into our application so the videos can be displayed and viewed as part of our application. YouTube may use cookies and process your data in accordance with their privacy policy, which you can find here: https://policies.google.com/privacy?hl=en&gl=en.
Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given when activating Youtube. You may revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA potentially associated with our use of Youtube’s services are permissible as per Art. 45 (1) GDPR.
For setup of a HELBLING Account and a profile on the application, first name and last name, email address, country and time zone as well as a password of choice are obligatory requirements. Your first and surname, email address and password serve to identify you unambiguously as the contractual partner entitled to use the online service and to make further individual benefits available. The email address enables us to contact you quickly should there be any queries needing clarification and to reset your personal password in case of need.
Legal basis of this processing is Art. 6 (1) f GDPR. Our legitimate interest lays in the prevention of misuse, the provision of a user-friendly application and the improvement of our services.
For the authentication of teaching personnel, also p.r.n. a school identification number as well as a school name and address are required. This data serves to identify and verify the teaching personnel unambiguously for access to the protected area and to make individual benefits available to them. The information concerning the school serves to verify you as a bona fide teacher. The legal basis for the processing is point (b) of Article 6 (1) GDPR.
When a teacher sets up access for a class and its students, access codes (user name and password) are created for the students. We strongly recommend using pseudonyms for this set up instead of real names as such data will apply only indirectly to individual persons. Consequently access and the data contained therein cannot be allocated by us to any particular person. Allocation can then only be made by the teacher involved. The legal basis for the processing is point (b) of Article 6 (1) GDPR.
In order to process personal data with the application in compliance with the EU General Data Protection Regulation (GDPR), we have to require the agreement of students and, if applicable, their legal representatives for the setup of the student accounts by the teacher. The legal basis for the processing is Article 8 (1) GDPR.
HELBLING utilises the data obtained from non-registered and registered users to maintain the services offered or to improve them. In addition to this, the results from exercise materials could be used completely anonymously for research projects. No personal details are ever disclosed to third parties during this process. In all other cases, too, no data is ever given to third parties, but data may be requested by the authorities in the case of an official investigation.
The legal basis for the processing is point (f) of Article 6 (1) GDPR. The legitimate interests that we pursue are ensuring system security, prevention of misuse, provision of a user-friendly application and optimising our services.
Registered users can close their user accounts and completely delete all personal data related to their account at any time. When class accounts are closed, all the class related data is deleted as well.
As a rule, data will be shared with third parties only if necessary for the performance of a contract. This may be the case when, for example, the customer’s address is transmitted to the distribution centre.
Apart from that data will be shared with third parties only if this is permitted by a statutory provision or the customer has given his/her consent.