Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. "Personal data" is any information relating to an identified or identifiable natural person.

1. Server log files

You can use our website without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

2. Contact

Responsible person. The contact details of the person responsible for data processing are set out in the legal notice at the top of this page.

Proactive contact by email. If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request. If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In that case you have the right to object at any time to this processing on grounds relating to your particular situation. We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Contact form. When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. The legal basis is as for proactive contact by email above. We will only use your email address to process your request. Your data will subsequently be deleted unless you have agreed to further processing and use.

3. WhatsApp Business

If you communicate with us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you have your residence outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). The purpose of the data processing is to handle and respond to your contact request. For this purpose we collect and process your mobile phone number registered with WhatsApp and, if provided, your name and additional data to the extent provided by you. Your data may be transmitted to servers of Meta/Facebook in the USA. For the USA, no adequacy decision from the EU Commission is available; the transfer may be based on standard contractual clauses. If the contact serves pre-contractual measures or an existing agreement, processing is on the basis of Article 6(1)(b) GDPR; otherwise on the basis of Article 6(1)(f) GDPR for our legitimate interest in quick and easy communication. You may object on grounds relating to your particular situation. We will only use your data to process your request and will delete it in compliance with statutory retention periods unless you have agreed to further use. For more on WhatsApp terms and privacy see WhatsApp Terms of Service and WhatsApp Privacy Policy.

4. Customer account

When you open a customer account (register on the Site), we collect your personal data in the scope given there. The data processing is for the purpose of improving your experience and simplifying order and course access processing. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account can then be deleted.

Accuracy of registration data. You must provide accurate, complete, and current information when you register and in your profile. You agree to update your details promptly if they change. False, incomplete, or misleading information may affect your eligibility, course access, payments, and our ability to perform our agreement with you.

Communications about registration and courses. By registering and using the Site, you acknowledge that we may contact you using the contact details you provide or make available in your account—including email, telephone (including voice calls or SMS where applicable), WhatsApp (where you contact us via WhatsApp or share a number we may use for service messages), or other reasonable channels supported by the platform—for purposes necessary to perform our contract with you and to operate the learning service. This includes, for example, messages about account verification, enrolment, course access, schedules, payments, technical or administrative notices, and similar service-related matters. The legal basis is primarily Article 6(1)(b) GDPR (performance of a contract) and, where applicable, Article 6(1)(f) GDPR (legitimate interests in reliable communication with registered users). Where marketing communications are sent without your prior consent, you may object to direct marketing at any time (Article 21 GDPR).

5. Collection and processing in orders / course purchases

When you place an order or purchase a course or subscription we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order and processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing occurs on the basis of Article 6(1)(b) GDPR and is required for the fulfilment of a contract with you. Your data may be transferred to payment service providers, IT and hosting providers, and other processors strictly in line with legal requirements. The scope of data transmission is restricted to a minimum.

6. Categories of personal data (overview)

• Account data: name, email, login identifiers, and profile details.
• Learning and usage data: course progress, attempts, quiz/lesson interactions, vocabulary state, and feature usage.
• Live-session recording data: recordings and related extracts from live sessions (which may include your voice, image, screen input, and submitted interactions) where such sessions are recorded for service, quality, educational reuse, or commercial course-library purposes.
• Community data: messages, reactions, reports, moderation metadata, and related timestamps.
• Payment and transaction data: order references, payment status, entitlements, and billing metadata from payment providers.
• Technical/security data: IP-related logs, browser/device metadata, hashed identifiers, and anti-abuse events.
• Support communications: support tickets, contact forms, and correspondence.

7. Purposes and legal bases (GDPR Art. 6)

• Service performance (Art. 6(1)(b)): account management, enrollment, access control, progress tracking, and customer support.
• Course recording and reuse (Art. 6(1)(b) and Art. 6(1)(a)): where a course includes live sessions, enrollment constitutes agreement to recording and processing of session participation (including voice and related content) for course delivery, recorded lesson provision, and lawful reuse under our Terms of Service.
• Legal obligations (Art. 6(1)(c)): tax/accounting, compliance, and lawful disclosure duties.
• Legitimate interests (Art. 6(1)(f)): platform security, fraud prevention, service analytics, abuse mitigation, and service improvement.
• Consent (Art. 6(1)(a)): where consent is required (e.g. optional cookies or marketing), you may withdraw consent at any time with future effect.

