Privacy Policy

    Privacy Policy

    1. Data Protection at a Glance

    General Information

    The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

    Data Collection on This Website

    Who is responsible for data collection on this website?
    Data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice Concerning the Responsible Entity".

    How do we collect your data?
    Your data is collected on the one hand when you provide it to us (e.g., in a form). Other data is collected automatically or upon your consent when visiting the website by our IT systems (e.g., browser, operating system, time of page access).

    What do we use your data for?
    To ensure the error-free provision of the website and to analyze user behavior.

    What rights do you have?
    Access, rectification, erasure, withdrawal of granted consents, restriction of processing, as well as the right to lodge a complaint with the supervisory authority.

    Analysis Tools and Third-Party Tools
    When visiting this website, your browsing behavior may be statistically evaluated (analysis programs). You can find details below.

    2. Hosting

    We host the content of our website with the following provider:

    webgo
    The provider is webgo GmbH, Heidenkampsweg 81, 20097 Hamburg (hereinafter "webgo"). When visiting our website, webgo collects various log files including your IP address.

    Details: https://www.webgo.de/datenschutz/

    The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in reliable presentation). In case of consent, additionally Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG (e.g., cookies/device fingerprinting). Consent can be revoked at any time.

    Data Processing Agreement

    We have concluded a data processing agreement (DPA) with webgo. This ensures that personal data is processed only according to our instructions and in compliance with the DSGVO.

    3. General Information and Mandatory Information

    Data Protection

    We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy. Seamless protection of data on the internet is not possible.

    Notice Concerning the Responsible Entity

    Provider of this website: Acadeo GmbH
    Managing Directors: Dr. Jonathan Schulte, Julian Schulte
    Registered Office: Rathausstraße 43, 57537 Wissen

    Email: info@studyslides.ai

    The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

    Storage Duration

    Unless a more specific storage period has been specified, data remains with us until the purpose ceases to apply or you revoke your consent. Statutory retention periods remain unaffected.

    Legal Bases

    Consent: Art. 6 Abs. 1 lit. a DSGVO (if applicable Art. 9 Abs. 2 lit. a), § 25 Abs. 1 TTDSG; Contract performance: Art. 6 Abs. 1 lit. b; Legal obligation: Art. 6 Abs. 1 lit. c; Legitimate interest: Art. 6 Abs. 1 lit. f.

    Data Transfer to Third Countries / US Providers without DPF
    When using corresponding tools, transfers to third countries may occur. A transfer to the USA is permissible with DPF certification or appropriate safeguards.

    Recipients of Personal Data

    Transfer takes place when required for contract performance, required by law, based on legitimate interest (Art. 6 Abs. 1 lit. f), or another legal basis. In the case of order processing, a DPA is in place.

    Revocation of Your Consent

    You can revoke consent that has already been given at any time. The legality of the data processing carried out until the revocation remains unaffected.

    Right to Object (Art. 21 DSGVO)

    You have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 Abs. 1 lit. e or f; as well as to direct marketing.

    Right to Lodge a Complaint

    Data subjects have the right to lodge a complaint with the competent supervisory authority of their place of habitual residence, place of work, or place of the alleged infringement.

    Right to Data Portability

    You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract in a common, machine-readable format or to have it transferred to a third party.

    Access, Rectification, Erasure

    You have the right at any time to obtain information about your stored personal data, as well as the right to rectification or erasure, if applicable.

    Right to Restriction of Processing

    This right exists, among other cases, if the accuracy of the data is contested, the processing is unlawful, the data is required for legal claims, or an objection is being examined.

    SSL or TLS Encryption

    This site uses SSL/TLS encryption. Recognizable by "https://" and the lock icon in the browser. Transmitted data can thus not be read by third parties.

    4. Data Collection on This Website

    Cookies

    Our internet pages use so-called "cookies". Cookies are small data packages and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or an automatic deletion is carried out by your web browser.

    Cookies can originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable, for example, the integration of certain services (such as payment services). Cookies have various functions: necessary cookies are technically required (e.g., shopping cart, video display); other cookies serve to evaluate user behavior or for advertising purposes.

    Necessary cookies are stored on the basis of Art. 6 Abs. 1 lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent was requested, processing takes place exclusively on the basis of this consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG); the consent can be revoked at any time.

