Your data, protected

This Privacy Policy explains how [Company legal name] ("we", "us", or "our") collects, uses, and protects your personal data when you use the German for Girls in Tech website and learning platform (the "Service").

We are committed to protecting your privacy and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection law.

We collect only the data we need to run the Service. This includes:

• Account information — name, email address, and password (stored securely).
• Profile information — such as your native language, learning goals, and progress.
• Payment information — processed by our payment provider. We never store full card details.
• Usage data — pages visited, lessons completed, and features used.
• Communications — messages you send us, such as support requests.
• Technical data — IP address, browser type, and device information, collected through analytics.

We use your personal data to:

• Provide and personalise the Service, including tracking your learning progress.
• Process payments and manage your account.
• Respond to your questions and support requests.
• Improve the Service through analytics and product research.
• Send you service updates and, where you have opted in, learning tips and offers.
• Meet our legal and security obligations.

We process personal data on the following legal bases:

• Performance of a contract — to provide the Service you signed up for.
• Legitimate interests — to keep the Service secure, understand how it is used, and improve it.
• Consent — for optional marketing communications, which you can withdraw at any time.
• Legal obligation — where we must retain data to comply with the law.

We use essential cookies to keep you signed in and the Service working. We may also use privacy-respecting analytics to understand how visitors use the site.

We do not currently sell your personal data. If we introduce non-essential cookies or tracking, we will ask for your consent first and keep a record of your choice.

We never sell your personal data. We share data only with:

• Service providers who help us run the Service (hosting, payments, email, analytics), bound by data-processing agreements.
• Authorities, where required by law or to protect the rights and safety of our users.

We keep your personal data only as long as needed for the purposes in this policy, or as required by law. When we no longer need your data, we delete or anonymise it.

If you are in the European Union or the UK, you have the right to access, correct, or delete your personal data, to restrict or object to processing, and to receive a portable copy of data you provided.

To exercise any of these rights, contact us using the details at the end of this policy. You also have the right to lodge a complaint with your local data protection authority.

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated date at the top of this page and, where appropriate, by a notice on the Service.

For any privacy questions or requests, contact us at [contact email address] or at [Registered address].