8. Public feature visibility

When you join courses or public challenge features, selected account/learning data (e.g. display name, ranking, score-related values) may be visible on public or semi-public Site pages, as configured by the service. By joining these features, you agree to this visibility to other users and, where enabled, visitors.

9. Cookies and similar technologies

Our website uses cookies. Cookies are small text files which are saved in your internet browser or by your browser on your device. When you call up the website, a cookie may be saved on your system. This allows the browser to be recognised when the website is called up again. You have control over the use of cookies: you can set your browser to notify you before cookies are set, to refuse them, or to delete cookies already stored. Note that this may prevent you from using all functions of the website. We use technically necessary cookies to make our offering more user-friendly, effective and secure, and so that our systems can recognise your browser after a page change and offer you services. Some functions cannot be offered without cookies. Processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interest in the optimal functionality and user-friendly design of the website. You have the right to object to this processing on grounds relating to your particular situation. Where legally required, non-essential cookies are used only after consent.

On this Site, a consent banner lets you accept non-essential processing, reject it, or open settings to choose categories separately. Analytics: we may use Google Analytics 4 (Google Ireland Limited) to measure usage, loaded only if you enable analytics in the banner or cookie settings. Marketing / chat: our live chat widget (for example Tawk.to) may be loaded only if you enable the corresponding category. You can change or withdraw your choices at any time via the cookie settings link in the footer (or the cookie policy page).

10. Recipients and processors

We may share data with processors and service providers that help us run the Site (e.g. hosting, payment processors, content/CDN providers, analytics, language-processing tools). Processors are bound by contractual and confidentiality obligations. We comply strictly with legal requirements; the scope of data transmission is restricted to a minimum.

11. International data transfers

If personal data is transferred outside the EEA, we implement appropriate safeguards as required by GDPR (e.g. adequacy decisions, Standard Contractual Clauses, and supplementary measures where needed).

12. Data retention

After contractual processing has been completed, data is initially stored for the duration of any warranty period, then in accordance with the retention periods prescribed by law (especially tax and commercial law), and then deleted after the period has elapsed, unless you have agreed to further processing and use. Where live-session recordings are reused as educational content, we may retain them for longer periods consistent with contractual use and applicable law.

13. Security measures

We apply technical and organizational measures appropriate to risk (access controls, transport security, logging, abuse monitoring). No system can guarantee absolute security.

14. Rights of the data subject

If the legal requirements are fulfilled, you have the following rights under Articles 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, and data portability. You also have a right to object to processing based on Article 6(1)(f) GDPR, and to processing for the purposes of direct marketing under Article 21(1) GDPR. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To exercise your rights, contact us using the details in the legal notice at the top of this page.

Account deletion requests. If you wish to delete your account, you may do so by opening a support ticket on the Site and sending a clear account deletion request. We will verify and process your request in line with applicable law, including statutory retention periods (for example tax or commercial records) where we must retain certain data after account closure. We will confirm the outcome where appropriate.

15. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you believe that your data is not being processed lawfully (Article 77 GDPR). For Thuringia (Thüringen), the competent authority is: Der Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany (www.tlfdi.thueringen.de). You may also lodge a complaint in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

16. Right to object

Where processing is based on our legitimate interests (Article 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds that override your interests or the processing is for the assertion, exercise or defence of legal claims. If data is processed for direct marketing, you may object at any time; we will then no longer process the data for that purpose.

17. Children and automated decision-making

The Site is not directed to children below the age required for valid consent under applicable law. If we become aware that data was provided unlawfully by a child, we may delete or restrict it as required. We do not carry out solely automated decision-making with legal or similarly significant effects unless explicitly disclosed and legally permitted.

18. Updates and contact

We may update this Privacy Policy from time to time. Material changes will be posted on this page and, where required, otherwise communicated. For privacy requests or data protection questions, contact us using the details in the legal notice at the top of this page.