Privacy policy

Controller

Anna Sosnowski, c/o IP-Management #17839, Ludwig-Erhard-Str. 18, 20459 Hamburg, Deutschland. Email: info@learnthisnext.com

Visiting the website

When you visit the site, our hosting provider (ALL-INKL.COM, Neue Medien Münnich, Germany) processes technically necessary data such as IP address, time, requested page and browser details in server log files. This is necessary for secure operation (Art. 6(1)(f) GDPR). Log files are deleted after a short time. We have a data processing agreement with the hosting provider.

No analytics, no ads

We currently use no analytics tools and no advertising. Fonts and scripts are loaded from our own server. We only transfer data to third parties when you take out a Premium subscription (see Payment and Premium subscription).

User account

An account is optional. If you create one, we store your email address, an encrypted password (we do not know your password), optionally your display name, your language and the time of sign-up. For your exercises we store which task you solved when, how many attempts and hints you needed, whether you looked at the solution and which kinds of mistakes occurred (for example “wrong function”), but not the content of your input. From this we calculate points, your streak and the topics you should practice. Legal basis is the performance of the usage contract (Art. 6(1)(b) GDPR).

To confirm your email address and to reset your password we send you emails with a one-time link. To protect against attacks we store failed login attempts for at most one day as an irreversible hash. You can delete your account at any time in your dashboard, and we then delete all related data.

Payment and Premium subscription

When you take out a Premium subscription, we send you to Stripe’s checkout. Purchase, payment, invoicing and VAT are handled by Link (Sold through Link, LLC, a Stripe company) as merchant of record. Stripe and Link process your payment and billing data (for example name, email address, billing address, payment method, country, IP address and fraud prevention signals) as controllers in their own right. To start the checkout we pass on the email address of your account and an internal account number to Stripe, so the payment can be matched to your account. You enter your payment details directly with Link. We never receive card data.

Through a secured interface (webhook), Stripe tells us your Stripe customer and subscription numbers, which plan you have, whether the subscription is active or cancelled and until when it is paid. We store this with your account to unlock Premium, for as long as your account exists. Legal basis is Art. 6(1)(b) GDPR (performance of a contract); for fraud prevention at Stripe, Art. 6(1)(f) GDPR. Link keeps invoice records as required by law.

Transfer to the United States: Stripe also processes data in the US, in particular through Stripe, LLC and Sold through Link, LLC. The European Commission has adopted an adequacy decision for the US (EU-U.S. Data Privacy Framework, Art. 45 GDPR), under which Stripe, LLC is certified. Where data goes to recipients that are not certified, Stripe states that it relies on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). Stripe’s data protection officer: dpo@stripe.com. How Stripe and Link handle your data is explained in their privacy policies: stripe.com/privacy and link.com/privacy.

Certificate and public verification page

When you pass the final test, we create a certificate with a random ID. Anyone who has the link can check it at learnthisnext.com/zertifikat/<code>/. The verification page shows the name you enter for the certificate yourself, the date, the certificate ID and the skill areas tested. It does not show your score, which only you see in your account. Verification pages are blocked for search engines (noindex). Legal basis is Art. 6(1)(b) GDPR, because the verification page is part of the certificate you earn with the test. If you delete your account, we also delete the certificate and its verification page, and the link stops working.

Cookies

Only when you log in do we set two technically necessary cookies: ltn_sess keeps you logged in, ltn_in only tells the site that you are logged in (it contains no data about you). Both expire after 30 days or are deleted when you log out. Legal basis is § 25(2) no. 2 TDDDG. Without logging in we set no cookies.

Local storage in your browser

So that you can see which exercises you have solved and your chosen Excel language is kept, your browser stores this information in local storage. The data stays on your device and is not sent to us. You can delete it at any time in your browser settings. Legal basis is § 25(2) no. 2 TDDDG, because the storage is necessary for the function you requested.

Feedback form

When you write to us via “Found a mistake or have a wish?”, we store your message, the type of feedback, the page and exercise you wrote from, your formula input if you choose to send it and, if given, your email address. We only use this to fix mistakes, improve the site and reply to you (Art. 6(1)(f) GDPR). To prevent abuse we keep an irreversible hash of your IP address for at most one day. We delete messages once they are dealt with, at the latest after one year.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to info@learnthisnext.com. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in your country of residence or with the authority responsible for us: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.