Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Interlexico UG (haftungsbeschränkt)
Hauptstraße 37
82140 Olching
Represented by: Teopolina Tautz

For privacy questions, contact us at [privacy contact / data protection officer, if applicable].

2. Hosting and server log files

The website is hosted by Hetzner Online GmbH, Nürnberg, Deutschland. When you access it, technically necessary access data (server log files) automatically transmitted by your browser are processed:

• page/file accessed, plus date and time
• amount of data transferred and confirmation of successful retrieval
• browser type and version, operating system
• shortened / processed IP address (legal basis: Art. 6(1)(f) GDPR — secure, uninterrupted operation)

Log file retention period: [e.g. 7–30 days], after which they are deleted or anonymised.

The website and all associated enquiry data are processed and stored exclusively on servers within the European Union. No data is transferred to third countries outside the EU/EEA.

3. Cookies and local storage

This website uses no cookies for marketing or tracking purposes and embeds no third-party trackers (e.g. Meta Pixel, Google Ads). For this reason, no cookie consent banner is required.

We use your browser's local storage (localStorage/sessionStorage) exclusively for the site to function, and it transmits no data to us:

• display preference (light/dark/contrast) — stored permanently in the browser, purely local
• temporary storage of your inputs during the enquiry configurator until completion — only for your current session

Legal basis: Section 25(2) TDDDG (German Telecommunications-Digital Services Data Protection Act; technically necessary storage) in conjunction with Art. 6(1)(f) GDPR.

4. Fonts (self-hosted)

Fonts are delivered locally from our own server. There is no connection to Google Fonts or other third parties; no IP address is therefore transmitted to external font services when the page is displayed.

5. Traffic measurement (cookieless, without consent)

To improve our offering, we record page views in anonymised, cookieless form on our own first-party infrastructure. In doing so:

• no cookies are set and no cross-device recognition takes place
• no IP addresses are stored permanently — they are used only in the moment of processing to derive a country and a non-reversible, daily-rotating check value, then discarded immediately
• path accessed, referrer domain, coarse country, browser type, operating system and device type (desktop/mobile/tablet) are processed in this anonymised form

Traffic measurement runs on our own self-hosted infrastructure (Umami, servers in the EU) — no data is transferred to third parties or third countries. Do Not Track (DNT) and Global Privacy Control (GPC) signals are respected: if either is active in your browser, no measurement takes place. Legal basis: Art. 6(1)(f) GDPR.

6. Contacting us and the contact form

If you contact us via the form or email, we process the data you provide (e.g. name, email, company, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries). Data is deleted once it is no longer required and no statutory retention obligations apply.

For the English placement test, we additionally process your test answers (multiple choice, free text) and, optionally, a voice recording you make for the speaking task, provided you allow microphone access in your browser. This data is sent by email to our team together with the contact details you provide, so we can give you individual feedback on your written and spoken answers. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures to determine a suitable training offer). The voice recording is not permanently stored on our website — it is only transmitted by email — and is deleted once it is no longer needed for the assessment. You can complete the test without the speaking task if you do not consent to microphone access.

6a. Marketing newsletter (optional consent)

On our contact form you can separately and voluntarily agree, independently of your actual enquiry, to receive email updates about new course formats, e-learning modules, and dates (Art. 6(1)(a) GDPR). This box is unchecked by default and is not a condition for handling your enquiry.

We use a double opt-in process: after submitting, you receive a confirmation email with a link. Only after clicking that link is the subscription active and your consent documented (timestamp, IP address). If you do not confirm, the entry is automatically deleted. You can withdraw consent at any time with future effect — you will find an unsubscribe link at the bottom of every marketing email.

Existing customers: If you have already booked a paid training with us, we may use the email address provided at booking to inform you about similar services of our own (e.g. follow-up courses) without separate consent, where permitted by applicable law — always with a clear, cost-free right to object, both at booking and in every further email.

7. Bookings and payment processing

For bookings we process the data required to perform the contract (Art. 6(1)(b) GDPR). Payment processing is carried out via [payment service provider, e.g. Stripe] — once activated, with its own privacy notice and data processing agreement. Details will be added once payment integration goes live.

8. Chat assistant "Lexi"

You can ask questions via the chat. Your input is processed to provide an answer and may be stored to follow up with you. Processing/forwarding is carried out via [the AI/backend component used and its legal basis/data processing agreement]. Please do not enter special categories of personal data in the chat.

9. Your rights

Under the GDPR, you have the right to:

• access (Art. 15), rectification (Art. 16), and erasure (Art. 17)
• restriction of processing (Art. 18) and data portability (Art. 20)
• object to processing based on Art. 6(1)(f) (Art. 21)
• lodge a complaint with a data protection supervisory authority (Art. 77)

An informal message to the controller named above is sufficient to exercise these rights. Competent supervisory authority: [relevant state/data protection supervisory authority].

10. Version and changes

We will update this privacy policy whenever data processing changes (e.g. once payment integration is activated). Last updated: [date].