Privacy Policy for deutsch-mit-suliman.com

1. Who is responsible for your data?

The data controller responsible for this website and for processing your personal data is:

Suliman Abu Ghaida

Oststr. 51d

99867 Gotha

Germany

Email: info@deutsch-mit-suliman.com

If you are located in the European Economic Area ("EEA"), Suliman Abu Ghaida is the controller responsible for your personal data under the EU General Data Protection Regulation ("GDPR").

2. What information do we collect?

We collect personal data from you when you:

• register on our site,

• create an account,

• submit a request or support ticket,

• buy any services or products,

• respond to a survey,

• fill out a form,

• or otherwise use our website.

When ordering any service or registering on our site, as appropriate, you may be asked to enter your name, email address, telephone number, billing details and other information necessary to provide our services. You may, however, visit our site anonymously without creating an account, but some functions (for example, access to courses or paid content) may not be available.

3. How do we use your information?

We use the information we collect from you for the following purposes:

• To create and manage your user account.

• To provide you with access to our courses, learning materials and other digital products.

• To process your orders and payments.

• To provide customer support and respond to your requests and support tickets.

• To send you important information about your account, purchases or changes to our services.

• Where permitted, to send you information about similar products or services you have already purchased.

• To improve our website, services and user experience.

• To protect the security and integrity of our website and prevent abuse and fraud.

• To comply with legal obligations, such as tax and accounting requirements.

4. Legal bases for processing (EEA users)

If you are in the EEA, we will only process your personal data when we have a legal basis to do so under the GDPR. Depending on how you use our services, this will usually be one of the following:

• Performance of a contract:

  To create and manage your account, provide access to our courses and digital products, process your orders and payments, and provide customer support.

• Consent:

  For example, when you subscribe to our email newsletter or accept non-essential cookies. You can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

• Legitimate interests:

  To protect the security of our website, prevent abuse and fraud, improve our services, and communicate with you about similar products or services you have already purchased, unless you object.

• Legal obligations:

  To comply with tax, accounting and other legal requirements (for example, keeping invoice data for the period required by law).

5. Consent and acceptance of this Privacy Policy and cookies

By creating an account, logging in, purchasing a product or otherwise using our services, you acknowledge that you have read this Privacy Policy and agree that we process your personal data as described here, to the extent necessary to provide our services and fulfil our legal obligations.

Where we use a cookie banner:

• By clicking "Accept", "I agree" or a similar button on our cookie banner, you consent to the use of non-essential cookies and similar technologies as described in the "Cookies and analytics" section.

• You can withdraw your consent to non-essential cookies at any time by changing your browser settings or (where available) using the cookie settings link on our website.

Please note that some processing activities are based on contractual necessity or legal obligations and do not depend on your consent. If you do not agree with this Privacy Policy, you should not create an account or use our services.

6. How do we protect your information?

All sensitive payment information is processed securely through our payment provider (for example, Stripe). We do not store your full credit card details on our servers.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for their own marketing purposes.

This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you (for example, hosting providers, payment processors, email providers), so long as those parties agree to keep this information confidential and process it only on our instructions and in line with applicable data protection laws.

We may also release your information when we believe the release is appropriate to comply with the law, enforce our site policies, or protect our or others' rights, property or safety (for example, in response to lawful requests from public authorities).

8. Service providers and international data transfers

Some of our service providers (for example, payment processors or email providers) may process your personal data outside the EEA.

When this happens, we ensure that an adequate level of protection is in place, for example by:

• relying on an adequacy decision of the European Commission; or

• using standard contractual clauses approved by the European Commission with the relevant service providers.

You can contact us for more information about these safeguards.

We work with third-party service providers who process personal data on our behalf, such as:

• website hosting and maintenance providers,

• payment processors (for example, Stripe),

• email delivery and customer support tools,

• analytics and performance monitoring tools (if used).

These providers are only allowed to process your personal data according to our instructions and must protect it in line with this Privacy Policy and applicable data protection laws.

9. Cookies and analytics

We use cookies and similar technologies to:

• keep you logged in and remember your preferences,

• enable basic functions of the website (for example, secure login),

• and, where you have given your consent, to analyse how visitors use our website and to improve our services.

You can control cookies through your browser settings. If we use third-party analytics or marketing tools (for example, Google Analytics), we will describe them in this section and link to their own privacy notices. Where required by law, we will only set non-essential cookies with your consent via the cookie banner.

10. How long we retain your information

When you register on our site, we process and keep the data we have about you for as long as you have an active account with us, unless a longer retention period is required or permitted by law.

In more detail:

• Account data is kept for as long as you have an active account. If you request deletion of your account, we will delete or anonymise your account data, except where we are required to keep certain data by law.

• Order and payment data (for example, invoices) are kept for the period required by tax and accounting laws (in many cases up to 10 years).

• Technical log files are kept for a limited time that is necessary for security, troubleshooting and maintenance purposes.

When we no longer need personal data for the purposes described in this policy, and we are not required by law to keep it, we will delete it or anonymise it.

11. Account deletion and how to exercise your rights

If you would like to delete your account, please log in to your account and open a support ticket or contact us through the contact options provided on the website. We will process your request and delete or anonymise your account data as far as we are not legally required to keep certain information (for example, invoice data for tax reasons).

If you are in the EEA, you have the following rights in relation to your personal data (subject to the conditions set out in the GDPR):

• Right of access – to ask for confirmation whether we process your personal data and to receive a copy of that data.

• Right to rectification – to ask us to correct inaccurate or incomplete personal data.

• Right to erasure ("right to be forgotten") – to ask us to delete your personal data in certain situations, for example when it is no longer needed for the purposes for which it was collected or when you withdraw your consent.

• Right to restriction of processing – to ask us to limit the processing of your personal data in certain circumstances.

• Right to data portability – to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.

• Right to object – to object at any time to processing based on our legitimate interests, including direct marketing.

• Right to withdraw consent – where processing is based on your consent, you can withdraw that consent at any time.

To exercise these rights, please contact us using the contact details provided at the beginning of this Privacy Policy or via a support ticket in your account. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with your local data protection authority in the EEA if you believe that your data protection rights have been violated.

12. Children's privacy

Children's Online Privacy Protection Act (COPPA)

We comply with the requirements of COPPA (Children's Online Privacy Protection Act). We do not knowingly collect any information from anyone under 13 years of age in the United States. Our website, products and services are directed to people who are at least 13 years old or older.

Children in the EEA

Our services are not directed to children under 16 years of age in the EEA, and we do not knowingly collect personal data from them without the consent of a parent or legal guardian.

If you believe that a child under 16 has provided us with personal data, please contact us and we will take steps to delete such information where required by law.

13. What we don’t do with your data

We do not and will never share, disclose, sell, or otherwise give your data to other companies for the marketing of their own products or services.

14. Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page. If the changes are material, we may also notify you by email or through a notice in your account, where appropriate.

We encourage you to review this Privacy Policy regularly to stay informed about how we collect, use and protect your information.

15. Contact us

If you have any questions about this Privacy Policy, about how we process your personal data, or if you wish to exercise your data protection rights, you can contact us at:

Email: info@deutsch-mit-suliman.com

Postal address:

Suliman Abu Ghaida

Oststr. 51d

99867 Gotha

Germany