Privacy Policy (Art. 13 GDPR / DSGVO)

1. Data Controller

Mr. Trong Hieu Le, Stühlingerstraße 26, 79106 Freiburg im Breisgau, Germany

Email: HieuLT22@gmail.com

2. SSL / TLS Encryption (Art. 32 GDPR)

For security reasons and to protect the transmission of confidential content, this website utilizes modern SSL/TLS encryption (HTTPS / TLS 1.3). You can identify an encrypted connection by the change in the browser address line from 'http://' to 'https://' and by the lock symbol in your browser bar. When active, data transmitted between you and the site cannot be intercepted by unauthorized third parties.

3. No User Accounts — Local Device Storage (§ 25 TDDDG & Art. 6 Para. 1 Point f GDPR)

This learning platform is 100% free — no registrations, user profiles, or passwords exist. Your study progress (completed questions, test scores, bookmarked and incorrect questions), selected language, and color theme are stored strictly locally in your browser's Local Storage. This data never leaves your device and cannot be accessed by us. Storage on your device complies with Section 25 Paragraph 2 Number 2 TDDDG, as it is strictly necessary to deliver the self-study features you request. Subsequent functional processing is grounded in Article 6 Paragraph 1 Point f GDPR (legitimate interest in providing a user-friendly, privacy-preserving educational tool). You can clear this data at any time via your browser settings.

4. Hosting and Server Logfiles (Cloudflare Pages)

Our platform is hosted via Cloudflare Pages by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When pages are requested, technical connection logs are automatically processed by the edge hosting network (truncated IP address, timestamp, requested resource, browser type, and operating system). This serves solely to maintain high-speed CDN delivery (<30ms TTFB), operational stability, and DDoS mitigation. The legal basis is our legitimate interest under Article 6 Paragraph 1 Point f GDPR. Log files are automatically purged after a brief retention window.

5. Advertising (Google AdSense) and Google Consent Mode v2

This platform displays Google AdSense advertisements and implements Google Consent Mode v2 with default states set to 'denied' prior to interaction. Via the cookie consent toast displayed upon first visit, you have complete choice:

• Without Consent ('Essential Only' / 'Nur essenzielle'): Only non-personalized contextual ads are loaded. Google sets no advertising cookies on your device and creates no individual user profiles. The legal basis is our legitimate interest in financing free educational access (Art. 6 Para. 1 Point f GDPR).
• With Explicit Consent ('Accept All' / 'Alle akzeptieren'): Google AdSense utilizes advertising cookies and device identifiers (via doubleclick.net) to deliver personalized ads and gauge campaign reach. The legal basis for cookie storage is § 25 Para. 1 TDDDG and for data processing Art. 6 Para. 1 Point a GDPR.

For ad serving, Google acts as an independent controller (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland for EEA users; Google LLC, USA). For details, consult Google Privacy Policy and the Google Ads Program Policies.

You can also deactivate personalized Google ads account-wide at: Google Ad Settings (adssettings.google.com).

6. Right to Withdraw Consent at Any Time (Art. 7 Para. 3 GDPR)

You have the right to revoke any given consent at any time with future effect (Art. 7 Para. 3 GDPR). The legality of processing carried out prior to withdrawal remains unaffected. You can modify your choices at any moment by clicking the 'Cookie-Einstellungen' button in the website footer.

7. International Data Transfers (USA)

When utilizing Google AdSense and Cloudflare, technical data may be processed on servers in the United States. An adequacy decision (EU-US Data Privacy Framework — DPF) adopted by the European Commission in July 2023 governs transfers to certified entities. Both Google LLC and Cloudflare, Inc. are certified under the DPF and utilize EU Standard Contractual Clauses (SCCs).

8. Your Data Subject Rights (Art. 15–21 GDPR)

Under the GDPR, you hold full data subject rights:
• Right of access (Art. 15);
• Right to rectification (Art. 16);
• Right to erasure ('Right to be forgotten', Art. 17);
• Right to restriction of processing (Art. 18);
• Right to data portability (Art. 20);
• Right to object (Art. 21) regarding processing based on legitimate interests or direct marketing.

To exercise any of these rights, send an email to: HieuLT22@gmail.com.

9. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR). The authority responsible for the operator's jurisdiction is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Phone: +49 (0) 711 / 61 55 41-0
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de

10. Status and Updates to this Privacy Policy

This privacy policy is currently valid as of November 2026. Any updates reflecting regulatory changes will be published directly on this page.