Last updated: 5 January 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Lingonex
Legal form: Einzelunternehmen
Owner: Leila Sheikholeslami
Address: Rheinvillenstraße 5, 68163 Mannheim
Website: https://lingonex.de

Email (data protection inquiries): dpo@lingonex.de

Lingonex operates an online language school for adults.

2. What Is Personal Data?

Personal data is any information relating to an identified or identifiable natural person, such as a name, email address, IP address, or user behavior.

3. How We Obtain Personal Data

We process personal data in the following ways:

a) Data you provide directly

When you:

  • Contact us via the website or email
  • Subscribe to our newsletter
  • Purchase services
  • Create a user account
  • Download learning materials
  • Participate in programs or online lessons

b) Data collected automatically

When you visit our website, certain technical data is automatically processed (see Section 6).

If required personal data is not provided, we may be unable to provide our services or respond to inquiries.

4. Categories of Personal Data Processed

Depending on your interaction with us, we may process the following categories of personal data:

  • Identification data (e.g. name, username)
  • Contact details (e.g. email address, phone number)
  • Billing and payment data
  • Contract and service data
  • Technical and usage data
  • Course participation and profile data (e.g. language level)
  • Marketing preferences (newsletter subscription)

5. Purposes of Processing

We process personal data for the following purposes:

  • Responding to inquiries
  • Providing and managing language courses and services
  • Contract execution and customer management
  • User account administration
  • Processing payments
  • Sending newsletters (only with consent)
  • Ensuring website security and functionality
  • Compliance with legal obligations

6. Automatically Collected Technical Data

When visiting our website, the following technical data may be processed:

  • IP address
  • Date and time of access
  • Browser type and operating system
  • Referrer URL
  • Pages accessed

This data is processed to ensure website security, stability, and proper functionality.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

7. Legal Bases for Processing

Processing of personal data is based on one or more of the following legal bases:

  • Art. 6(1)(a) GDPR – Consent (e.g. newsletter)
  • Art. 6(1)(b) GDPR – Performance of a contract
  • Art. 6(1)(c) GDPR – Legal obligations (tax and accounting law)
  • Art. 6(1)(f) GDPR – Legitimate interests (IT security, service improvement)

8. Newsletter (Mailchimp)

If you subscribe to our newsletter, your email address and optional name are processed via Mailchimp, a service provided by Intuit Inc., USA.

  • Subscription is voluntary
  • Double opt-in is used
  • You may unsubscribe at any time via the link in each email

Legal basis: Art. 6(1)(a) GDPR (consent)

Mailchimp processes data based on EU Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Payments

Payments for services may be processed via:

  • Stripe Payments Europe Ltd.
  • Bank transfer

Payment providers process personal data independently as separate controllers. Their respective privacy policies apply.

Legal basis: Art. 6(1)(b) GDPR

10. Online Classes & Communication

Online lessons and communication may take place via Google Meet / Google Workspace, provided by Google LLC, USA.

This may involve processing:

  • Names
  • Email addresses
  • Communication content

Online sessions are not recorded unless explicitly announced in advance and conducted with consent.

Legal basis: Art. 6(1)(b) GDPR
For recordings (if applicable): Art. 6(1)(a) GDPR

11. Cookies

Our website uses technically necessary cookies to ensure basic functionality and security.

We do not use tracking, analytics, or marketing cookies at this time.

If this changes, we will update this Privacy Policy and implement a consent mechanism where required.

Legal basis: § 25(2) TTDSG, Art. 6(1)(f) GDPR

12. Hosting & Data Storage

Our website is hosted by Hostinger.

Personal data is stored only for as long as necessary to fulfill the stated purposes or as required by law.

13. Data Retention Periods

Unless stated otherwise, personal data is stored as follows:

  • Contact inquiries: up to 6 months
  • Contract and billing data: 10 years (tax law)
  • Newsletter data: until consent is withdrawn
  • User account data: until account deletion
  • Technical logs: up to 30 days

14. Data Sharing

We do not sell personal data.

Personal data is shared only with trusted service providers where necessary (hosting, email, newsletter, payment providers) and based on GDPR-compliant agreements.

15. Data Transfers to Third Countries

Some service providers (e.g. Mailchimp, Google) are located outside the EU/EEA.

In such cases, data transfers are safeguarded through EU Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

16. Your Rights Under the GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

You may exercise your rights by contacting:
dpo@lingonex.de

17. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

18. Adults Only

Our services are intended exclusively for adults (18+).
We do not knowingly collect personal data from minors.

19. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy when necessary.
The current version is always available on our website.