Privacy policy

The controller for the data processing on this website is:
LearnSmart, owner: Onur Sipahi
Herbststraße 21, 74072 Heilbronn, Germany
Email: kontakt@learnsmart-now.de

We process personal data only within the limits of the legal requirements (GDPR, German Federal Data Protection Act). You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You may also lodge a complaint with a data protection supervisory authority. To exercise these rights, please contact the address given above.

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the site is accessed, technically necessary data (e.g. IP address, date/time, page accessed, browser type) is processed to provide the site securely and reliably. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation). A transfer to the USA may take place; the transfer is based on appropriate safeguards (including EU standard contractual clauses).

When you send a request via the booking or application form, we process the data you provide (e.g. name, email address, desired subject, preferred appointment, where applicable phone number, qualifications and your message) solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) or (f) (handling your enquiry).

For login and storing requests we use Supabase (Supabase Inc.). The database is operated in the EU region (Frankfurt am Main). When you register, we process your email address and a (encrypted) password. The legal basis is Art. 6 (1) (b) GDPR.

To process payments (e.g. paying for tutoring lessons or paid learning packages) we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

When you make a payment or store a payment method, you enter your payment data – in particular the card number, expiry date and security code – exclusively directly with Stripe; it is processed solely by Stripe. We ourselves do not receive or store any complete card data. Our system only stores a Stripe customer identifier and – for recognition – the card brand and the last four digits.

If you store a payment method, it is saved with Stripe in order to automatically charge for lessons that have taken place. If you delete your account, the stored payment method is deleted at Stripe. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). Stripe is certified to the PCI-DSS security standard. A transfer to the USA may take place, based on appropriate safeguards (EU standard contractual clauses). You can find more information at https://stripe.com/privacy.

To send emails (e.g. booking and appointment confirmations, notifications, welcome emails) we use the service Resend (Resend, Inc., USA). The data required for sending (email address, name, message content) is processed in doing so. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) or (f) (legitimate interest in communication). A transfer to the USA may take place, based on appropriate safeguards (EU standard contractual clauses).

Our AI-powered learning tools (e.g. AI learning assistant, exam package) use the application programming interface (API) of Anthropic (Anthropic PBC, USA). When you use these tools, your inputs (e.g. entered text, questions or uploaded content) are transmitted to Anthropic to generate a response and processed there. Please do not enter any sensitive personal data that is not required for the use.

The legal basis is Art. 6 (1) (b) GDPR (provision of the function you requested) or (f). According to Anthropic, data transmitted via the API is not used to train AI models. A transfer to the USA may take place, based on appropriate safeguards (EU standard contractual clauses).

When you sign up for our newsletter, we process your email address in order to send you news and learning tips. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link in every email; the lawfulness of the processing carried out until the withdrawal remains unaffected.

For online lessons we use the video service “JaaS” by 8x8 Inc. (USA), based on Jitsi. During a session, audio, video and chat data of the participants is processed in real time in order to technically enable the video conference. The legal basis is Art. 6 (1) (b) GDPR (delivery of the lesson). No recording takes place. A transfer to the USA may take place, based on appropriate safeguards (EU standard contractual clauses).

To improve our offering we use Vercel Web Analytics. This reach measurement works without cookies and does not create personal user profiles; only anonymised, aggregated usage data (e.g. pages accessed, approximate origin, device type) is collected. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a data-minimising reach measurement).

On our homepage we display – where enabled – public Google reviews of our business profile. These are retrieved server-side via Google's Places API (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) and shown in the name of the respective authors. When merely displaying them, no personal data of website visitors is transmitted to Google. If you click a Google link (e.g. “View all reviews”), Google's privacy policy applies. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in presenting customer voices).

We offer the option to contact us via WhatsApp (operator: WhatsApp Ireland Ltd. / Meta Platforms). If you use the WhatsApp button, you are redirected to WhatsApp; the data you enter there (e.g. phone number, message content) is processed by WhatsApp according to its privacy policy – over which we have no influence. If you do not want this, you can alternatively contact us by email. The legal basis is Art. 6 (1) (a)/(b)/(f) GDPR (your enquiry). A transfer to third countries (including the USA) may take place.

We store personal data only for as long as is necessary for the stated purposes or as required by statutory retention periods. After that, the data is deleted. You can delete your account yourself at any time in your area; in doing so, your profile data as well as any payment method stored with Stripe is deleted.

This website uses TLS/SSL encryption to protect data transmission (recognisable by “https://” in the address bar).