Kursfink

Privacy notice

This notice explains which data is processed to run the Kursfink platform – briefly and without fine print.

Controller

Johann Philipp Strathausen

Krachtstr. 8 10245 Berlin

E-mail: strathausen@gmail.com

Registration data of parents and children

We process registration data of parents and children solely on behalf of the respective organizer (Art. 28 GDPR). The organizer is the controller; their privacy notice is linked on every registration page.

Organizers' data

Registering as an organizer creates a contract with us. To provide the account we process the following data (legal basis: Art. 6(1)(b) GDPR):

  • Sign-in e-mail address, display name and the contact and imprint details entered by the organizer – until the account is deleted.
  • Verification records for sign-in links (e-mail address, time) – at most 10 minutes.
  • Session cookie after signing in – 30 days.
  • IP address, time, requested page and browser in server logs – 7 days.
  • Log of sent e-mails (recipient, subject, delivery status) – 90 days.
  • Account events (registration, acceptance of the terms, suspension, deletion; no IP address) – 365 days.
  • Counters limiting sign-ups and e-mail volume – 2 days.

Cookies

Kursfink only sets technically necessary cookies: a session cookie for signed-in organizers and the “locale” cookie for the chosen language. There are no tracking cookies and no analytics services.

Fonts

The typeface is served from our own server. No external font service (such as Google Fonts) is embedded; opening the page therefore creates no connection to any third party and sends no data to one.

Processors

  • Hosting: Hetzner Online GmbH, Rechenzentrum Falkenstein, Deutschland. The application and its database run there; backups are encrypted and kept for at most 14 days.
  • E-mail delivery: Resend Inc., USA. Transfers are based on the EU-U.S. Data Privacy Framework or the EU standard contractual clauses. Resend receives the recipient address and the content of each message.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to lodge a complaint with a data protection authority. Organizers can delete their account with all its data at any time in the settings. Parents contact the respective organizer about their registration data or use their personal management link.

Contact

For privacy questions please contact strathausen@gmail.com.