Privacy Policy

Responsible party

Details according to Art. 13 GDPR will follow after the founding of the operating company.

Collection and processing of personal data

User login (Magic Link)

For login, we process your email address to send you a one-time login link. This link is valid for a limited time. Processing is based on contract fulfilment (Art. 6(1)(b) GDPR). Technical processing is handled by Supabase (Supabase Inc.), with whom a data processing agreement exists. Session cookies are used exclusively to maintain your login and are technically necessary (§ 25(2) TDDDG).

Family helper access to learning progress

If you are invited to Smart im Netz by a family helper, you can allow them to view your learning progress. This includes: completed courses, total learning time, and the course you are currently working on.

The legal basis is your explicit consent (Art. 6(1)(a) GDPR). Consent is voluntary — you can use Smart im Netz fully without sharing your learning progress.

You can revoke your consent at any time with effect for the future. To do so, go to your settings and change the access setting under 'Help & family helpers'. After revocation, the family helper can no longer view your learning progress. The lawfulness of processing carried out prior to revocation remains unaffected.

Cookies

This website uses only technically necessary cookies required for the operation of the site. Consent is not required for these (§ 25(2) TDDDG).

Usage statistics

To understand which pages are used, we use Vercel Web Analytics (Vercel Inc., USA). No cookies are set and no IP addresses are stored. An anonymous identifier is derived from the access data, which changes daily and cannot be linked to a person. No user profiles are created and no data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a privacy-friendly analysis of website usage).

Hosting and data processors

This website is hosted by Vercel Inc. Authentication and user data are processed via Supabase (Supabase Inc., USA). Content such as the glossary and scam alerts are provided via the content management system Sanity (Sanity Inc., USA). Data processing agreements exist with all named providers. Data transfer to the USA is based on the EU-US Data Privacy Framework. When visiting the website, technical data (IP address, time of access) is automatically stored in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure provision of the website).

Voucher administration

When purchasing a gift voucher we store: your buyer account, optionally the recipient name and personal message you provided, the voucher code, purchase date and redemption deadline. After redemption additionally: redemption date, recipient account and the 12-month subscription period. Legal basis: Art. 6(1)(b) GDPR (contract performance). Retention period: 10 years from purchase (commercial law).

Use of artificial intelligence

We use artificial intelligence to create texts, images and translations. Your personal data and your learning progress are not processed in this and are not used to train AI. We explain this in detail on our AI transparency page.

More on AI transparency

Your rights

You have the right to access, rectification, deletion, restriction of processing, data portability and objection. To exercise your rights, please contact the responsible party.

Revocation of consent

You may revoke any consent given at any time with effect for the future. The lawfulness of processing carried out prior to revocation remains unaffected.

Changes

We reserve the right to adapt this privacy policy to ensure it always meets current legal requirements.