← Home

Privacy policy

Protecting your personal data matters to me. This policy explains which data I collect, how I process and use it, and what rights you have regarding your data. It applies to the website tiva.me, the page tiva.me/kirsten, the Learning Lab and the Study Space. The Study Space and the Tiva Workshop also have their own, more detailed notices (see sections 7 and 8). The German version of this policy is authoritative.

1. Controller

The controller under the General Data Protection Regulation (GDPR) is:

Kirsten Rieger
(sole proprietor)
Operating under the brand:
Tiva Academic Coaching
Hoelderlinstr. 23
71384 Weinstadt
Germany
Email: office@tiva.me

Exception: for student submissions in the Learning Lab, the school is the controller. I process this data only on the school’s behalf (see section 8).

2. Collection and processing of personal data

Personal data is any information that can be used to identify you (e.g., name, email address, IP address). I process personal data only where it is needed to provide a working website and my services, or where you choose to share it with me (e.g., when you contact me or during coaching).

3. Purposes and legal bases

I process your data for the following purposes:

• Providing and operating the website (legitimate interest, Art. 6(1)(f) GDPR)
• Responding to inquiries and steps prior to entering into a contract (Art. 6(1)(b) GDPR)
• Providing coaching and the Study Space (Art. 6(1)(b) GDPR; for minors with the consent of their parents or guardians, Art. 6(1)(a) and Art. 8 GDPR)
• Providing the Learning Lab for teachers and schools (Art. 6(1)(b) or (f) GDPR)
• Legal obligations and security measures (Art. 6(1)(c) and (f) GDPR)

If you voluntarily share information about diagnoses or support measures with me (e.g., accommodations for exams), I process it only with your explicit consent or that of your parents or guardians (Art. 9(2)(a) GDPR). You do not have to share such information. You can withdraw your consent at any time with effect for the future.

4. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS.

When you visit the website, the server automatically records technical access data (server log files), such as your IP address, browser type, and the date and time of access. This data is used only to run the website and keep it secure (Art. 6(1)(f) GDPR). It is not combined with other data and is deleted automatically once the host’s retention period ends.

5. Cookies and tracking

This website does not use analytics scripts, tracking tools, or marketing cookies. After you sign in to the Study Space or the Tiva Workshop, a strictly necessary sign-in cookie keeps you signed in (in the Study Space for up to 90 days if you choose this). In the Study Space, another cookie may remember your chosen language. These cookies serve no other purpose. If I add services that process personal data in the future, I will list them here and ask for your consent where required.

6. Local fonts and images

The font “DM Sans” and all images and graphics on this website are stored on this website’s own server. As a result, no data is sent to third-party providers when the site loads.

7. Coaching and Study Space

As part of coaching, I process contact details, your concerns, session notes and the learning materials we create together. I do not share what is discussed in one-to-one sessions without your agreement.

In the Study Space, I store your Learning ID (a random four-character code, not your name), your password in encrypted form only, the date your parents or guardians gave their consent (or that you are of age), the time of your last sign-in, your learning materials and a log without IP addresses. Your progress in the trainers stays only in the browser on your device. The data is stored on web space at IONOS in Germany. Details, retention periods and deletion are in the Study Space privacy notice.

The Study Space does not use any AI services. No data from your Study Space is sent to AI providers.

8. Learning Lab and Tiva Workshop

Learning pages from the Learning Lab can only be opened via the teacher’s personal link. No account is needed. Answers, check marks and the learning card stay in the browser on the device and are not sent to me, unless the learning page has a submission feature (see below).

For invited teachers, I run a protected workspace at tiva.me/lernwerkstatt/app, the Tiva Workshop. There I process email address, name, optionally the school, a password (stored only as a secure hash), the uploaded teaching materials and a security log with IP addresses, which is deleted after 12 months. The legal basis is Art. 6(1)(b) GDPR (terms of use) and, for the log, Art. 6(1)(f) GDPR (security).

Submission feature (pilot phase): When a student submits a solution on a learning page with a submit button, the Learning ID (not a name), the answers and the time of submission are stored so that the teacher can review and discuss them. The teacher or school decides whether the feature is used in class. The school is the controller. I process submissions only on its behalf, based on a data processing agreement under Art. 28 GDPR, and use them for nothing else. For the school, the legal basis is usually its educational mandate under state school law (Art. 6(1)(e) GDPR) or the consent of parents or guardians (Art. 6(1)(a) GDPR). Submissions are deleted once the teacher removes them, at the latest 12 months after receipt. After that they remain in the trash for 90 days, and in backups for no more than 90 days longer. The teacher makes sure that students and their parents or guardians are informed in advance.

All Workshop data is stored at IONOS SE in Germany. Details are in the Workshop privacy notice (in German).

9. Profile page tiva.me/kirsten

The profile page is a static page without tracking. Saving the contact downloads a contact file (vCard) with the details shown on the page. The QR codes contain only these contact details or the link to the page. If you follow the link to LinkedIn, you leave this website and LinkedIn’s privacy policy applies.

10. Use of AI tools

I use AI tools to prepare drafts of learning materials. The Tiva tools for teachers currently run as an extension in ChatGPT. Teachers use them with their own account and have their own contract with the provider. For users in the EEA and Switzerland, the controller for processing in ChatGPT is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (OpenAI privacy policy). I have no access to teachers’ inputs and chats in ChatGPT.

Preparing lessons does not require any student data. Please do not enter names, grades, health information or other personal data of learners into AI tools.

11. Sharing data with third parties

I share your personal data with third parties only if it is necessary to fulfill a contract, required by law, or based on your explicit consent.

12. Storage periods

I store personal data only as long as it is needed for the purpose in question or as long as statutory retention obligations apply. I delete inquiries once they have been handled and no retention obligation applies. For the Study Space and the Workshop, the periods in their own notices apply.

13. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection, unless statutory retention obligations prevent this. You can withdraw any consent you have given at any time. For student submissions, it is best to contact your teacher or school. If you write to me, I will forward your request to them.

14. Right to lodge a complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The responsible authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

15. Privacy questions

If you have any questions about privacy, feel free to contact me (see section 1).

16. Contacting me by email

If you email me (e.g., via the links on this website to grow@tiva.me or office@tiva.me), I process the information you provide (e.g., your name, email address, and the content of your message) to answer your inquiry and, if applicable, schedule an intro call. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). I delete the data as soon as it is no longer needed and no statutory retention obligations apply.

Last updated: 3 November 2026