Privacy Policy

Last updated: 4 November 2026

materials.school provides educational resources, downloadable worksheets and interactive learning activities. This Privacy Policy explains how personal data is handled when you visit the website, use its features, create an account or contact the operator. Personal data means information relating to an identified or identifiable person. The information below also explains your rights under the European Union's General Data Protection Regulation (GDPR).

1. Who is responsible for your data?

The person responsible for the processing of personal data on this website (the controller) is:

Daniel Tebs
Bad Meinberger Str. 61
32760 Detmold
Germany
Telephone: +49 5231 7019950
Email: danieltebs@gmail.com

Please use these details if you have a privacy question or wish to exercise one of your rights. No separate data protection officer has been appointed.

2. Why and on what legal grounds do we process data?

We process personal data only for defined purposes and on an applicable legal basis. Depending on the activity, the relevant grounds under Article 6(1) GDPR are:

  • Consent (Article 6(1)(a)): for optional processing, especially the use of Google Analytics and any optional external service that requires your permission.
  • Contract or steps requested before a contract (Article 6(1)(b)): where processing is needed to provide an agreed user account or another service requested by you.
  • Legal obligation (Article 6(1)(c)): where applicable law requires us to retain or disclose particular information.
  • Legitimate interests (Article 6(1)(f)): for running a stable, secure and useful website, responding to enquiries and offering learning materials, provided these interests do not override your rights.

Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) additionally governs the storage of information on, and access to information from, your device. Unless an exception applies to a strictly necessary function, your prior consent is required. Any subsequent processing of personal data must also have its own lawful basis under the GDPR.

3. Website hosting and technical access logs

materials.school operates on the Drupal content management system and is hosted by Vautron Rechenzentrum AG, Obermünsterstr. 9, 93047 Regensburg, Germany. The hosting provider supplies the infrastructure needed to make the website and its files available over the internet.

When your browser requests a page or a PDF file, the server necessarily receives technical information. This can include your IP address, the requested address or file, the date and time, a response or error code, information about your browser and operating system, and the address of the referring page where supplied. Such information may also appear in server logs.

We use this information to deliver content, investigate errors, preserve the security of the website and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Log data is kept only as long as needed for those purposes, unless a particular event requires further lawful retention. Where Vautron processes personal data on our behalf, the applicable data processing arrangements are governed by Article 28 GDPR.

4. Cookies and other browser storage

Cookies are small pieces of data that a website can store in your browser. Similar functions may use the browser's local storage. Certain cookies are necessary for basic operation, for example maintaining a logged-in session or remembering a privacy choice. Other cookies or comparable technologies may be used for statistics or third-party integrations.

Technically necessary storage is used to deliver features you request and to keep the website functioning. Optional analysis and third-party tracking require a valid choice by the visitor where the law requires consent. You can also manage or delete cookies through your browser settings; however, doing so may affect saved preferences or signed-in sessions.

5. Cookie choices through EU Cookie Compliance

We use the Drupal module EU Cookie Compliance to present information about optional technologies and obtain visitors' choices. The module is configured for opt-in, meaning consent must be given actively rather than assumed from a visit. The consent function may save a cookie or another browser setting so that the choice can be recognised on later visits.

Google Analytics and other consent-dependent functions are intended to be operated only after the necessary consent has been obtained. You can refuse optional processing and still access the site's ordinary educational content. You may withdraw consent with effect for the future through the website's cookie controls. A withdrawal does not invalidate processing that was lawful before the withdrawal.

6. Contact form, email and telephone

The contact form allows you to send a message to the website operator. It asks for your name, email address, subject and message. We process these details to receive, understand and respond to your enquiry. If you contact us by email or telephone, the information you provide will be used for the same purpose.

Ordinary correspondence is generally handled under Article 6(1)(f) GDPR, reflecting our legitimate interest in answering messages. Where your enquiry concerns an agreement or steps towards one, Article 6(1)(b) GDPR may apply instead. Contact details and correspondence are deleted when no longer needed for the enquiry, unless we have a valid reason or legal duty to retain them longer.

Messages sent through the form are delivered to the operator's Google Gmail mailbox. Google may therefore process the communication and relevant technical details as part of the email service. Google's privacy information is available at https://policies.google.com/privacy.

7. User registration and login

Visitors can register for an account with a self-chosen username and email address and establish a password for logging in. Drupal stores the account information required to identify the account, authenticate login attempts and provide access to functions linked to the account. This may include a user ID, account status, session information and technical login or security records.

