Privacy notice

Last updated: 2026-08-03

1. CONTROLLER

The entity responsible for the processing of personal information is:

Nova Uni UG Sirius Businesspark Industriestrasse 13 63755 Alzenau

Legal entity: Nova Uni UG i.G. Public brand name: Nova Uni Business address: Sirius Businesspark Industriestrasse 13 63755 Alzenau Registered office city: Alzenau Country of establishment: DE Managing director: Roberto Trebisonda General email: support@nova-uni.com Privacy and support email: support@nova-uni.com Telephone: Website: www.nova-uni.com

In this Policy, “Nova Uni,” “we,” “us” and “our” refer to Nova Uni UG i.G..

2. SCOPE

This Privacy Policy explains how we collect, use, disclose and retain personal information when a person:

a) visits www.nova-uni.com;

b) creates or manages an account;

c) purchases a course;

d) uses educational content;

e) completes a quiz, exercise or assessment;

f) contacts customer support;

g) submits a cancellation or refund request;

h) uses another feature of the platform.

Additional information concerning children under 13 is provided in our Children’s Privacy Notice.

3. INFORMATION WE MAY COLLECT

Depending on how the platform is used, we may collect the following information.

3.1. Identification information

a) name;

b) name of the parent, legal guardian or purchaser;

c) name or profile name of the student;

d) age or date of birth where necessary;

e) language and country.

3.2. Contact information

a) email address;

b) postal or billing address;

c) telephone number where provided.

3.3. Account information

a) user identifier;

b) encrypted login credentials;

c) account settings;

d) language preferences;

e) registration date and account status;

f) parental-consent status.

3.4. Order and billing information

a) products purchased;

b) order number;

c) price, currency and applicable tax;

d) billing address and billing state;

e) payment status;

f) transaction identifiers;

g) information required for invoicing, accounting and tax compliance.

Where payment is processed by an external payment provider, we generally do not receive the complete payment-card number.

3.5. Learning and activity information

a) courses activated;

b) date and time of first protected-content access;

c) lessons opened or completed;

d) learning progress;

e) quiz answers, scores and attempts;

f) certificates obtained;

g) materials downloaded;

h) activity within the platform.

3.6. Technical information

a) IP address;

b) device type;

c) operating system;

d) browser type;

e) technical identifiers;

f) login records;

g) security records;

h) error and performance information;

i) approximate location derived from technical information where permitted.

3.7. Communications

a) support requests;

b) complaints;

c) refund requests;

d) parental requests;

e) survey responses;

f) other correspondence.

3.8. Consent and authorization records

We may retain:

a) the text and version of a consent or authorization;

b) the date and time it was provided;

c) the relevant account and order;

d) verification information used for parental consent;

e) withdrawal or modification of consent.

4. HOW WE USE INFORMATION

We may use personal information to:

a) create and administer accounts;

b) process orders and payments;

c) calculate applicable sales tax;

d) provide access to courses;

e) save learning progress;

f) administer quizzes and assessments;

g) issue certificates;

h) provide technical and customer support;

i) process refunds and contractual requests;

j) protect accounts and platform security;

k) prevent fraud and misuse;

l) diagnose technical problems;

m) comply with legal and tax obligations;

n) establish, exercise or defend legal claims;

o) send marketing communications where legally permitted;

p) operate optional analytics or personalization features where permitted.

5. CHILDREN UNDER 13

Nova Uni offers educational content that may be directed to children under 13.

We do not knowingly allow a child under 13 to independently create an account or provide personal information without the required involvement and verifiable consent of a parent or legal guardian.

Before collecting personal information online from a child under 13, we will, where required:

a) provide the parent or legal guardian with direct notice of our information practices;

b) obtain verifiable parental consent;

c) collect only information reasonably necessary for the child to participate in the service;

d) allow the parent to review the child’s personal information;

e) allow the parent to request deletion of the child’s personal information;

f) allow the parent to withdraw consent and prevent further collection;

g) take reasonable steps to protect the confidentiality, security and integrity of the information;

h) retain the information only for as long as reasonably necessary for the purpose for which it was collected.

A child under 13 must not submit personal information through a general contact form, community feature or public profile without the required parental authorization.

Parents and legal guardians may contact support@nova-uni.com to:

a) review information collected from their child;

b) request correction or deletion;

c) withdraw parental consent;

d) request that no further information be collected;

e) ask questions about our children’s privacy practices.

6. TEENAGERS

Where a user is 13 or older but is still a minor, we may require the involvement of a parent or legal guardian depending on:

a) the nature of the information;

b) the relevant feature;

c) the user’s state of residence;

d) applicable privacy or child-protection law.

We do not knowingly sell personal information belonging to children or teenagers.

We do not knowingly use sensitive personal information of children for targeted advertising.

7. LEGAL OR OPERATIONAL REASONS FOR PROCESSING

Because Nova Uni UG i.G. is established in DE, some privacy concepts applicable to our processing arise under European data-protection law.

For US users, we process information as reasonably necessary to:

a) provide the requested service;

b) perform the contract;

c) comply with legal obligations;

d) protect legitimate operational and security interests;

e) act on valid consent or parental consent where required.

Where state law provides specific consumer rights, those rights remain unaffected.

