Deutsch By Katrin

Privacy Policy

This Privacy Policy applies to the website www.deutschbykatrin.com.

Responsible party:

Katrin Johanna Tebbe
Tegernseer Straße 52
83734 Hausham

E-Mail: datenschutz@deutschbykatrin.com

Processing of personal data

We process your personal data through our website in the following ways, among others. For further information about data processing activities carried out through the website, please refer to the relevant sections below in this Privacy Policy.

Server Log Files When Visiting the Website

Whenever you access our website, our hosting provider records so-called “log file” data on its servers. This includes, for example, the name of the website accessed, the previously visited page (the “referrer” URL), information about the product and version of the browser and operating system used, the requesting internet service provider, the date and time of access, search engines used, the country from which the website was accessed, the amount of data transferred, the names of downloaded files, and your IP address.

The legal basis for this processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest in storing log file data lies in ensuring system security, including the investigation of misuse.

Log file data is deleted or anonymised after a maximum of 30 days, unless it needs to be retained for longer due to a security-related incident, for example, for investigation or evidentiary purposes.

Contacting Us

When you contact us, we process your personal data, such as your name, address (including country), email address, telephone number, WhatsApp details or similar contact information, to the extent necessary to respond to your enquiry.

The legal basis for processing your personal data in connection with enquiries is Article 6(1)(b) GDPR where your enquiry relates to entering into a contract. In all other cases, the legal basis is Article 6(1)(f) GDPR, with our legitimate interest being to respond to enquiries.

We retain your personal data collected in connection with enquiries for as long as necessary to handle your enquiry or to comply with statutory retention obligations.

Registration and Orders

When you register or place an order, we process your personal data, such as your name, address (including country), email address, telephone number or WhatsApp details, date of birth, chosen username, payment details and other relevant information. We use this data to fulfil our contractual obligations to you or to take steps at your request prior to entering into a contract.

We retain the personal data collected during registration or ordering for as long as necessary to fulfil the contractual relationship (including, where applicable, providing access to your customer account), to carry out pre-contractual measures at your request, to meet warranty, guarantee or similar obligations, and to comply with statutory retention requirements.

The legal basis for processing personal data collected during registration or ordering is Article 6(1)(b) GDPR (performance of a contract).

Providing this personal data is not required by law or under a contract. However, it is necessary to enter into a contract and complete the registration or order process wherever the relevant information is mandatory, rather than optional, within our registration or ordering process.

Participation in Our Language Lessons

When you participate in our language lessons, we process personal data relating to your learning goals, preferred teaching methods, language proficiency level, time zone, preferred lesson times and any other relevant circumstances. This enables us to tailor our services to your needs and provide lessons as effectively as possible.

We do not record video conferences during online sessions. However, we retain the associated chat histories from these sessions.

We retain the personal data collected in connection with your participation for as long as necessary to fulfil the contractual relationship, carry out pre-contractual measures at your request, meet warranty, guarantee or similar obligations, and comply with statutory retention requirements.

The legal basis for processing your personal data in connection with your participation in our language lessons is Article 6(1)(b) GDPR (performance of a contract).

Newsletter

If you subscribe to our newsletter, we process the information collected during registration, such as your email address and form of address, for the purpose of sending you the newsletter.

Where the processing of personal data for the purposes described above is based on your consent, the legal basis is Article 6(1)(a) GDPR (consent). In other cases, processing is based on Article 6(1)(f) GDPR (legitimate interests), with those legitimate interests being the purposes described above.

We retain the personal data required to send you the newsletter for as long as it is needed for this purpose or until you withdraw your consent to receive the newsletter. This does not affect any continued storage that may be lawful for other purposes, such as customer communications.

Cookies

Cookies are small text files that are stored on a user’s computer and enable an analysis of how the user interacts with the website.

Cookies may be used, for example, to make the website easier and more convenient for visitors to use, to enable certain functions, or to analyse visitor traffic.

