Privacy Policy

Effective Date: 20/05/2025
Last Updated: 20/05/2025

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website (www.in-german.com) and related services. The level of data collection and processing depends on how you interact with our site - whether you’re just browsing, signing up for content, or creating a paid account.

1. Who We Are

Company Name: inGerman Language Learning
Owner: Jennifer von der Weiden
Address: Calle Lopez Socas 11, 5B-1, 35008 Las Palmas de Gran Canaria, Spain
Email: info@in-german.com

2. Different Levels of Data Collection

a) When You Visit the Website (without signing up)

  • IP address
  • Device/browser information
  • Access time and URL accessed
  • Essential cookies (technical functionality only)

Your IP address is processed automatically to ensure technical functionality and security of the website. This data is not visible to us as individuals, is handled by our hosting and delivery providers, and is stored in encrypted or pseudonymized form. We do not use this information to identify you personally.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Storage period: Automatically deleted or anonymized after 30 days, unless needed for security/logs.

b) When You Sign Up for Free Content (Newsletter, Freebie, Waitlist)

  • Email address
  • Country (if requested)
  • Consent record (time and source)

Legal basis: Consent (Art. 6(1)(a) GDPR)
Storage period: Until you unsubscribe or revoke consent.

c) When You Create an Account

  • Name and email address
  • Password (encrypted)
  • Learning activity

You can view and update your personal data at any time in your account settings.

Legal basis: Contract (Art. 6(1)(b) GDPR)
Storage period: As long as your account is active or as legally required.

d) If You Become a Paying Customer

  • Billing address (if required)
  • Payment method (via Stripe, PayPal, etc.)

You can manage and update your billing information within your account area.

3. Your Rights

  • Request a copy of your data (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Have your data deleted (“Recht auf Löschung”, Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Object to processing (“Widerspruch”, Art. 21 GDPR)
  • Withdraw your consent at any time (Art. 7(3) GDPR)
  • Request data portability (Art. 20 GDPR)

To make a request or object to processing, email us at info@in-german.com. We will respond within 30 days.

4. Hosting and Content Delivery

Zenler and Amazon Web Services (CloudFront CDN) provide hosting and delivery. These systems may register IP addresses to count unique visits or prevent abuse. This data is not accessible to us in detail.

5. Cookie Consent

We use Usercentrics to manage cookie preferences. Only essential cookies load without consent. Others (like marketing or analytics cookies) require opt-in. You can update or revoke consent anytime via our Cookie Policy.

6. Integrated Third-Party Tools

We use external services to provide essential or enhanced functionality. These may collect and process personal data, especially if you interact with embedded features (forms, calendars, chatbots, videos, social buttons). Each provider has its own privacy policy and international data transfer safeguards.

Tool Purpose Provider Legal Basis Transfer Safeguards Privacy Policy
Google Forms, Drive, Calendar Forms, uploads, scheduling Google Ireland Ltd Legitimate interest / Consent DPF Google Privacy Policy
reCAPTCHA Spam protection Google Ireland Ltd Legitimate interest / Consent DPF Google Privacy Policy
Zoom Video conferencing Zoom Video Communications Inc. Contract / Legitimate interest SCCs Zoom Privacy Policy
Vimeo Video hosting Vimeo Inc. Legitimate interest / Consent SCCs Vimeo Privacy Policy
Spotify Podcast embedding Spotify AB Legitimate interest / Consent EU-based Spotify Privacy Policy
YouTube Video integration Google Ireland Ltd Legitimate interest / Consent DPF Google Privacy Policy
ManyChat Chatbot ManyChat Inc. Legitimate interest / Consent SCCs ManyChat Privacy Policy
Font Awesome Icons Fonticons Inc. Legitimate interest / Consent SCCs Font Awesome Privacy Policy
Google Fonts Typography Google Ireland Ltd Legitimate interest DPF Google Privacy Policy
Facebook & Instagram Social media interaction Meta Platforms Ireland Ltd Consent (Marketing) DPF Meta Privacy Policy
TikTok Social media retargeting TikTok Technology Limited Consent (Marketing) SCCs TikTok Privacy Policy

7. Payments

Payments are securely processed via the following providers:

Provider Legal Basis Transfer Safeguards Privacy Policy
PayPal Contract SCCs PayPal Privacy Policy
Stripe Contract SCCs Stripe Privacy Policy
American Express Contract Binding Corporate Rules American Express Privacy Policy
Mastercard Contract Binding Corporate Rules Mastercard Privacy Policy
VISA Contract SCCs VISA Privacy Policy

8. Data Retention

  • Site visitor data: up to 30 days (unless needed for logs)
  • Newsletter data: until you unsubscribe
  • Account data: while account is active
  • Billing and payment data: 6 years (tax law)

9. Data Security

We use SSL encryption, secure hosting, and limited-access systems. Payments are processed only through encrypted channels.

10. International Transfers

When data is transferred to the US or outside the EU, we rely on:

  • EU-US Data Privacy Framework (DPF)
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (where applicable)

11. Policy Updates

We may change this privacy policy to reflect legal, technical, or operational changes. You’ll always find the latest version here.

12. Contact

If you have questions or want to exercise your rights, please contact:
Email: info@in-german.com
Website: www.in-german.com

This privacy policy is governed by the General Data Protection Regulation (GDPR) and is also aligned with Spain’s Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

For more details on cookies, visit our Cookie Policy.