Privacy Policy

Last updated:

This policy explains which personal data we process when you visit our website, buy the course and use the member area, why we do it and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

We are not required to appoint a data protection officer.

2. Visiting the website

Hosting and server log files

Our website is hosted by . When you open a page, your browser automatically sends technical data that the server stores in log files: IP address, date and time, page requested, referrer, browser and operating system. We need this data to deliver the website securely and to detect misuse. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Log files are deleted after a short period, usually no later than 30 days, unless they are needed to investigate an incident. We have a data processing agreement with our hosting provider (Art. 28 GDPR).

Fonts

Our fonts are stored on our own server and loaded from there. No connection to Google or other font providers is made.

No tracking, no advertising cookies

We do not use analytics, tracking or advertising cookies. The website only stores technically necessary information in your browser (see section 4).

3. Buying the course

When you buy the course, we process your email address, order details and the information needed for payment and invoicing. Payment is handled by . Your card or account details are entered directly with the payment provider; we do not receive or store them.

The course is sold through this provider as a reseller (merchant of record). The provider is therefore your contract partner for the purchase and processes your data under its own privacy policy as an independent controller; we receive the data needed to give you access to the course.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (legal obligations, e.g. tax law). We keep invoices and accounting records for the periods required by law (up to 10 years under § 147 AO and § 257 HGB).

4. Member area

After your purchase you receive an access link by email to create your password. For your member account we process your email address, a securely stored version of your password (we never see your password itself), the time of your logins and your course progress (which lessons you have started or completed). Accounts are managed by .

To keep you logged in and to remember your progress, the member area stores this information in your browser’s local storage. This is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG).

Legal basis: Art. 6(1)(b) GDPR. We store your account data for as long as you have access to the course and delete it afterwards, unless legal retention obligations apply. You can ask us to delete your account at any time; you will then lose access to the course.

Emails

We send you emails that are necessary for the service: your access link, password reset links and important information about your purchase. These emails are sent via . Legal basis: Art. 6(1)(b) GDPR. We do not send newsletters or advertising emails without your separate consent.

Course videos

The lesson videos are delivered by . When you play a video, your IP address and technical data about the playback are transmitted to this provider so the video can be streamed. Legal basis: Art. 6(1)(b) GDPR.

Online withdrawal form

If you withdraw from your purchase using our online withdrawal form, we store the details you enter (name, email address, order number, date of purchase, your message) together with the date and time of receipt, and send you a confirmation by email. This data is stored with and the confirmation is sent via . Legal basis: Art. 6(1)(c) GDPR (legal obligation to confirm receipt and to process the withdrawal). We keep it for as long as needed to process the withdrawal and for the legal retention periods.

5. Contacting us

If you contact us by email, we process your message and contact details to answer your request. Legal basis: Art. 6(1)(b) GDPR for questions about your purchase, otherwise Art. 6(1)(f) GDPR. We delete the data when it is no longer needed, unless legal retention obligations apply.

6. Transfers outside the EU

Some of the providers named above may process data outside the European Union, in particular in the USA. In those cases we make sure an adequate level of protection exists, either through an adequacy decision of the European Commission (e.g. the EU-US Data Privacy Framework) or through standard contractual clauses (Art. 46 GDPR).

7. Your rights

• Access to your data (Art. 15 GDPR)
• Correction of incorrect data (Art. 16 GDPR)
• Deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)
• Withdrawal of any consent you have given, with effect for the future (Art. 7(3) GDPR)

To use these rights, simply email us at . You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority in the German federal state where you live or where we are based.

8. Security

Our website uses TLS (HTTPS) encryption. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Changes

We update this policy when our website, our services or the law change. The current version is always available on this page.