Where individual cookies used by us also process personal data, such processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, Article 6(1)(a) GDPR where consent has been given, or Article 6(1)(f) GDPR to protect our legitimate interests in operating our online services in a commercially viable manner and ensuring a user-friendly and effective website experience.

The storage period of cookies may be limited to the duration of the relevant browser session, meaning that the cookies are deleted when the browser is closed (temporary cookies). Alternatively, cookies may be stored for a longer period so that users can be recognised on their next visit and, for example, shown content tailored to their preferences (persistent cookies). Unless we specify otherwise in this Privacy Policy, through our cookie management services, or in other separate cookie-related information, you should assume that cookies are persistent and may be stored for up to two years.

You may withdraw your consent to the use of cookies or object to data processing through cookies at any time by deleting cookies in your browser settings.

You can also configure your browser to accept cookies only if you have given your consent.

As regards advertising cookies, many of them can be blocked and/or managed through the following services:

www.aboutads.info/choices/
           
www.youronlinechoices.com/uk/your-ad-choices/

www.networkadvertising.org/managing/opt_out.asp

Wenn Sie jedoch Cookies ablehnen, können Sie bestimmte Website-Funktionen, Services, Anwendungen oder Tools möglicherweise nicht nutzen.

Processing of Student and Prospective Student Data (Customer Management & Personal Support)

I use digital and/or analog customer management procedures to organize the data of my students and prospective students securely and clearly. This serves the purpose of organizing my lessons, scheduling appointments, and invoicing. I do not send automated newsletters or mass mailings.

Storage period: I only store your data for as long as is necessary to conduct the lessons or as required by your consent. After the lessons have ended, the data will be deleted unless statutory retention periods (e.g., the 10-year tax law retention obligation for invoices) require longer storage. In this case, the data will be blocked for other purposes.

Purpose of processing: The organization and conduct of German lessons, communication with you (e.g., for scheduling appointments, lesson materials, or feedback), proper invoicing, as well as occasional, purely personal contact (e.g., information about new course offers, promotions, or website updates).

Legal basis: The processing for lessons and billing is based on Art. 6 (1) (b) GDPR (performance of a contract or implementation of pre-contractual measures). Personal contact for informational or promotional purposes takes place exclusively on the basis of your prior, explicit consent pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.

Presence on other social media platforms

We maintain a presence on other social media platforms to showcase our products and/or services and/or to communicate with customers and interested parties.

The data of social media users, particularly data relating to their behaviour, is often processed to create user profiles for the purpose of delivering personalised advertising. This may be done through cookies, fingerprinting or similar technologies, or by tracking users who are logged in to their accounts.

The legal basis for our processing of personal data on social media platforms is Article 6(1)(f) GDPR (legitimate interests).

Further information, including details about how the operators of these social media platforms process personal data and the options available to you to object to such processing, can be found in the privacy policies of the relevant social media platforms linked below.

Our presence on social media platforms:

Zoom

General Information

We provide the following information about the processing of personal data in connection with the use of Zoom.

Zoom is a service provided by Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (hereinafter referred to as “Zoom”). Zoom acts as our data processor within the meaning of Article 28 of the General Data Protection Regulation (GDPR).

We use Zoom to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter referred to as “Meetings”).

If you visit the Zoom website, Zoom is responsible for the processing of your data. Zoom can be accessed via a web browser or through an app that you can download. You can find Zoom’s Privacy Policy here.

Collection of Personal Data

The extent to which personal data is collected depends on the information you provide before participating in a Meeting. As a participant, you can choose whether to use the chat function and whether to enable your microphone and/or camera.

As a rule, the following personal data is processed when using Zoom:

  • Participant data: first name, last name, telephone number (optional), email address, profile picture (optional) and department (optional).
  • Meeting metadata: meeting duration; start and end times of individual participants’ attendance; meeting name and description; scheduled meeting date and time; chat status; IP addresses of the devices used to participate; and other device and hardware information, such as MAC addresses, other device IDs (UDIDs), device type, operating system type and version, client version, camera type, microphone or speaker information, connection type and other technical details. This may also include your approximate location, which is used to connect you to the nearest Zoom data centre.
  • When joining by telephone: incoming and outgoing telephone numbers, country, start and end times, audio log files and other information shared while using the service, as well as additional connection data where applicable, such as the device’s IP address.
  • Audio and video data: if you enable your device’s microphone and/or camera, as well as any text data shared through chat, question-and-answer or polling functions.

