Privacy Policy

This Privacy Policy explains how Cinematronic ApS ("we", "us", "our") processes personal data when you use the public website krea-tech.eu ("the Site"). The Site is part of the Erasmus+ project KreaTech and is available to all visitors without registration.

1. Data Controller

The Site is operated by:

Cinematronic ApS
Niels Jernes Vej 10
9220 Aalborg, Denmark
Email: kreatech @cinematronic.dk

2. Data We Process

When you use the Site, some data is always processed because it is needed to provide the service, while other data is only processed if you consent or actively choose to provide it.

Data always processed

- We use small functional cookies to keep the Site running properly, for example, to remember your last visited lesson for up to 30 days. We also set a device cookie to ensure that each device can only submit one course rating. Additionally, the Site utilises browser localStorage to track your lesson progress, session information, and whether you have already rated a course. This information stays in your browser and can be cleared at any time.

- If you agree to analytics cookies, we collect information through Google Analytics, such as which pages are visited, which type of device and browser is used, and an approximate location. This information helps us understand how the Site is used, enabling us to improve it over time.

The data you choose to provide

If you complete the feedback form, we will process the text you submit so that we can review your input and use it to improve the platform.
If you rate a course, we store:

- the number of stars you select,
- a hashed version of your device identifier (derived from the device cookie) used to prevent duplicate votes,
- a hashed version of your IP address,
- and some technical metadata such as your browser type and the page you came from.

These values cannot be used to identify you personally, but help ensure ratings are fair and protect against misuse.

3. Purposes of Processing

We process this data in order to:

Keep the Site available and secure;
Improve the Site's usability and performance by understanding how it is used (if you consent to analytics);
Review feedback and use it to improve courses and features;
Collect and display course ratings so users can see aggregated feedback.
Ensure course ratings are fairly counted and prevent duplicate or fraudulent submissions.

We do not sell, use, or pass on your data for advertising or marketing purposes.

4. Legal Basis

We process data on two grounds:

Legitimate interest: for functional cookies, the device cookie, localStorage, server security, and course rating storage.
Consent: for analytics cookies and for any feedback you voluntarily provide.

You can withdraw your consent at any time by adjusting your cookie settings or by contacting us.

5. Recipients (Processors) and Hosting

We only share data with service providers who help us operate the Site:

Google Analytics (Google Ireland Ltd.) processes analytics data. May involve processing outside the EU/EEA with safeguards (see §10).
Payload Cloud hosts and delivers the Site content.

We do not share data with other third parties unless required by law.

On your first visit, you will see a banner asking for your choice. Essential cookies are always active because they are required for the Site to function properly. Analytics cookies are only set if you agree. You can change or withdraw your choice at any time via the "Cookie settings" link in the Site footer.

7. Retention

Functional cookies: expire automatically (30 days).
Device cookie: stored until deleted by you in your browser.
LocalStorage: lesson progress entries are automatically pruned after 30 days; session identifiers and rating flags remain until you clear your browser storage.
Analytics (Google Analytics): retained for 14 months, as per our GA settings. After that, individual event data is automatically deleted. However, aggregate, anonymised reports and statistics (for example, total visitor counts per month) may be kept longer for historical and research purposes.
Course ratings: kept as long as the course exists (ratings are part of aggregated course info).
Feedback: kept only as long as needed to review and act, then deleted or anonymised.

8. Security

We take appropriate technical and organisational measures to protect data against misuse, loss, and unauthorised access. No online system can be completely secure, but we minimise risks by keeping processing to a minimum.

9. Your Rights

Under the GDPR, you have the right to request access, correction, erasure, restriction, or objection to the processing of your personal data. Where processing relies on consent, you may withdraw that consent at any time. You may also request data portability for information you provided to us where technically feasible.

Because the Site does not use user accounts and most data (such as analytics, ratings, or server logs) cannot be linked back to an identifiable person, we may not always be able to identify your individual records in order to apply these rights. In practice, you can exercise your rights in the following ways:

Analytics cookies: You can withdraw your consent at any time via the cookie banner or the "Cookie settings" link in the Site footer.
Feedback form: if you included identifying information in your message, you may request erasure by contacting us.
Course ratings: Since ratings are anonymous and tied only to a hashed IP address, they cannot be traced back to you individually.
LocalStorage data: You can delete this yourself at any time by clearing your browser’s site data.

If you wish to exercise your rights, please get in touch with us at

10. Updates to this Policy

We reserve the right to update this Privacy Policy if our practices or legal obligations change. The latest version will always be available on this page, with an updated "Last updated" date.

11. Contact