Privacy policy

This notice explains which personal data are processed when you visit this website or send us an enquiry, for what purpose and on what legal basis. The German version is the legally binding one.

1. Controller

We are not required to appoint a data protection officer under § 38 of the German Federal Data Protection Act. Please send data protection enquiries to the email address above.

2. Visiting the site and server logs

When you open this website, our hosting provider automatically processes information sent by your browser: IP address, date and time of access, the address requested, the volume of data transferred, the referrer and identifiers for your browser and operating system. This is done to deliver and secure the site technically.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the stable and secure operation of the website. Log data are deleted or truncated after 30 days at the latest.

3. Hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. A data processing agreement under Art. 28 GDPR is in place. Transfers to the United States are based on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

4. Fonts

The typefaces used, Red Hat Display and IBM Plex Sans, are bundled at build time and delivered from our own server. No connection to Google Fonts or any other third party is made when you open the site.

5. Storage in your browser

This site sets no analytics, tracking or advertising cookies. The only things placed in your browser's local storage are:

• the fact that you have dismissed the cookie notice, so that it does not reappear on every page;
• your answers to the diagnostic test, so that the topic map can still show your result after you move between pages.

These entries remain on your device and are not transmitted to us. You can delete them at any time using the button in the cookie notice or through your browser settings. The legal basis is § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act for the technically necessary storage, together with Art. 6(1)(f) GDPR.

6. The diagnostic test

The diagnostic test runs entirely in your browser. Questions, answers and the scoring are not transmitted to our server and are not stored by us. Only if you submit the contact form and explicitly agree there is a short text summary of the result sent along with your enquiry.

The result is not an assessment of performance. We use it solely as the basis for a conversation during the free first appointment. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

7. Enquiries and bookings

If you contact us through the form, by email or by telephone, we process the details you provide — name, email address, telephone number where given, year group, format of interest, possible appointment times, your message and any summary of the diagnostic test — in order to deal with your enquiry.

The legal basis is Art. 6(1)(b) GDPR, because the processing serves pre-contractual measures taken at your request. If no contract is concluded, we delete the enquiry within six months of the last contact at the latest. If a contract is concluded, the commercial and tax retention periods of six and ten years respectively under § 257 of the German Commercial Code and § 147 of the German Fiscal Code apply.

8. Data relating to minors

Some of our courses are aimed at pupils under the age of 18. For people under 16, consent under Art. 8 GDPR may only be given by a parent or guardian. The enquiry form may therefore only be completed and submitted by an adult with parental responsibility where the learner is a minor; the form contains a field for this.

For learners who are minors we collect only what is needed to place them in a course: first and last name, and year group. We do not collect a date of birth, photographs, school grades or health data through this form. We never invite a learner to send us their own contact details without their parent or guardian knowing. The deletion periods in section 7 apply accordingly.

9. The map

The map on this site is not loaded automatically. What you see first is a purely local graphic for which no connection to a third party is made. Only when you press "Load the map" is a map section loaded from the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. Your IP address is transmitted to that provider in the process.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) of the German Telecommunications Digital Services Data Protection Act. The consent applies to the current visit only and can be withdrawn by reloading the page.

10. Recipients

Your data are passed on only where this is necessary to perform a contract, where you have consented, or where we are legally obliged to do so. Our processors are the hosting provider named above and our email provider. Your data are not sold and are not passed to third parties for advertising purposes.

11. Your rights

You have the following rights in relation to us:

• access to the data processed (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on legitimate interests (Art. 21 GDPR),
• withdrawal of consent with effect for the future (Art. 7(3) GDPR).

To exercise them, simply write to datenschutz@formelwerk.bizbrew.app.

12. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority, Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

13. Changes to this notice

We update this notice when our processing activities or the legal requirements change. The version published on this page is the one that applies.