Further information about data processing when using Zoom is available at:

Please note that these are external websites operated by Zoom under its own responsibility.

Scope of Data Processing

The data listed above is processed for as long as necessary to conduct the Meetings and provide related services. This does not apply where a longer storage or retention period is required by law or is necessary to enforce legal claims within the applicable statutory limitation periods.

We may record Meetings only with your separate consent.

Data stored on Zoom’s servers is automatically deleted after a maximum of 30 days. According to Zoom, if a Meeting is not recorded, the provider does not retain the Meeting content after the Meeting has ended.

If you are signed in to a Zoom account, reports relating to Meetings may be stored by Zoom for up to one month. These may include Meeting metadata, telephone dial-in data, questions and answers, and information relating to polling functions.

As a general rule, personal data processed in connection with participation in Meetings is not disclosed to third parties.

Purpose and Legal Basis for Data Processing

We use Zoom to communicate and interact with our customers in a targeted and effective manner.

The legal basis for processing data in connection with conducting Meetings is Article 6(1)(b) GDPR, as the Meetings are necessary for the performance of a contract.

The legal basis for processing personal data that you voluntarily provide is your consent pursuant to Article 6(1)(a) and Article 7 GDPR.

Data Transfers to the United States and Other Third Countries

Zoom may transfer your data to servers worldwide. For data transfers to the United States, Zoom relies on the EU–US Data Privacy Framework. For transfers to countries that do not provide an adequate level of data protection, Zoom relies on the EU Standard Contractual Clauses.

Further details can be found in Zoom’s Privacy Policy linked above.

Facebook

We maintain a presence on the social networking platform Facebook. Facebook is operated by Meta Platforms Ireland Ltd., Dublin, Ireland (hereinafter referred to as “Meta”).

Your personal data is processed by us and, in particular, by Meta. Below, we explain which of your personal data we process on our Facebook Page and how our relationship with Meta is structured in this regard.

1. What personal data do we process when you use our Facebook Page?

When you use our Facebook Page, we process the following personal data:

1. Communication

We maintain a presence on Facebook to showcase our products and/or services and to communicate with customers and prospective customers.

The legal basis for our processing of the relevant communications with you is Article 6(1)(f) GDPR (“legitimate interests”), with our legitimate interests lying in the purposes outlined above. Where orders are placed through our social media presences, the legal basis also includes Article 6(1)(b) GDPR (“performance of a contract”).

2. Technical usage data

When you use our Facebook Page, we process technical information relating to your visit, such as your device’s IP address, the time of your visit and the website from which you accessed our page. We process this data for the technical administration and provision of our Facebook Page and to obtain statistical information, as the operator of the Facebook Page, about how our page is used.

The legal basis for processing your data is Article 6(1)(f) GDPR. Our legitimate interest lies in continuously improving our Facebook Page and providing you with information that is relevant and of interest to you.

3. Statistical usage data

We also collect statistical usage data. This may include, for example, information about views of pages, posts or videos; subscriptions; likes on posts; recommendations of posts or comments; sharing of content; reactions to or comments on posts; reports of posts; clicks on links on other pages that lead to our Facebook Page; mouse movements over names or profile pictures to preview content; clicks on buttons on our Facebook Page; and information about the device (computer or mobile device) you are using while logged in.

We receive this type of usage data only in aggregated form through Facebook’s “Page Insights” tool (https://www.Meta.com/business/a/page/page-insights and https://de-de.Meta.com/legal/terms/information_about_page_insights_data) (hereinafter referred to as “Insights Data”). We cannot associate Insights Data with any specific individual.