Passwords are processed by Drupal using technical protection mechanisms rather than being published as readable account details. Please choose a strong password and keep it confidential. Account and session data are processed to provide the registered service under Article 6(1)(b) GDPR or, for necessary security measures, Article 6(1)(f) GDPR.

Account information is retained while the account remains active and, after closure, only where continued storage is lawful or necessary. If you wish to request account deletion or access to your information, please use the contact details in section 1.

8. No Google account sign-in

At present, materials.school does not offer registration or login through a Google account. Signing in is based on a username and password created for this website. Consequently, the website does not currently obtain Google account profile information through a Google sign-in feature. If that changes, this Privacy Policy will be updated before the new function is offered.

9. Search, categories and RSS feeds

When you search for educational topics or browse categories, the website processes your request to display relevant content. An RSS feed may also allow you to follow updates to selected topics. The request involves the technical connection details described in section 3. These features support access to the educational material and are provided on the basis of Article 6(1)(f) GDPR. An RSS subscription through your own feed reader is normally managed by that reader, not by a newsletter mailing list on materials.school.

10. Interactive learning content using H5P

Some learning activities use H5P, a technology for interactive educational content. These activities are stored and made available directly within the Drupal website. Using the activities involves loading the necessary files from the website and processing the answers you enter so that the activity can provide feedback.

According to the current operation of the website, activity answers and results are used during the exercise and are not permanently stored as individual learning records. Normal server connection data may still arise when an activity or its resources are requested. We process this information to provide the exercise and maintain the educational website under Article 6(1)(f) GDPR. The H5P software itself does not mean that every exercise sends responses to an external H5P service. General H5P privacy information can be found at https://h5p.org/privacy.

11. Worksheets and PDF downloads

Visitors can view or download worksheets and other educational files from materials.school. A file request creates the ordinary server connection data needed to transmit the file, as described in section 3. We do not require visitors to submit payment information in order to use the website's ordinary download function. Providing downloadable educational resources is supported by our legitimate interest under Article 6(1)(f) GDPR.

12. Google Analytics

We use Google Analytics, a web analytics service provided in the European Economic Area by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics helps us understand overall website use, for example which pages are viewed, how visitors reach the site, the types of devices and browsers used, and how visitors interact with the website.

The service may process event data, device and browser information, approximate geographic information and online identifiers. Cookies or similar technologies can be used to distinguish visits and measure interactions. Depending on Google's technical arrangements, data may also be processed in the United States or other countries outside the European Economic Area.

Where consent is required, the legal grounds are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent is requested through the website's cookie controls and can be withdrawn for future processing. Analytics data is retained according to the retention settings configured for the service and is deleted or aggregated when it is no longer required. Information about Google Analytics and data protection is available at https://support.google.com/analytics/answer/6004245 and https://policies.google.com/privacy.

13. AddToAny sharing buttons

We use the Drupal integration of AddToAny to help visitors share links to educational content through social networks, messaging services or other channels. Depending on how its sharing functions are loaded and used, AddToAny and the selected sharing platform may receive technical information such as your IP address, browser information and the page address that you wish to share.

Where an optional AddToAny component accesses browser information or loads third-party resources in a manner requiring consent, we rely on consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. If you actively follow a link or choose a platform to share content, the destination service may process your data under its own privacy rules. For information about AddToAny, see https://www.addtoany.com/privacy.

14. Links to Teachers Pay Teachers and other external websites

Some educational products are offered for purchase on the separate Teachers Pay Teachers platform. A link on materials.school takes you to that platform; the purchase itself is not completed on materials.school. We do not collect payment card details or process those external purchases through an on-site checkout.

When you open an external link, the destination site receives information necessary for the connection, such as your IP address. The destination may also receive the referring page address, depending on browser settings and link configuration. Any account creation, order, payment and tracking on the destination platform are subject to that provider's own privacy information. The same principle applies to other external links on this website.

15. Google AdSense

Google AdSense is not currently used to display advertisements on materials.school. Therefore, no AdSense advertising service is intentionally activated through this website at present. If advertising is introduced later, this policy and the relevant consent information will be updated before the service is used, including details of any cookies or other technologies and any international data transfers. Information about Google's advertising technologies is available at https://policies.google.com/technologies/ads.

16. Email newsletters

We do not currently operate an email newsletter or collect email addresses for newsletter subscriptions through this website. The email address supplied during account registration is used for account-related functions rather than being automatically added to a marketing mailing list. If a newsletter is introduced, visitors will receive specific information and, where required, be asked for separate consent before subscribing.

17. YouTube videos

We do not currently embed YouTube videos on materials.school. Merely viewing our pages therefore does not require a connection to YouTube on account of an embedded video player. If an external video player is introduced in the future, the relevant data processing and any necessary consent arrangements will be explained before use.

