Privacy
In short
- This site sets no cookies, which is why there is no cookie banner.
- Learning paths do not need an account. Dojo Mentoring has its own account with an email code.
- Fonts, scripts and images are served by this site itself.
- Your progress in the learning paths stays in your browser. I receive none of it.
- Page views are currently not counted. If counting is added, it will be anonymous with GoatCounter, without cookies, and this section will be updated first.
Controller
Marcel Lehmann (trading as KMUpower), reachable at marcel.lehmann@kmupower.com. Full details are in the legal notice.
Hosting on GitHub Pages
The site is hosted on GitHub Pages, operated by GitHub Inc. in the USA. When you visit, GitHub processes technically necessary access data in server logs, for example your IP address and the time of access. I do not analyse these logs. Data may be transferred to the USA. Details are in the GitHub privacy statement.
Your progress in the browser
Some settings and your progress are kept in your browser's local storage. This is not a cookie. The entries stay on your device and are never transmitted. Nothing is written until you do something.
ppu-fortschritt-v1: which items you have ticked in which week.ppu-theme: "light" or "dark" if you switch between light and dark mode.ppu-lang: "de", "fr", "it" or "en", so the home page does not redirect you to another language again.
With "Take progress along" on the path overview or "Continue on your computer" on a week page you create a link that holds your progress as numbers in the part after the # sign. The browser does not send this part to the server. When you open the link on another device, the site asks before it stores the progress there. The calendar file on the path overview is also created only in your browser.
The site does not store the name or the project on the completion confirmation. You can delete everything with "Delete progress" on the path overview or in your browser settings.
If you use mentoring
Mentoring uses an account that you open with a code sent by email. The controller is Marcel Lehmann (trade name KMUpower), Weidstrasse 1, 8320 Fehraltorf, Switzerland. Send privacy questions to marcel.lehmann@kmupower.com.
What data I process and why
- Sign-in: your email address, the code (valid for 10 minutes) and the session token (valid for 24 hours). Without an email address no account is possible.
- Profile: display name, role, languages, time zone. As a Sensei also short profile, topics, level, experience, capacity, time commitment and times. The LinkedIn link is optional. Also voluntary is the consent that I present you as a Sensei in a LinkedIn post about the Sensei of the Dojo with your name and short profile and, if you allow it, your LinkedIn profile picture. You can withdraw it at any time in your profile. On request I adjust posts that have already been published.
- Matching: your goal, your search criteria and the status of your requests. Matching runs automatically. If nobody matches right now, your goal and criteria stay stored on the waitlist until a match succeeds. The Sensei your request is assigned to sees your display name, your language, your goal and your search criteria before acceptance.
- Mentoring: start, end, confirmations and completion.
- Emails: sign-in code, requests, acceptances, reminders and certificate. There are no marketing emails.
- Reports: the reason for the report and the name and email address of the people involved.
- Certificate: name, role, period, topics and certificate ID.
Legal bases
The account, matching, sharing after acceptance and the emails are needed to carry out the mentoring you ask for (Art. 6(1)(b) GDPR). Your entry in the anonymous directory, your LinkedIn link and being presented in a LinkedIn post rely on your consent (point (a)). You can withdraw it at any time with effect for the future by switching off "Accept new mentees" in your account, removing the LinkedIn link, unticking the presentation options or deleting your account. Reports, protection against misuse and the security of the site rely on my legitimate interest (point (f)). Under Swiss law I process the data in good faith, proportionately and only for these purposes.
Sharing with the other person
Before acceptance you see no data about the Sensei. The Sensei your request is assigned to sees your display name, your language, your goal and your criteria. If they decline, the next Sensei sees it. The directory shows only anonymous details (topics, languages, level, weekdays, time commitment). On acceptance the Sensei receives your display name and email address. The mentee receives the Sensei's display name, email address, short profile and times. The other person is responsible for how they handle this data. They may use it only for the mentoring, may not pass it on and may not use it for advertising. Once something has been shared by email, I cannot take it back.
Reports
If you report someone or are reported, I store the reason and the name and email address of the people involved, and I read them myself. This lets me review the case even after an account has been deleted. After two reports from different people I hide a profile from the list for the time being. Then I decide myself. I delete closed reports after 12 months.
Certificates
If both sides confirm completion, both receive a certificate. Anyone with the certificate ID can see name, role, period and topics on the verification page. The certificate remains after an account is deleted so that it can still be verified. If you do not want that, write to me and I will delete your certificate.
Recipients and countries
The data of your mentoring account is stored in Microsoft Dataverse in the KMUpower environment, in a data centre in Switzerland. Microsoft is my processor. Brevo (Sendinblue SAS, France) sends emails on my behalf. If you have agreed to be presented, I publish the approved details on LinkedIn (LinkedIn Ireland Unlimited Company); the terms of LinkedIn apply there as well. For sending, name, email address and email content are held by Brevo in the EU, which under Swiss law offers adequate data protection. This site is hosted on GitHub Pages (GitHub Inc., USA). When you visit, GitHub processes technical access data, but no data from your mentoring account. Microsoft and GitHub belong to companies in the USA. Where data reaches the USA, the providers rely on recognised safeguards such as the Data Privacy Framework or standard contractual clauses.
Retention
Codes and tokens are valid only briefly. A daily run deletes expired entries. I delete requests and matches 30 days after they end. I delete a request on the waiting list after 90 days if nobody has matched by then. I delete an account without a running mentoring 12 months after the last sign-in. You can delete your account at any time. Your own requests are deleted. Requests assigned to you as a Sensei are passed on to the next matching Sensei. Running mentorings end.
Security
The connection is encrypted. Code and token are valid only briefly. Only I as administrator and the systems that operate the mentoring have access to the database.
Your rights
You can ask for access, correction, deletion, restriction, a copy of your data in a common format, and you can object. Write to marcel.lehmann@kmupower.com. I reply within 30 days. You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you live in the EU, you can also complain to the supervisory authority where you live.
Links to other sites
The site links to Microsoft Learn, powerplatformtip.com, the dojos, LinkedIn and other sites. Only when you click a link does that provider receive your data. Links to my own sites carry an origin tag in the address (utm_source=powerplatformdojo.com). This site does not evaluate it; the target site does so under its own privacy notice.