Prints to one A4 sheet. Always reflects current terms.

Dream Machine Systems
Security & Data Protection Overview · V1.1

The Deployment Masterclass

A browser-delivered training programme for engineering teams. It creates no user accounts, stores no participant content on vendor systems, and requires no software installation or IT provisioning on your side. This sheet answers the questions a security review, a data protection officer and a works council typically ask.

0accounts created
0installations required
0participant names
12months of access

Data protection

Data we process
Order data — the billing details entered at checkout and the email address the license key is sent to — plus, per license key, a started and a completed flag. No participant content, no telemetry.
Where work is stored
On the participant's own device. Entries made in the diagnostic tools and the troubleshooting deck remain in local browser storage and are never transmitted to us.
Authentication
None. Access is granted by a license key sent by email. No registration, no password to manage, no SSO or directory integration required.
Subprocessors
Shopify Inc. — storefront and checkout, processes order and billing data. twosteps.net — hosting, servers located in Germany.
Retention
Invoices and order data are kept for seven years, as required by Austrian tax law (§ 132 BAO, § 212 UGB), and cannot be deleted before that period ends. Nothing else is held: there is no account to close and no participant record to erase.
GDPR role
Dream Machine Systems is the controller for order data. No participant content is processed on our infrastructure. We will conclude a processing agreement under Art. 28 GDPR on request.

For the works council

What the employer sees

Only through the optional B2B dashboard, and only per license key: started yes or no, completed yes or no. Nothing beyond those two flags.

What stays on the device

Every entry made in the diagnostic tools and the troubleshooting deck. No content, no answers, no session times, no scores — neither to us nor to the employer.

Pseudonymity is yours to keep

Keys carry no names, and there is no HR, identity or ticketing integration. Whether a key can be traced to a person depends solely on how the purchaser distributes them.

Procurement

Vendor
Dream Machine Systems FlexCo
Lindengasse 56/18-19
1070 Vienna, Austria
VAT
ATU83213078 · reverse charge for EU businesses outside Austria
Single seat
Business License — EUR 256,— excl. VAT · for businesses only
Volume
10 / 25 / 50 / 100 seats — from EUR 102,40 excl. VAT per seat
Term
Access for at least 12 months from purchase · no subscription, no auto-renewal
Delivery
License key by email after payment · no shipping, no provisioning
Questions: signal@dreammachine.systems · www.dreammachine.systems
V1.1 · retrieved from dreammachine.systems/pages/masterclass-security