Skip to content
Security & Trust

Data Protection & Data Security

Your data is safe with us. Learn which measures we take to protect your information.

Hosting in Germany

IONOS, Berlin

GDPR-compliant

Fully EU-compliant

No data to AI

Only factual information

1Server Location and Hosting

The ValCom® software is hosted on servers of IONOS in Germany (Berlin) and is subject to the GDPR. Data is never processed or stored outside of Germany.

IONOS employees have no access to the contents of the ValCom® software.

Certifications of the host

ISO/IEC 27001Information security
BSI C5 AttestationCloud security (BSI)
IT-GrundschutzISO 27001 based on IT-Grundschutz
ISAE 3000Audited by chartered accountants

2Application Security

Transport encryption

All data transfers are HTTPS-encrypted (TLS).

Password security

Account passwords are stored hashed and cannot be viewed in plain text by anyone.

Access rights

Role-based authorization concept with minimal access rights (Admin, Manager/Coach, User).

Tenant separation

Each customer receives their own protected area with a separate subdomain and logical data separation.

Confidentiality

Employees of oneclick Learning GmbH have no access to customer content and evaluations, unless the customer explicitly grants permission for support.

3Use of Artificial Intelligence (AI)

The ValCom® software uses AI for creating job profiles and evaluating competency assessments. No personal data is transmitted to the AI interface — only factual information such as job title, industry and aggregated competency values.

User data is not used for training AI models.

4Data Retention and Deletion

User data — Deletion 90 days after the end of the contract or account deletion
Business data — Retention in accordance with statutory periods (10 years)

On request, data can be exported before the 90-day period expires.

5Sub-processors

Service providerPurposeLocationCertifications
IONOS SEHosting, server infrastructureGermany (Berlin)ISO 27001, BSI C5, IT-Grundschutz
Mailjet (Sinch Germany GmbH)Sending of system emailsGermany / Belgium (EU)ISO 27001, GDPR-compliant

Assessment data is never sent via email. The customer has the option to use their own email server.

6Data Protection Requests

For questions about data protection, you can reach us at:

info@oneclick-learning.com

Data Processing Agreement (DPA)

For the use of Valcom®, we provide a data processing agreement in accordance with Art. 28 GDPR.

View DPA

Last updated: February 2026