8. DISCLOSURE TO SERVICE PROVIDERS

We may disclose information to vendors assisting us with:

a) hosting and technical infrastructure;

b) payment processing;

c) email delivery;

d) video hosting and streaming;

e) customer support;

f) data storage and backup;

g) security and fraud prevention;

h) analytics where permitted;

i) accounting and tax compliance;

j) parental-consent verification.

Service providers may use the information only for the contracted purpose and subject to applicable confidentiality, security and data-protection obligations.

We may also disclose information:

a) where required by law or valid legal process;

b) to protect the rights, safety or security of users or others;

c) to professional advisers subject to confidentiality;

d) in connection with a merger, acquisition or restructuring, subject to appropriate safeguards;

e) to establish, exercise or defend legal claims.

9. SALE, SHARING AND TARGETED ADVERTISING

We do not sell personal information in exchange for money.

We do not knowingly sell or share the personal information of children under 13.

Where cookies, advertising technologies or disclosures may be treated as a “sale,” “sharing” or targeted advertising under applicable state law, eligible users may exercise the applicable opt-out rights through the privacy or cookie settings available on www.nova-uni.com.

We will not use information from children for behavioral advertising unless expressly permitted by applicable law and supported by all required permissions.

10. INTERNATIONAL DATA TRANSFERS

Nova Uni UG i.G. is established in DE.

Information relating to users in the United States may therefore be processed in Germany, the European Economic Area or other countries in which our service providers operate.

Those countries may have privacy laws different from the laws of the user’s state.

We use contractual, organizational and technical measures intended to protect information transferred internationally.

11. RETENTION

We retain personal information only for as long as reasonably necessary for the applicable purpose.

In particular:

a) account information is retained while the account remains active and for a reasonable period afterward;

b) learning-progress information is retained during the access period and any additional period communicated to the user;

c) billing and transaction information is retained for applicable tax, accounting and legal periods;

d) support communications are retained for the period needed to resolve the matter and administer possible claims;

e) technical and security logs are retained for a limited and proportionate period;

f) consent and parental-authorization records are retained for as long as reasonably necessary to demonstrate compliance;

g) children’s information is retained only for as long as necessary for the purpose for which it was collected.

Information will then be deleted, de-identified or restricted unless continued retention is required by law.

12. PRIVACY RIGHTS

Depending on the user’s state of residence and subject to applicable conditions and exceptions, a user may have the right to:

a) request access to personal information;

b) request correction of inaccurate information;

c) request deletion;

d) receive a portable copy of certain information;

e) opt out of the sale or sharing of personal information;

f) opt out of targeted advertising;

g) limit certain uses of sensitive personal information;

h) withdraw consent;

i) appeal the denial of a privacy request;

j) receive equal service and pricing without unlawful discrimination for exercising privacy rights.

Requests may be submitted to:

support@nova-uni.com

or by post to:

Nova Uni UG i.G. Sirius Businesspark Industriestrasse 13 63755 Alzenau DE

We may request information reasonably necessary to verify the requester’s identity and authority.

An authorized agent may submit a request where permitted by applicable law, but we may require evidence of the agent’s authority.

13. PARENTAL RIGHTS

A parent or legal guardian of a child under 13 may contact support@nova-uni.com to:

a) review the categories or specific items of personal information collected from the child;

b) correct inaccurate information;

c) request deletion;

d) revoke consent;

e) prevent further collection or use;

f) ask how information has been disclosed.

We may verify the identity and parental authority of the requester before acting.

14. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to:

a) operate the platform;

b) authenticate users;

c) maintain security;

d) remember settings;

e) understand service performance where permitted;

f) support optional analytics or marketing where permitted.

Users can review or change available choices through the cookie or privacy-preference tool on www.nova-uni.com.

Features directed to children will be configured to minimize unnecessary tracking and data collection.

15. SECURITY

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against:

a) unauthorized access;

b) unauthorized disclosure;

c) alteration;

d) destruction;

e) loss;

f) misuse.

Safeguards may include access controls, encryption, secure authentication, activity logging, backups, vulnerability management and internal procedures.

No internet-connected system can guarantee absolute security.

16. DATA BREACHES

Where a security incident involving personal information occurs, we will investigate and provide notices to affected individuals, parents, regulators or authorities where required by applicable law.

17. MARKETING COMMUNICATIONS

We send marketing communications only where legally permitted.

Marketing emails contain a mechanism to unsubscribe.

Service, security, purchase and account-administration messages are not marketing communications.

We do not send behavioral advertising communications directly to children under 13.

18. THIRD-PARTY SERVICES

The platform may contain links to or integrations with services operated by third parties.

Information processed directly by those third parties is governed by their own privacy notices.

Parents should review third-party services before allowing a child to use them.

19. CHANGES TO THIS POLICY

We may update this Policy when our services, vendors, data practices or legal obligations change.

The current version will remain available through www.nova-uni.com.

Where a material change affects information collected from children, we will obtain renewed parental consent when required by applicable law.

20. CONTACT

Questions or requests concerning privacy may be sent to:

Nova Uni UG Sirius Businesspark Industriestrasse 13 63755 Alzenau

Email: support@nova-uni.com General email: support@nova-uni.com Telephone: Website: www.nova-uni.com