Privacy Policy
1. Controller
[COMPANY NAME PLACEHOLDER], [COMPANY ADDRESS PLACEHOLDER], hello@learngermanonwa.de is the controller for personal data processed through this website and the associated WhatsApp channel (Art. 4(7) GDPR).
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone number | Create and run your account, send lessons and receipts | Contract (Art. 6(1)(b)) |
| Password (hashed) | Secure login | Contract (Art. 6(1)(b)) |
| Lesson and test activity | Show your progress, unlock the next lesson | Contract (Art. 6(1)(b)) |
| Payment metadata (amount, date, provider reference — never full card numbers) | Bookkeeping, refunds, statutory retention | Legal obligation (Art. 6(1)(c)), contract |
| WhatsApp messages you send us | Registration, support, reminders | Consent (Art. 6(1)(a)), contract |
3. Who else sees it (processors)
- Meta Platforms Ireland Ltd. — operates the WhatsApp Business Platform we use to message you.
- Stripe and PayPal — process card and PayPal payments; we never see or store full card numbers.
- YouTube (Google Ireland Ltd.) — hosts lesson videos, loaded in privacy-enhanced mode and only after you click to play a video.
- [COMPANY NAME PLACEHOLDER]'s hosting provider (Hostinger) — runs the server this site and the WhatsApp integration run on.
4. Retention
We keep your account and progress data while your account is active, plus a limited grace period after you ask us to delete it, to prevent accidental loss. Payment records are kept as long as tax law requires (typically up to 10 years in Germany), even after account deletion. Unfinished WhatsApp sign-ups that never set a password are deleted automatically after a few weeks.
5. Your rights
Under Articles 15–21 GDPR you can ask us for a copy of your data (also available any time from your dashboard), correction, deletion, restriction of processing, or object to processing based on our legitimate interests. You can delete your own account and its personal data from your dashboard at any time. You also have the right to complain to your local data protection authority.
6. Cookies
We set exactly one cookie, needed to keep you logged in — no advertising or analytics cookies. See our Cookie Notice for detail.