The following privacy policy applies to the use of our online service English Re-News (hereinafter "Website"). We place great importance on data protection. The collection and processing of your personal data is carried out in compliance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for collecting, processing and using your personal data within the meaning of Art. 4 No. 7 GDPR is:

Nicolai Schober
Händelstr. 3
41372 Niederkrüchten

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions as a whole or for individual measures, you can address your objection to the controller. You can save and print this privacy policy at any time.

2. General Purposes of Processing

We use personal data for the purpose of operating the website, providing the learning journey features, and enabling AI-powered language tutoring.

3. What Data We Use and Why

3.1 Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating the website.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in an efficient and secure provision of our website pursuant to Art. 6 Para. 1 S. 1 f) GDPR in conjunction with Art. 28 GDPR.

3.2 Access Data

We collect information about you when you use this website. We automatically collect information about your usage behavior and interaction with us and register data about your computer or mobile device. We collect, store and use data about every access to our website (so-called server log files). Access data includes:

• Name and URL of the retrieved file
• Date and time of retrieval
• Amount of data transferred
• Message about successful retrieval (HTTP response code)
• Browser type and browser version
• Operating system
• Referer URL (i.e. the previously visited page)
• Websites accessed by the user's system through our website
• User's Internet service provider
• IP address and the requesting provider

We use this log data without assignment to your person or other profiling for statistical evaluations for the purpose of operating, security and optimization of our website, but also for anonymous recording of the number of visitors to our website (traffic) as well as the extent and type of use of our website and services. This is also where our legitimate interest lies pursuant to Art. 6 Para. 1 S. 1 f) GDPR.

We reserve the right to check the log data retrospectively if there is justified suspicion of illegal use based on concrete indications. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for providing services.

3.3 Cookies

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when visiting a website and stored temporarily on your hard drive. This file as such contains a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser.

We also use a small amount of persistent cookies (also small text files stored on your device) that remain on your device and allow us to recognize your browser on your next visit. Our legitimate interest in using cookies pursuant to Art. 6 Para. 1 S. 1 f) GDPR lies in making our website more user-friendly, effective and secure.

The following data and information are stored in the cookies:

• Log-in information
• Language settings
• Information about the number of visits to our website and use of individual functions

You can set your browser so that you are informed about the setting of cookies in advance and can decide in individual cases whether you exclude the acceptance of cookies for certain cases or in general, or that cookies are completely prevented. This may limit the functionality of the website.

3.4 User Account

You can create a user account on our website. If you wish to do this, we need the personal data requested during login. When logging in later, only your email or username and the password you chose will be required.

To ensure your proper registration and prevent unauthorized registrations by third parties, you will receive an activation link by email to activate your account after your registration. Only after successful registration do we permanently store the data you transmitted in our system.

You can have a user account that has been created deleted at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. We will then delete your stored personal data, unless we still need to store it due to statutory retention obligations.

The legal basis for the processing of this data is your consent pursuant to Art. 6 Para. 1 S. 1 a) GDPR.

3.5 AI Chat Data

When you use our AI-powered learning features (image description, word explanation, short story writing), your chat messages are processed by a third-party AI service provider and stored to maintain your conversation history and enable continuous learning feedback. This data is associated with your user account and the specific learning journey and stage. Chat messages are sent to DeepInfra for processing. We store chat history to allow you to continue your learning sessions.

3.6 Email Contact

When you contact us (e.g. via contact form or email), we process your information to handle the inquiry and in case follow-up questions arise. If the data processing takes place for the execution of pre-contractual measures, which take place upon your request, or, if you are already our customer, for the execution of the contract, the legal basis for this data processing is Art. 6 Para. 1 S. 1 b) GDPR.

4. Storage Duration

Unless specifically stated, we store personal data only as long as necessary for the fulfillment of the purposes pursued. In some cases, the legislator provides for the retention of personal data, such as in tax or commercial law. In these cases, the data will only be stored by us for these legal purposes but not otherwise processed and deleted after expiry of the statutory retention period.

5. Your Rights as a Data Subject

According to applicable laws, you have various rights regarding your personal data. If you would like to assert these rights, please direct your request by email or mail with clear identification of your person to the address specified in section 1.

5.1 Right to Confirmation and Information

You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain from us free information about the personal data stored about you together with a copy of this data. Furthermore, there is a right to information about: the purposes of processing; the categories of personal data being processed; the recipients or categories of recipients; the planned storage duration; the existence of rights to rectification, erasure, restriction or objection; the right to lodge a complaint with a supervisory authority; and the source of data not collected from you directly.

5.2 Right to Rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

5.3 Right to Erasure ("Right to Be Forgotten")

According to Art. 17 Para. 1 GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies: the data is no longer necessary for its original purpose; you withdraw consent and there is no other legal ground; you object to the processing; the data has been unlawfully processed; or erasure is required by law.

5.4 Right to Restriction of Processing

You have the right to obtain from us restriction of processing where: you contest the accuracy of the data; the processing is unlawful and you oppose erasure; we no longer need the data but you require it for legal claims; or you have objected to processing pending verification.

5.5 Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or contract and is carried out by automated means.

5.6 Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 Para. 1 S. 1 e) or f) GDPR. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

5.7 Right to Withdraw Consent

You have the right to withdraw your consent for the processing of personal data at any time.

5.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

6. Data Security

We are committed to protecting your data within the framework of current data protection laws and technical possibilities. Your personal data is transmitted encrypted with us. We use the SSL (Secure Socket Layer) coding system. We point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we constantly adapt to state-of-the-art technology.

7. Disclosure of Data to Third Parties

Basically, we only use your personal data within our company. If and to the extent that we engage third parties in the performance of services (such as AI processing via DeepInfra), they receive personal data only to the extent that the transmission is required for the corresponding service. In the event that we outsource certain parts of the data processing ("order processing"), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights.

8. Data Protection Officer

If you still have questions or concerns about data protection, please contact our Data Protection Officer:

Nicolai Schober
Händelstr. 3
41372 Niederkrüchten
Email: support@english-renews.com