We process this data for the technical administration and provision of our Facebook Page and, as the operator of the page, to obtain statistical information about how our page is used. The legal basis for processing this data is Article 6(1)(f) GDPR. Our legitimate interest lies in administering and improving our Facebook Page.

We and Meta are what is known as “joint controllers” for the processing of Insights Data. This means that Facebook and we process this data for the shared purpose of understanding how visitors use our Facebook Page. As the operator of the platform, Meta collects detailed usage data from you; we receive only aggregated Insights Data from Meta. Accordingly, Meta alone makes decisions regarding the processing of usage data in connection with Page Insights.

Where such joint controllership exists, the EU General Data Protection Regulation requires us to enter into an agreement with Meta. You can access this agreement here. It contains further details and explanations regarding our joint controllership with Meta in connection with Insights.

4. Likes, posts and messages

When you use our Facebook Page, we process:

  • Your Facebook username and profile picture;
  • Your interactions with our posts, such as likes and shares; and
  • Your comments, posts, messages and other content that you make available to us on our Facebook Page.

The legal basis for processing this data is Article 6(1)(f) GDPR (balancing of interests). We process your data to provide you and other users of our Facebook Page with interesting information and to keep you regularly informed about our services.

2. Data processing by Meta

We do not have access to other personal data that is processed when you use Facebook. The processing of your personal data by Meta is governed by Meta’s Privacy Policy (https://de-de.Meta.com/policy.php).

Please pay particular attention to the following:

1. Transfers of data to the United States and other third countries

Meta may transfer your data to servers worldwide. Where applicable, Meta relies on adequacy decisions for transfers of data to the United States and other third countries and, where these do not apply, on the EU Standard Contractual Clauses.

Further details can be found in the following section of Meta’s Privacy Policy: https://de-de.Meta.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard.

Meta’s Privacy Policy is available at: https://de-de.Meta.com/privacy/policy.

2. Use of cookies by Meta

When you access Facebook, regardless of whether you visit our Facebook Page, Meta places cookies and similar tracking technologies on your device. If you are also logged in to Facebook, Meta can determine that you have visited our Facebook Page and how you have used it. This also applies to all other Facebook Pages.

Meta’s Data Policy provides general information about the cookies it uses, the information it collects through these cookies, how that information is used, how long it is stored by Meta and which third-party partners it is shared with. The policy also contains information on how to contact Meta and how to manage your advertising preferences.

Meta’s Data Policy is available at: https://de-de.Meta.com/policy.php.

You can delete Meta cookies, for example, via the following website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Data Subject Rights

Under Article 15 of the General Data Protection Regulation (GDPR), you have the right to request access to information about the processing of your personal data (“right of access by the data subject”).

Under Article 16 GDPR, you have the right to request the rectification of inaccurate personal data concerning you (“right to rectification”).

Under Article 17 GDPR, you may request the erasure of personal data concerning you, provided that one of the grounds listed therein applies (“right to erasure” or “right to be forgotten”).

Likewise, under Article 18 GDPR, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies (“right to restriction of processing”).

Under Article 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us and to have this data transmitted to another controller (“right to data portability”).

Withdrawal of consent: See the section entitled “Right to Withdraw Consent” in this Privacy Policy.

Right to object: See the section entitled “Right to Object” in this Privacy Policy.

You have the right to lodge a complaint with the competent supervisory authority.

Right to withdraw consent

You may withdraw any consent you have given to the processing of your personal data at any time, for example by sending an email to the email address specified above. The lawfulness of any processing carried out on the basis of your consent before its withdrawal remains unaffected.

Right to object

Where we process your personal data on the basis of Article 6(1)(f) GDPR (“legitimate interests”), you have the right to object to the processing of your personal data in accordance with the provisions of Article 21 GDPR.

Disclosure of your data

Unless already specified elsewhere in this Privacy Policy, we disclose your personal data to the following additional recipients or categories of recipients:

Unless already specified elsewhere in this Privacy Policy, we intend to transfer your personal data to the following third country or international organisation: