This page explains which data we store about you. And why. And for how long.
This page is written in plain language because the law (GDPR Art. 12) requires it.
The most important things first
- You can read this site without signing in.
- You only need an account for what you do yourself: writing, learning, messages.
- We do not sell your data.
- There is no advertising and no tracking.
- You can download and delete all your data yourself.
Who is responsible?
Mein Deutschkurs mit Johannes
Johannes Hinterberger
Paumannstraße 11
5020 Salzburg
Österreich
How to reach us is described in the Legal notice.
If you only read the site
The server automatically records who visits the site. It stores: your browser, your operating system, the page you came from, the time and your IP address.
We need this for security and to find errors. We do not combine this data with other data. We delete it after 30 days.
Anyone who attacks the site is blocked. For this we store their IP address for 24 hours.
Cookies, your device, push and servers
We only store cookies when they are technically necessary. For example, so that you stay signed in. We do not use cookies for tracking.
Below you can see, automatically and up to date, which cookies you currently have, what your browser has stored, how push messages work and where our servers are located.
Your account
When you sign up, we store your username and your email address. We do not store your password itself, only a fingerprint of it (method: bcrypt). Nobody can work out your password from it, not even us.
In addition, we store what you write in your profile yourself. That is voluntary.
We remember which devices you sign in with and when you were last here. That way you stay signed in. You can manage your devices yourself.
We store which legal texts you agreed to and when.
Your public profile
You decide yourself whether others may see your profile. If you make it public, anyone can see it. Search engines can then find it too.
If you upload proof, for example certificates, we store it. You decide who sees it. You can change this at any time.
When you are online
When you write to each other directly, the others can see that you are here right now and whether you have already read their message.
Private messages
We store your private messages with all attachments. Only the two of you can see them. You can delete conversations and block people.
From a private conversation you can also call directly, with sound and video. We do not record anything.
If you are looking for conversation partners, we store when you have time and your appointments.
Courses
If you take part in a course, we store that you take part, how far along you are, your assignments, your grades and feedback, and whether you attended an appointment.
Your teacher can see this data. We need it for the course.
How long you have studied
We measure how long you have spent on a lesson and in the course forum. We only store the total time. You and your teacher can see these times.
What you write
What you write or upload in forums, the blog, comments or polls is stored with your name until you delete it. We also store when you react to a post or mention someone with @.
If you follow others or write on your timeline, we store that too.
Videos on YouTube
Some videos are on YouTube. YouTube belongs to Google. You can recognize them by a start button. The video never starts by itself.
Only when you click the button does your browser connect to YouTube. YouTube then receives your IP address, and Google can store cookies. Your data may be transferred to the USA.
As long as you do not click, nothing happens.
What you keep track of
For exercises, we store your answers and which exercises you have solved.
For texts, we store which ones you have marked as read.
For videos, we store which ones you have marked as watched and when.
Submissions and corrections
We store your submission, your grades and, where applicable, corrections.
Submissions have their own deletion periods. After that we delete them automatically.
Emails from us
We send you emails about your account and about new posts and appointments. You can also receive this information as push messages.
You only receive the newsletter if you subscribe to it. You can unsubscribe at any time. The link is in every email.
We keep track of whether an email has arrived. If you write to us, we store your message and your address so that we can reply.
If you report something
You can report a post or a profile. We then store your report and who wrote it.
Payment
You can pay with PayPal, for points, vouchers and a subscription.
We store the amount, the time and what you paid for. With PayPal we do not see your account number or card details.
We store your points balance and what you received or spent points for.
We store the vouchers you buy or redeem.
To charge the correct tax, we determine your country from your IP address when you buy.
If you enter a VAT number, we have to check it. To do so, we ask the register of Switzerland or the EU.
Invoices
We must keep invoices and receipts for 7 years. The law requires this. They remain even if you delete your account.
Why we are allowed to do this
- You have a contract with us (Art. 6(1)(b) GDPR): your account, your messages, your courses, your submissions and corrections, payment
- You said yes (Art. 6(1)(a) GDPR): push messages, your public profile, YouTube videos, the newsletter
- The law requires it (Art. 6(1)(c) GDPR): invoices, checking the VAT number
- We have a good reason (Art. 6(1)(f) GDPR): security and protection against misuse, server logs, handling reports, delivering emails
You can withdraw your yes at any time. This then applies to the future. What happened before remains lawful.
You do not have to give us any data to read the site. For an account we need a username, email address and password, otherwise it does not work. Everything else is voluntary.
How long is the data kept?
- Server logs: 30 days.
- Blocks after attacks: 24 hours.
- Attachments in private messages: disappear automatically after a certain time.
- Submissions: according to their own deletion periods.
- Everything else: as long as your account exists. You can delete individual items yourself at any time.
- Invoices: 7 years.
- Longer only if we need data for a legal dispute or a deadline requires it.
Who receives any of your data?
We do not pass on your data. There are only these exceptions. Each receives only a small part.
- Google, Apple, Mozilla or Microsoft, only if you turn on push messages: the address of your device and the time. They cannot read the text.
- YouTube (Google), only if you start a YouTube video: your IP address and details about your browser. Nothing from your account.
- PayPal, only if you pay with PayPal: what is needed for this payment.
- The VAT register of Switzerland or the EU, only if you enter a VAT number: this number.
- Tax advisors, legal representatives and auditors, only where invoices are concerned: the data on the invoice.
Nobody else receives anything. We do not sell anything and do not pass on anything for advertising.
Where is your data stored?
Our servers are run by a company in a data center. It only provides the computers and may not look at or use your data. Name and location are shown above.
Your rights
- ask which data we hold about you and receive a copy
- have incorrect data corrected
- have your data deleted
- say that we may no longer use the data
- take your data with you
- object or withdraw your yes
What you can do yourself
- Download all your data: in your profile under "GDPR". With a lot of data this takes a while; you will then get a message.
- Delete individual items: under Delete data you can see everything you have written and delete each entry individually.
- Delete your account: when the list is empty, you can delete your account completely. Only invoices remain.
If you want to complain
You can file a complaint with the data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
dsb.gv.at
