Privacy Policy

Version of 30 September 2026

1. Who is responsible

Karim Hasebou, trading as Deutschpad
Freihamer Weg 84, 81249 Munich, Germany
Email: support@deutschpad.de

We are responsible ("controller") for the processing of your personal data on deutschpad.de and its teacher and admin sites. For any privacy question or request, email us at the address above.

2. What data we process and why

Your account. When you sign up we process your first and last name, email address, password (stored only by our sign-in provider, never by us), country of residence, time zone, your confirmation that you're 18 or older, the version of our terms you accepted and when, and whether you opted in to marketing emails. We need this to provide your account and lessons (Art. 6(1)(b) GDPR).

Your bookings. We process your lessons and intro call, including teacher, times, length, price and reschedules, to provide and administer them (Art. 6(1)(b) GDPR). Your teacher sees your name, your email address and your booked lessons.

Payments. You pay by card through Stripe. Stripe processes your card details; we never see or store your full card number. We receive and keep payment records, such as amount, date and status, to fulfil our contract and our tax and accounting obligations (Art. 6(1)(b) and (c) GDPR).

Emails. We send emails about your account and bookings, such as booking confirmations with calendar invitations and payment receipts (Art. 6(1)(b) GDPR). If you opted in to marketing emails, we may also send you news about our offers (Art. 6(1)(a) GDPR). You can withdraw that consent at any time by emailing us.

Lessons. Lessons take place on Google Meet. When you join, Google processes your connection, audio and video under its own terms and privacy policy. We don't record lessons.

Teachers. If you teach with us, we also process your profile picture and your Google Meet link, which are shown to students (Art. 6(1)(b) GDPR).

Technical data. When you use the site, our servers process technical data such as your IP address and browser, to deliver the site and keep it secure (Art. 6(1)(f) GDPR; our legitimate interest is a secure, working service). Error logs are kept for up to 3 months.

3. Service providers

We use the following providers, who process data on our behalf under data processing agreements:

Some of these providers are based in the USA or may process data there. Such transfers rely on the EU–US Data Privacy Framework, where the provider is certified under it, or on the EU Commission's standard contractual clauses (Art. 45 and 46 GDPR).

4. Cookies

We only use cookies that are necessary to keep you signed in, set by our sign-in provider Clerk (§ 25(2) TDDDG). We don't use analytics, advertising or tracking cookies, so we don't ask for cookie consent.

5. How long we keep your data

• Account data: until you ask us to delete your account.
• Booking and payment records: for as long as tax and commercial law requires, currently up to 10 years. After your account is deleted, we keep only what these obligations require.
• Technical logs: up to 3 months.

6. Deleting your account

To delete your account, email support@deutschpad.de from the email address of your account. We delete your account and personal data, except for records we must keep by law (see section 5).

7. Your rights

You have the right to:

• access your data (Art. 15 GDPR)
• have it corrected (Art. 16 GDPR)
• have it deleted (Art. 17 GDPR)
• restrict its processing (Art. 18 GDPR)
• receive it in a portable format (Art. 20 GDPR)
• object to processing based on legitimate interest (Art. 21 GDPR)
• withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)

Email us to exercise any of these. You can also complain to a data protection supervisory authority, for example the one responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Changes

We may update this policy when our service changes. The current version is always on this page.