1. Scope of this notice
This privacy notice explains how Praktikal Education OÜ processes personal data in connection with:
- the public Praktikal website;
- the Praktikal platform used by teachers, students, school staff, and organization administrators;
- account registration, authentication, support, billing, and security operations related to those services.
This notice applies to the processing of personal data described below, subject to applicable data protection law.
2. Controller details and roles
Unless stated otherwise, the data controller for the processing described in this notice is:
Praktikal Education OÜ
Võru 3a, Tartu, Estonia
Registry code: 16229727
VAT number: EE102398843
Email: info@praktikal.ee
Praktikal acts as a controller in particular for:
- operation of the public website;
- handling contact and commercial inquiries;
- account lifecycle, authentication, access control, and platform security;
- customer relationship management, support, billing, and compliance;
- service improvement and platform administration.
In school and classroom contexts, a school, teacher, or other organization may also independently determine why student or learning data is processed. In those cases, Praktikal may process parts of the data as a service provider for that organization, while the organization remains responsible for its own education-specific legal obligations. This includes decisions about parent/guardian access, grade or attendance communications, and other statutory school notifications where those functions are carried out through the school.
3. Whose data we process and what data we process
Depending on how you interact with Praktikal, we may process the following categories of personal data:
- Website visitors and prospects: IP address, browser and device information, pages visited, referral information, language preference, and contact inquiry details.
- Account holders and organization users: name, email address, authentication identifiers, organization and account role information, sign-in metadata, and security logs.
- Teachers and content creators: lessons, worksheets, questions, comments, uploaded materials, repository items, and related collaboration metadata.
- Students and participants: answers, results, grades, participation data, session tokens for anonymous slideshow participation, and other activity data generated during platform use.
- Support and service communications: support tickets, inquiry history, message content, and troubleshooting context you share with us.
- Commercial and compliance data: billing details, accounting records, transaction-related information, and records required by law.
We do not intend to collect or process special category data through Praktikal unless this is explicitly required for a specific service and lawfully supported. Please do not upload or enter such data into the platform unless Praktikal has expressly made that workflow available.
4. Why we process personal data and the legal bases we rely on
| Purpose | Typical data involved | Legal basis |
|---|---|---|
| Deliver and localize the website | IP address, browser/device data, language preference, technical usage data | Legitimate interests in operating a secure, usable public website |
| Respond to contact and sales inquiries | Name, email, phone number, organization, message content | Steps prior to entering into a contract and legitimate interests in responding to requests |
| Create and manage accounts, authentication, and access rights | Name, email, authentication identifiers, account role, organization context, login/security data | Contract performance and legitimate interests in access control and account security |
| Deliver the platform and learning workflows | User-generated content, lessons, worksheets, answers, results, grades, comments, participation data | Contract performance; in education contexts also performance of our service to the customer organization and their documented instructions |
| Provide customer support and platform administration | Support history, message content, diagnostic data, account context | Contract performance and legitimate interests in support, troubleshooting, and service continuity |
| Protect the platform and prevent abuse | Logs, IP addresses, device/browser data, authentication events, audit trails | Legitimate interests in security, fraud prevention, and system integrity |
| Billing, bookkeeping, and legal compliance | Billing and transaction data, accounting records, compliance records | Contract performance and legal obligations |
| Optional cookies or future optional communications | Consent-driven identifiers or communication preferences | Consent, where required by law |
We do not currently use personal data for automated decision-making that produces legal effects for you.
5. Cookies, analytics, and similar technologies
The public website and the platform use technical storage and similar technologies for service delivery. At the time of this notice, this includes in particular:
- Essential functionality: language preference storage and technical tokens needed to keep the website or platform working as expected;
- Platform session and access management: authentication and session-related identifiers needed for sign-in, account context, or anonymous slideshow participation;
- Website analytics: privacy-focused usage measurement through Umami on the public website.
Under our current setup, Umami does not use cookies on the public website and is treated as consent-free analytics. We do not currently describe advertising cookies on the public website. If Praktikal introduces optional analytics or marketing cookies in the future, we will update this notice and, where required, obtain consent before activating them.
You can also use your browser settings to manage cookies and similar storage, although blocking essential technologies may affect site or platform functionality.
6. Recipients, processors, and international transfers
We share personal data only on a need-to-know basis and only where there is a valid legal basis. Recipients may include:
- service providers that help us operate the website and platform, including hosting, storage, infrastructure, security, analytics, and support providers;
- infrastructure providers used to host the service, including IONOS data center infrastructure in Frankfurt and Berlin, Germany, and Google Cloud Storage object storage in Helsinki, Finland;
- email delivery providers, including Postmark for website contact-form email delivery;
- identity and access tooling, including Keycloak-based authentication components used by the platform;
- payment service providers, including Stripe for platform payment processing;
- schools, teachers, organization administrators, and other authorized users, where access is part of the service configuration or permissions model;
- auditors, professional advisers, and public authorities where disclosure is required by law or necessary to defend legal claims.
Our core hosting footprint is currently in the EU or EEA. Some providers may still process personal data outside the EU or EEA or permit remote access from outside those regions. Where that happens, we rely on an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism under applicable data protection law.
Our exact processor setup may change over time as the service evolves. If you need the most current processor information, contact us at info@praktikal.ee.
7. How long we retain data
We keep personal data only for as long as it is needed for the purpose for which it was collected, for security and continuity needs, and to comply with law. Retention periods depend on the type of data, the service context, customer configuration, legal obligations, and operational need. In practice, this means:
- Website inquiries: for the time needed to answer the request and maintain a limited follow-up record;
- Technical and security logs: for limited periods needed for security, abuse prevention, diagnostics, and service improvement;
- Account and profile data: for the lifetime of the account and, where needed, a limited period afterward for account recovery, disputes, security, or legal obligations;
- Learning content, answers, results, and grades: for the duration of the educational relationship and according to the customer organization's or school's configuration and instructions;
- Billing and compliance records: for the statutory retention period required by applicable accounting, tax, or other legal obligations;
- Backups: for the duration of the relevant backup rotation cycle.
Because retention can depend on customer setup, incident handling, and legal requirements, some periods may vary by context.
8. Security and confidentiality
We apply technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, misuse, and unlawful disclosure. These measures include access controls, role-based permissions, logging, environment segregation, and security-focused operational controls.
No internet-based system can be completely risk free, but we work to keep the platform and the public website appropriately secured for their use cases.
9. Your rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request rectification of inaccurate or incomplete data;
- request erasure of data in certain situations;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive a copy of certain data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
If your request concerns classroom, school, or organization-specific use of the platform, it may be most effective to contact the relevant school, teacher, or organization first. You can also contact Praktikal at info@praktikal.ee.
You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) or with your local supervisory authority where applicable.
10. School use, updates, and contact
Praktikal is used in school contexts, including by teachers and students. Where schools or teachers decide how student data is used in their educational activities, they are responsible for their own notices, lawful basis, and any guardian-facing obligations required by law.
We may update this privacy notice from time to time to reflect legal, technical, or product changes. When we do, we will publish the updated version on this page and update the revision date shown above.
For privacy questions or rights requests, contact:
- Email: info@praktikal.ee
- Postal contact: Praktikal Education OÜ, Võru 3a, Tartu, Estonia