Privacy Policy

1. Controller

Email: derdiedas.trainer@gmail.com

2. Website provision and technical logs

When the website is accessed, technically necessary data is processed. This may include the IP address, date and time of access, requested address, browser, operating system, user agent, amount of data transferred, and HTTP status.

The processing serves to provide the website securely and reliably, analyze errors, and detect and prevent misuse and attacks.

3. User account and login

During registration, the email address, an optional display name, and a password are processed. The password is not stored in plain text but as a cryptographic hash.

Account status, language setting, registration time, last login, and changes to the user account may also be stored.

To protect the login process, authentication events including the email address, event type, IP address, user agent, and time are also logged.

4. Learning, training, and progress data

When trainers are used, selected settings, levels, topics, answers, correct and incorrect results, scores, response times, session duration, problem words, and usage times are processed in particular.

This data is used to create personal learning levels, word statuses, review priorities, activity records, training statistics, and progress indicators. This processing is necessary so that personal learning progress can be saved and continued later.

5. Optional profile and platform features

Users may voluntarily provide a display name, profile picture, and language setting. Profile pictures are stored on the server and can be removed through the profile settings.

Favorite trainers, in-app notifications, notification settings, voluntary participation in the global ranking, referral codes, and the assignment of successful invitations may also be processed.

Participation in the global ranking is disabled by default and can be enabled or disabled in the profile settings.

6. Contact

When contact is made by email, the submitted contact details and message content are processed in order to answer the request and carry out any necessary follow-up measures.

7. Cookies and local storage

DerDieDas uses technically necessary first-party session cookies. They are used in particular to recognize logged-in users during their session and to protect the user account.

When a referral link is used, the referral code may be stored temporarily in the browser's session storage so that it is not lost during registration. Session storage is normally deleted when the browser session ends.

No advertising, analytics, or tracking cookies are currently used.

8. Purposes and legal bases

Account, training, and progress data is processed to provide the platform functions requested by the user on the basis of Article 6(1)(b) GDPR.

Security logs, prevention of misuse, error analysis, and secure operation are based on legitimate interests under Article 6(1)(f) GDPR.

Where a function is expressly enabled voluntarily, in particular participation in a public ranking, processing may be based on Article 6(1)(a) GDPR. Such consent may be withdrawn at any time with effect for the future.

Where statutory retention or disclosure obligations apply, processing is based on Article 6(1)(c) GDPR.

9. Hosting and recipients

The hosting provider ukraine.com.ua is currently used for technical operation. The server, including the PostgreSQL database, is currently located in Ukraine.

Technical server processing therefore currently takes place outside the European Union or the European Economic Area.

Before the platform is released publicly, the hosting and database are planned to be moved to the EU or EEA. This section will be updated after the move.

Data is disclosed to other recipients only where necessary for technical operation, where there is a legal obligation, or where the user has expressly consented. Personal data is not sold.

10. Storage period

Account and profile data is generally stored for as long as the user account exists. Learning and progress data is stored for as long as it is needed to provide the personal learning history.

Security, authentication, and technical log data is stored only for as long as necessary to protect the service, analyze errors, or establish, exercise, or defend legal claims.

Statutory retention obligations and the protection of legitimate claims may require longer storage. Deletion of the user account or stored data can currently be requested by email.

11. Rights of data subjects

Within the scope of the statutory requirements, data subjects have in particular the right of access, rectification, erasure, restriction of processing, data portability, and objection.

Consent that has been given may be withdrawn at any time with effect for the future. A message to derdiedas.trainer@gmail.com is sufficient to exercise these rights.

There is also a right to lodge a complaint with a data protection supervisory authority. In particular, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is competent.

12. Security and automated decisions

The website is provided over an encrypted HTTPS connection. Passwords are stored only as hashes. Access to stored data is limited to the systems required for operation.

No decision based solely on automated processing takes place that produces legal effects concerning users or similarly significantly affects them.

13. Changes to this Privacy Policy

This Privacy Policy will be updated if functions, data processing operations, service providers, or the server location change.