18. Google Fonts and content delivery services

Fonts may be used to display the website consistently. If a font file is supplied by the website's own server, the request is handled as part of the ordinary website connection. If a page were to request a font or another file directly from a Google server, Google's server could receive technical connection information, including the requesting IP address.

The primary website content is delivered through the Vautron hosting service. We do not deliberately operate a separate Google Cloud CDN as a website-hosting or content-distribution service. Google Fonts and Google Cloud CDN are distinct Google services. If an additional external font or content-distribution service is activated in the future, we will update the relevant information about the associated data transfers. Details about Google's services are available at https://policies.google.com/privacy and https://developers.google.com/fonts/faq.

19. Google reCAPTCHA

Google reCAPTCHA is not currently used on materials.school. The website therefore does not intentionally send visitor activity to Google through a reCAPTCHA verification function. If this spam-prevention service is enabled later, its data processing and any applicable consent requirements will be disclosed before activation.

20. Sharing of information and service providers

Personal data is shared only where needed for a stated purpose and where a lawful basis exists. Relevant recipients can include Vautron as the hosting provider, Google in connection with the Gmail mailbox and consent-based analytics, and AddToAny or a destination platform when sharing features are used. Public authorities may receive information if disclosure is legally required.

Where a company processes information on our instructions, the processing is subject to the GDPR's requirements for processors. Providers acting as independent controllers are responsible for their own processing activities as described in their privacy notices.

21. International data transfers

Some providers, notably Google and the services that may be used when sharing content, operate internationally. Depending on the service and transaction, personal data may be transferred outside the European Union or European Economic Area, including to the United States.

Any such transfer must satisfy Chapter V of the GDPR. Depending on the particular recipient and processing arrangement, the applicable safeguards may include an adequacy decision by the European Commission, participation in the EU-US Data Privacy Framework where valid for the relevant company, or standard contractual clauses and appropriate supplementary measures. Further information about applicable transfer safeguards may be requested using the contact details above.

22. How long do we keep personal data?

We keep personal data only for the period reasonably needed for the purpose for which it was collected, subject to any legally required longer retention. The following criteria apply in particular:

  • Server logs: until they are no longer required for secure delivery, troubleshooting or the investigation of a specific incident.
  • Contact messages: until the enquiry has been dealt with, and longer only when justified or required by law.
  • Registered accounts: while the account exists and, after it closes, only for a lawful remaining purpose.
  • Interactive H5P answers: used while the exercise is being completed; no permanent individual result record is maintained as part of the described activity.
  • Cookie preferences: for as long as needed to recognise or demonstrate the relevant choice, subject to browser and module settings.
  • Google Analytics: in accordance with the configured retention period and any applicable consent.

When a purpose ends and no legal ground remains, the relevant information is erased or anonymised so it can no longer be linked to an identifiable person.

23. Your rights under the GDPR

Subject to the conditions set out in data protection law, you have the right to:

  • obtain information about whether and how your personal data is processed (Article 15 GDPR);
  • have inaccurate information corrected or incomplete information completed (Article 16);
  • request the erasure of personal data in applicable circumstances (Article 17);
  • request a restriction of processing in applicable circumstances (Article 18);
  • receive certain data in a portable, machine-readable form where the requirements apply (Article 20);
  • object, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21); and
  • withdraw a previously given consent at any time for future processing (Article 7(3)).

Where personal data is used for direct marketing, you can object to that use at any time. We do not use the personal information described in this policy to make solely automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). For the operator based in North Rhine-Westphalia, the relevant authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). Its website is https://www.ldi.nrw.de/.

24. Security of your information

This website uses HTTPS to encrypt information transmitted between your browser and the website. We take reasonable technical and organisational measures to protect data against unauthorised access, loss and misuse. No internet service can guarantee absolute security. You should avoid sharing confidential information unnecessarily through public contact forms or interactive exercises.

25. Information for younger users

Many of the teaching resources on materials.school are intended for use in education. Ordinary website content and interactive exercises can be accessed without creating an account. If a young person wants to register for an account, any legal requirements concerning the capacity to enter an agreement or consent to a particular processing activity must be observed. Parents or legal guardians may contact us about a young person's personal data through the contact details in section 1.

26. Updates to this Privacy Policy

We may revise this Privacy Policy if the functions of materials.school, our service providers or applicable legal requirements change. The date displayed at the beginning of this document identifies the version currently published. The use of optional new services will be accompanied by updated information and any consent mechanism required by law.