Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Interlexico UG (haftungsbeschränkt)
Hauptstraße 37
82140 Olching
Represented by: Teopolina Tautz

For privacy questions, contact us at [privacy contact / data protection officer, if applicable].

2. Hosting and server log files

The website is hosted by Hetzner Online GmbH, Nürnberg, Deutschland. When you access it, technically necessary access data (server log files) automatically transmitted by your browser are processed:

• page/file accessed, plus date and time
• amount of data transferred and confirmation of successful retrieval
• browser type and version, operating system
• shortened / processed IP address (legal basis: Art. 6(1)(f) GDPR — secure, uninterrupted operation)

Log file retention period: [e.g. 7–30 days], after which they are deleted or anonymised.

The website and all associated enquiry data are processed and stored exclusively on servers within the European Union. No data is transferred to third countries outside the EU/EEA.

3. Cookies and local storage

This website uses no cookies for marketing or tracking purposes and embeds no third-party trackers (e.g. Meta Pixel, Google Ads). For this reason, no cookie consent banner is required.

We use your browser's local storage (localStorage/sessionStorage) exclusively for the site to function, and it transmits no data to us:

• display preference (light/dark/contrast) — stored permanently in the browser, purely local
• temporary storage of your inputs during the enquiry configurator until completion — only for your current session
• whether the voucher notice has already been shown to you or whether you have requested a voucher, so that it does not appear repeatedly — in the browser, purely local

Legal basis: Section 25(2) TDDDG (German Telecommunications-Digital Services Data Protection Act; technically necessary storage) in conjunction with Art. 6(1)(f) GDPR.

4. Fonts (self-hosted)

Fonts are delivered locally from our own server. There is no connection to Google Fonts or other third parties; no IP address is therefore transmitted to external font services when the page is displayed.

5. Traffic measurement (cookieless, without consent)

To improve our offering, we record page views in anonymised, cookieless form on our own first-party infrastructure. In doing so:

• no cookies are set and no cross-device recognition takes place
• no IP addresses are stored permanently — they are used only in the moment of processing to derive a country and a non-reversible, daily-rotating check value, then discarded immediately
• path accessed, referrer domain, coarse country, browser type, operating system and device type (desktop/mobile/tablet) are processed in this anonymised form

Traffic measurement runs on our own self-hosted infrastructure (Umami, servers in the EU) — no data is transferred to third parties or third countries. Do Not Track (DNT) and Global Privacy Control (GPC) signals are respected: if either is active in your browser, no measurement takes place. Legal basis: Art. 6(1)(f) GDPR.

6. Contacting us and the contact form

If you contact us via the form or email, we process the data you provide (e.g. name, email, company, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries). Data is deleted once it is no longer required and no statutory retention obligations apply.

For the English placement test, we additionally process your test answers (multiple choice, free text) and, optionally, a voice recording you make for the speaking task, provided you allow microphone access in your browser. This data is sent by email to our team together with the contact details you provide, so we can give you individual feedback on your written and spoken answers. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures to determine a suitable training offer). The voice recording is not permanently stored on our website — it is only transmitted by email — and is deleted once it is no longer needed for the assessment. You can complete the test without the speaking task if you do not consent to microphone access.

6a. Marketing newsletter (optional consent)

On our contact form you can separately and voluntarily agree, independently of your actual enquiry, to receive email updates about new course formats, e-learning modules, and dates (Art. 6(1)(a) GDPR). This box is unchecked by default and is not a condition for handling your enquiry.

We use a double opt-in process: after submitting, you receive a confirmation email with a link. Only after clicking that link is the subscription active and your consent documented (timestamp, IP address). If you do not confirm, the entry is automatically deleted. You can withdraw consent at any time with future effect — you will find an unsubscribe link at the bottom of every marketing email.

Existing customers: If you have already booked a paid training with us, we may use the email address provided at booking to inform you about similar services of our own (e.g. follow-up courses) without separate consent, where permitted by applicable law — always with a clear, cost-free right to object, both at booking and in every further email.

6b. Voucher promotions

Via a notice window on our website you can request a voucher code while a promotion is running; we state the offer and deadlines in the notice window. For this we process your name, your email address, the language of the website and the time at which you confirmed that you have read this privacy policy. We only generate the code after you have confirmed your email address via the link in our confirmation email. We then also store the code, the time of confirmation and, once you redeem it, when and by whom it was marked as redeemed. Legal basis: Art. 6(1)(b) GDPR (carrying out the promotion you requested).

After confirmation we create a prospect entry with your name and email address in our customer management system so that we can match the code to your enquiry or booking and prepare a suitable offer (Art. 6(1)(f) GDPR, legitimate interest in preparing a contract). You can object to this processing at any time, e.g. by email to our contact address. Without your separate newsletter consent you will not receive any advertising emails from us.

Storage period:

• unconfirmed requests: deleted automatically after 30 days
• codes not redeemed: deleted three months after the end of the redemption period stated in the notice window and in the email with your code
• redeemed codes: become part of your booking records and are subject to the statutory retention periods
• prospect entry: deleted or anonymised if no contract is concluded within 24 months

You may also voluntarily subscribe to our newsletter in the notice window, on the confirmation page or via the email containing your code. The voucher does not depend on this. The subscription only takes effect once you trigger it with a separate click after confirming your email address; as proof we store the time, IP address and wording of your consent. Otherwise section 6a applies.

7. Bookings and payment processing

For bookings we process the data required to perform the contract (Art. 6(1)(b) GDPR). Payment processing is carried out via [payment service provider, e.g. Stripe] — once activated, with its own privacy notice and data processing agreement. Details will be added once payment integration goes live.

8. Chat assistant "Lexi"

You can ask questions via the chat. Your input is processed to provide an answer and may be stored to follow up with you. Processing/forwarding is carried out via [the AI/backend component used and its legal basis/data processing agreement]. Please do not enter special categories of personal data in the chat.

9. Your rights

Under the GDPR, you have the right to:

• access (Art. 15), rectification (Art. 16), and erasure (Art. 17)
• restriction of processing (Art. 18) and data portability (Art. 20)
• object to processing based on Art. 6(1)(f) (Art. 21)
• lodge a complaint with a data protection supervisory authority (Art. 77)

An informal message to the controller named above is sufficient to exercise these rights. Competent supervisory authority: [relevant state/data protection supervisory authority].

10. Version and changes

We will update this privacy policy whenever data processing changes (e.g. once payment integration is activated). Last updated: [date].