Privacy Notice for the fiveways Learn App

Privacy Notice for the fiveways Learn App

1. General Information

As the publisher of the fiveways App, SRH Berufsbildungswerk Neckargemünd GmbH is committed to protecting users' data in accordance with the requirements of the General Data Protection Regulation (GDPR), Articles 24 and 25, and ensuring that all data processing activities are conducted transparently and in compliance with applicable laws.

1.1 Data Controller

SRH Berufsbildungswerk Neckargemünd GmbH
Im Spitzerfeld 25
69151 Neckargemünd
Germany

Phone: +49 (0) 6223 89-1010
Fax: +49 (0) 6223 89-2126
Email: info@fiveways.app
Website: www.fiveways.app

1.2 Authorized Managing Directors

Sascha Lohwaßer, Stefan Medinger (Managing Directors)

Shareholder: SRH Bildung GmbH, Bonhoefferstr. 1, 69123 Heidelberg, Germany

Commercial Register Court: Mannheim Local Court
Commercial Register Number: HRB 335376

VAT Identification Number pursuant to Section 27a of the German Value Added Tax Act (Umsatzsteuergesetz): DE 174 981 459

1.3 Data Protection Officer

frankenDSB DatenschutzManufaktur GmbH
Jörg Flierenbaum
Unterer Steinberg 11
97453 Schonungen
Germany

Email: datenschutzbeauftragter-srh@frankendsb.de

1.4 App Publisher

SRH Berufsbildungswerk Neckargemünd GmbH
Im Spitzerfeld 25
69151 Neckargemünd
Germany

1.5 Backend Operations and App Development

Bornholdt Lee GmbH
ABC-Straße 21
20354 Hamburg
Germany

Data Protection Officer of Bornholdt Lee GmbH: Sebastian Hertig, Hertig Oberbeck Datenschutz GmbH, Hallerstraße 76, 20146 Hamburg, Germany.

1.6 Classification Under Healthcare Regulations

The fiveways App is neither a digital health application (Digitale Gesundheitsanwendung, DiGA) within the meaning of Section 33a of the German Social Code, Book V (SGB V), nor a medical device within the meaning of Regulation (EU) 2017/745 on medical devices (MDR).

The App is not intended for medical purposes. It is expressly not designed to detect, monitor, prevent, treat, or alleviate diseases or mental health disorders. It also does not provide medical diagnoses, individualized treatment recommendations, or medical consultations.

Instead, the App offers everyday, prevention-oriented content designed to strengthen psychosocial skills. Its purpose is to support young people during challenging stages of life by promoting self-efficacy and resilience through interactive activities, reflection exercises, and digital coaching.

Using the App does not replace medical, psychotherapeutic, or other healthcare treatment. Users who show signs of a mental health condition requiring treatment are explicitly directed within the App to appropriate professional support services in an easily accessible manner.

2. Collection and Use of Personal Data

Users' personal data is stored only for as long as necessary to fulfill contractual obligations or the purposes specified in the App. Once use of the App has ended, the data will be deleted in accordance with Article 17 GDPR, unless statutory retention obligations apply.

2.1 Categories of Personal Data

• Login data (email address, password): Used to authenticate users and secure their accounts.
• Demographic data (target group: apprentices/students): Used to tailor content and services to users' needs.
• Personal data entered during exercises: Users may voluntarily enter personal notes or goals in certain exercises (e.g., reflections or plans). These entries are used exclusively for individual self-reflection and goal setting and are visible only to the respective user. fiveways, institutions, and third parties do not have access to these entries.
• Communication data (e.g., email address for two-factor authentication): Used to ensure security and verify users' identities.

2.2 Use of Matomo (Voluntary Usage Data – Analytics)

We use Matomo, a privacy-friendly analytics tool, to analyze and optimize our digital services. The following information is collected in pseudonymized form:

• Device and browser information (e.g., device type