Lab Terms of Service — Supplementary
Status: 2026-05-10 — Version 2
Note: The German version is the legally binding original. This English translation is provided for convenience only.
These supplementary terms govern the use of the free "Lab" learning platform on techlogia.de in addition to the general terms of techlogia.de.
§ 1 Scope and subject matter
(1) The Lab platform is a free learning offering for the practical teaching of defensive IT-security and system-hardening topics. It is primarily aimed at students, apprentices and self-learners.
(2) Upon confirmation of the activation email (Double-Opt-In) a non-paid usage relationship is established between provider and learner.
(3) There is no claim to permanent availability, functionality, accessibility or unchanged feature scope of the Lab platform.
§ 2 Provider
The provider is the entity named in the imprint (Jaciel Antonio Acea Ruiz, Prinzenallee 38, 13359 Berlin, Germany).
§ 3 Eligibility and parental consent
(1) Minimum age: 8 years.
(2) Parental consent for minors under 16: Learners under 16 require explicit consent from at least one legal guardian (Art. 8(1) GDPR in conjunction with § 4 BDSG). The learner account will only be activated after the legal guardian has confirmed via the link sent to the parent's email. If unconfirmed within 14 days, the account is deleted automatically.
(3) From age 16, parental consent is no longer required.
§ 4 User obligations and abuse prevention
(1) Lab platform usage is restricted to learning purposes within the provided exercises.
(2) Prohibited in particular:
- cryptocurrency mining or other sustained high-CPU/-bandwidth activities outside intended exercises
- using Lab VMs as proxy/VPN/Tor exit, for spam/phishing/malware distribution
- attacks against third parties (port scans, DoS, exploit attempts, brute-force)
- circumventing quota limits via multi-account or other technical means
- uploading or distributing illegal content via Lab VMs
(3) Active technical safeguards: CPU-Watcher, Bandwidth-Watcher, Process-Watcher, egress firewall, global session cap (50), per-learner quota (3 sessions/day, 6 VM provisions/day).
§ 5 Defense-only curriculum (Criminal-law notice)
The Lab content covers defensive topics only. No tools or instructions falling under § 202c StGB (German Criminal Code, "preparing the spying out and intercepting of data") are provided.
§ 6 Ephemeral Lab VMs and data loss
(1) Lab VMs are ephemeral: after the session runtime (regular up to 60 min, hard cap 90 min) the VM is destroyed. All data inside the VM is irreversibly lost.
(2) Learner is responsible for backing up important configurations outside the VM. The provider is not liable for loss of in-VM data.
(3) The persistent learning progress is preserved in the learner account.
§ 7 Supervisory authority, dispute resolution and consumer rights
(1) Right to lodge a complaint (Art. 77 GDPR): Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Alt-Moabit 59-61, 10555 Berlin, Germany. Web: datenschutz-berlin.de.
(2) EU online dispute resolution (Art. 14 ODR Reg.): ec.europa.eu/consumers/odr.
(3) The provider is not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board (§ 36 VSBG).
§ 8 Termination and account suspension
(1) Self-deletion: learners can delete their account at any time. Cascades to all sessions, progress, and validator results.
(2) Termination by provider — staged model:
- Acute: running session terminated automatically or manually; learner notified by email.
- Repeated: warning email; opportunity to comment within 14 days.
- Severe or persistent: account suspension or deletion. For acutely dangerous violations (DoS attack, spam burst, mining with high cost impact) immediate suspension without prior hearing; subsequent hearing within 14 days.
§ 9 Subprocessors (Lab VM hosting)
Lab VMs are hosted at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in EU data centers under a Data Processing Agreement (Art. 28 GDPR).
§ 10 Liability
(1) For this free usage relationship the provider is liable — without prejudice to mandatory statutory provisions — only for damages caused intentionally or by gross negligence.
(2) The limitation in (1) does not apply: (a) for injury to life, body or health; (b) for breach of essential contractual obligations (cardinal duties — limited to typical foreseeable damage); (c) under the Product Liability Act; (d) in case of fraudulent intent; (e) for warranty-based strict liability.
(3) No liability for lost learning success, follow-up costs or wasted expenditures within statutory limits.
(4) Limitations also apply in favor of legal representatives, agents, and subprocessors of the provider.
§ 11 Changes to these terms
Material changes will be announced by email with a minimum lead time of 14 days. At the next Lab start after the change takes effect, the learner must explicitly accept the new terms.
§ 12 Final provisions
(1) Governing law: Federal Republic of Germany, excluding the UN Convention on the International Sale of Goods. Mandatory consumer-protection law of the consumer's country of residence is unaffected.
(2) Place of jurisdiction: Berlin (provider's registered office), insofar as the learner is a merchant, legal entity under public law, or special public-law fund. For consumers, statutory jurisdiction rules apply.
(3) Severability: If individual provisions of these terms are or become invalid or unenforceable in whole or in part, the validity of the remaining provisions remains unaffected. The invalid or unenforceable provision shall be replaced by an effective and enforceable provision whose effects come closest to the economic objective pursued by the original.
