Privacy policy
This notice explains concisely which personal data are processed when you use EinbürgerungsAkademie and which rights you have.
Draft · details to complete
Last updated: 9 September 2026
8 clearly structured sections
Controller
- Controller
- Required information must be added before publication
- Address
- Required information must be added before publication
- Privacy contact
- support@einbuergerungsakademie.de
Data, purposes and legal bases
- Account and profile data (email address, first name, language, federal state and optional exam details) for registration and service delivery under Article 6(1)(b) GDPR.
- Learning data (answers, progress, favourites, reviews and mock-exam results) for personalised learning under Article 6(1)(b) GDPR.
- Contact details and messages for handling enquiries under Article 6(1)(b) or (f) GDPR.
- Order, payment-status and transaction references for contract performance and statutory duties under Article 6(1)(b) and (c) GDPR. We do not store complete card details.
- Newsletter data based on your consent under Article 6(1)(a) GDPR; consent can be withdrawn at any time for the future.
- Technical connection and security data for delivery, troubleshooting and abuse prevention under Article 6(1)(f) GDPR.
Recipients
Access is limited to authorised persons and required providers for hosting, account and database operation, email delivery, contact handling, editorial content and payments. Payments are processed through Stripe; transactional emails may be sent through Brevo. Required processor agreements are concluded. Personal data are not sold.
Where a provider processes data outside the European Economic Area, this takes place only under a valid safeguard, in particular an adequacy decision or EU Standard Contractual Clauses with supplementary measures.
Retention
Data are retained only for as long as required for the relevant purpose, statutory duties or the establishment of legal claims.
- Account and learning progress
- Until account deletion; statutory retention duties remain unaffected.
- Payment records
- For the applicable statutory retention periods.
- Newsletter
- Until consent is withdrawn or the purpose no longer applies.
- Contact requests
- Normally 90 days after the request is closed.
- Technical forwarding data
- No longer than 14 days.
- Abuse prevention
- Pseudonymous counters normally for no longer than 15 minutes.
- Server logs
- Normally 14 days, potentially longer after a security incident.
- Backups
- Up to 30 days in the regular deletion cycle.
Your rights
To exercise your rights, write to support@einbuergerungsakademie.de. You also have the right to lodge a complaint with a data protection supervisory authority.
- Access and rectification (Articles 15 and 16 GDPR).
- Erasure and restriction (Articles 17 and 18 GDPR).
- Data portability (Article 20 GDPR).
- Objection to processing based on legitimate interests (Article 21 GDPR).
- Withdrawal of consent for the future (Article 7(3) GDPR).
Security
Appropriate technical and organisational measures are used, including encrypted transmission, access restrictions, data minimisation and regular security updates.
Changes to this notice
This Privacy Policy is updated when the service, providers or legal requirements change. The published version at the relevant time applies.
Legal and information sources
The following primary and provider sources informed the structure of this document. They do not replace review of the specific business model.
Questions about this document?
Contact us directly with contractual, provider or privacy questions.