Privacy Policy

This policy explains what personal data we collect when you use this website and the student portal, why we collect it, and the rights you have under the General Data Protection Regulation (GDPR).

Controller

The controller responsible for the processing of personal data on this website is:

Personal data we process

We process the following categories of personal data:

• Account data you provide when registering: your name, email address, phone number, password and — optionally — a profile picture and preferred language.
• Attendance data generated when you check in to classes through the student portal.
• Communication data, such as the emails we send you (for example, trial confirmations).
• Technical data your browser transmits automatically — such as your IP address, the page requested, the date and time, and your user agent — stored in server log files.
• A session cookie that keeps you signed in, and a cookie that remembers your chosen language.

Purposes and legal bases

We use your data for the following purposes and on the following legal bases:

• To create and manage your account and provide the student portal — Art. 6(1)(b) GDPR (performance of a contract).
• To arrange and confirm your free trial and classes — Art. 6(1)(b) GDPR.
• To keep the site secure and functioning, including server logs — Art. 6(1)(f) GDPR (legitimate interest).
• To remember your language preference — Art. 6(1)(f) GDPR (legitimate interest).

Hosting

This website is currently self-hosted by the controller named above for testing purposes, and server log files are stored on that infrastructure. When the service moves to production hosting, this policy will be updated to name the hosting provider.

Recipients

We do not sell your personal data. As the site is currently self-hosted for testing, no third-party processors receive your data beyond what is technically required to operate it. Where we later engage service providers (for example, for hosting or email delivery), they will act on our behalf under a data processing agreement.

Storage period

We keep your account data for as long as you have an account. Server log files are kept only for a short period for security and troubleshooting, then deleted. You can ask us to delete your account and associated data at any time.

Your rights

Under the GDPR you have the right to:

• request access to the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw any consent you have given, with effect for the future (Art. 7(3)).

To exercise any of these rights, please contact us using the details in the Imprint.

You also have the right to lodge a complaint with a data protection supervisory authority.

Providing your data

Providing account data is necessary to register and use the student portal; without it we cannot create your account or arrange your classes. Providing a profile picture is optional.