Privacy Policy

1. Data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Christin Heike Rünger
Sprachstudio Christin
Email: hallo@sprachstudiochristin.de
Phone: +49 176 83194703

The postal address is in the Legal notice.

2. Hosting and server logs

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare automatically processes technical access data (IP address, browser type, the page requested, date and time) in order to deliver the website and protect it against attacks. The website’s own request logs are kept for three days and then deleted. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Cloudflare processes this data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework.

3. Contact form

When you use the contact form, the following data are processed:

• Name
• Email address
• Phone number (optional)
• What your enquiry is about (selection)
• Your message

The form sends your enquiry to me by email, through Cloudflare (Email Routing). The website itself keeps no copy. I use the data solely to respond to your enquiry and, where applicable, to arrange lessons. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). I delete enquiries once they have been fully handled, unless lessons are arranged or statutory retention obligations apply.

Spam protection (Cloudflare Turnstile)

To keep automated spam out of the form, the contact page uses Cloudflare Turnstile. As soon as you start filling in the form, Turnstile checks whether it is being used by a person. To do this, it processes technical data from your browser (such as the IP address and browser information) and sends it to Cloudflare. Turnstile is only loaded on the contact page, once you start using the form, and is not used for tracking or advertising. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam); storing and reading the information needed for the check is necessary for the form you have chosen to use (§ 25(2) no. 2 TDDDG).

4. Email

If you write to hallo@sprachstudiochristin.de, your email is forwarded to my inbox by Cloudflare (Email Routing). Cloudflare processes the email only to deliver it. I use your details to answer your message (Art. 6(1)(b) and (f) GDPR).

5. WhatsApp

This website includes a link to the WhatsApp service operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). If you follow this link and use WhatsApp, Meta’s privacy policy applies. Use of WhatsApp is voluntary; you can also contact me by email or phone.

6. No cookies, no tracking, no embedded content

This website uses no cookies and no tracking or analytics tools (such as Google Analytics, Facebook Pixel, or similar services). Its fonts are served from the website itself. It does not embed social media widgets, videos (e.g. YouTube, Vimeo) or any other external content that transmits data to third parties. No user profiles are created and no data is shared for advertising purposes.

7. Your rights under the GDPR

You have the right at any time to:

• Access the personal data held about you (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure of your data, where no statutory retention obligation applies (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Data portability of data you have provided (Art. 20 GDPR)
• Withdraw consent with effect for the future, where processing is based on consent

To exercise your rights, please contact: hallo@sprachstudiochristin.de

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority for Sprachstudio Christin in the state of Hesse, Germany is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(The Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 3163
65021 Wiesbaden
Germany
datenschutz.hessen.de

9. Changes to this privacy policy

This privacy policy may be updated to reflect legal or technical changes. The current version is always available on this page. Please note the date of the last update at the top of this page.