Privacy Policy

Controller

The controller responsible for processing personal data on this site is the operator named in the Impressum.

What data we process

• Account data: your email address, an optional name, and a securely hashed password. • Usage data: the practice tests you take, your answers, and your scores. • Payment data: processed by our payment provider (Stripe). We store a record of purchases and credit transactions, not your card details. • Technical data: a strictly necessary session cookie to keep you signed in, and server logs.

Purposes and legal bases

We process your data to provide the service and your account (Art. 6(1)(b) GDPR), to process payments and meet legal record-keeping duties (Art. 6(1)(c) GDPR), and to keep the service secure (Art. 6(1)(f) GDPR).

Processors we use

• Hosting and database provider • Stripe (payments) • Our AI provider (automated scoring of free-text answers) • Object-storage provider (audio files) Each processes data on our behalf under a data-processing agreement.

Retention

Account data is kept while your account exists. Invoice and payment records are retained for the statutory period (up to 10 years under German law) even after account deletion.

Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any of these, contact us at matijabojovic@zertio.de; we respond within one month. You also have the right to lodge a complaint with a data-protection supervisory authority.

Cookies

We currently set only a strictly necessary session cookie required to keep you signed in. We do not use tracking or analytics cookies. See the Cookie Policy for details.