    You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of this website may be limited. Which cookies and services are used can be found in this Privacy Policy.

    Consent with Borlabs Cookie

    Our website uses the consent technology of Borlabs Cookie to obtain and document consent for the storage of certain cookies or the use of certain technologies. The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg. When entering our website, a Borlabs cookie is stored containing your consents or revocations. This data is not transmitted to Borlabs. Details: Borlabs – Stored Data. The legal basis is Art. 6 Abs. 1 lit. c DSGVO (legal obligation to obtain consent).

    Contact Form

    If you send us inquiries via the contact form, your details including contact information will be stored by us for processing the inquiry and for follow-up questions. This data is not passed on without your consent. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (contract-related), otherwise our legitimate interest in effective processing (Art. 6 Abs. 1 lit. f) or your consent (Art. 6 Abs. 1 lit. a DSGVO).

    Inquiry by Email, Telephone, or Fax

    When contacting us by email/telephone/fax, we process your information (e.g., name, inquiry) to process your request. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (contract-related) or Art. 6 Abs. 1 lit. f DSGVO (legitimate interest) or your consent (Art. 6 Abs. 1 lit. a).

    Communication via WhatsApp

    For communication, we use WhatsApp, among others (WhatsApp Ireland Limited, Dublin, Ireland). Communication is end-to-end encrypted; metadata (sender, recipient, timestamps) may be processed. According to the provider, personal data is shared with the US parent company Meta. Details: WhatsApp Privacy. DPF Certification: DPF Participation. Data transfers to the USA may be based on standard contractual clauses. We use "WhatsApp Business" and have entered into a DPA.

    Google Forms

    We use Google Forms (Google Ireland Limited, Dublin, Ireland) to provide online forms. Entries are processed on Google servers. Google Forms sets an NID cookie, among other things. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (user-friendly collection), in case of consent Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG. Further information: Google Privacy Policy. DPF Certification: DPF Participation.

    Data Processing Agreement

    A data processing agreement (DPA) exists with Google.

    Registration on This Website

    We use the data entered during registration to provide functions and, if applicable, to initiate further contracts (Art. 6 Abs. 1 lit. b DSGVO). Data is stored for the duration of the registration; statutory retention periods remain unaffected.

    Registration with Google

    Alternatively, you can register with Google (Google Ireland Limited). Your Google name and password are entered with the provider; Google confirms your identity. Which profile data is used for completion can be controlled under Google Security and Permissions. Legal basis: Art. 6 Abs. 1 lit. f DSGVO (simple registration process). DPF Certification: DPF Participation.

    Registration with Facebook Connect

    Alternatively, you can register via Facebook Connect (Meta Platforms Ireland Limited). After clicking "Login with Facebook", you will be redirected to Facebook; usage data entered there connects your profile with our website. This grants us access to certain data stored on Facebook (e.g., name, profile picture, email address, Facebook ID, friends lists, likes, birthday, gender, country, language) to set up and personalize your account. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO), revocable with effect for the future.

    Joint controllership (Art. 26 DSGVO) is limited to collection/forwarding to Facebook. Agreement: Controller Addendum. Data transfers to the USA can be based on standard contractual clauses. Further information: Facebook Privacy. DPF Certification: DPF Participation.

    Comment Function

    When using the comment function, we store the comment, timestamp, email address, and, if applicable, the username.

    Storage Duration of Comments

    Comments remain until the commented content is deleted or deletion is required for legal reasons.

    Legal Basis

    Storage takes place on the basis of your consent (Art. 6 Abs. 1 lit. a DSGVO); revocation possible at any time.

    ProvenExpert

    We integrate review seals from ProvenExpert (Expert Systems AG, Berlin, www.provenexpert.com) to display customer reviews. When visiting our pages, a connection to ProvenExpert is established. Legal basis: Art. 6 Abs. 1 lit. f DSGVO; in case of consent, additionally Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG.

    5. Analysis Tools and Advertising

    Google Tag Manager

    We use Google Tag Manager (Google Ireland Limited). The Tag Manager itself does not create profiles and does not store cookies; it merely manages integrated tools. The IP address may be transmitted to Google in the USA. Legal basis: Art. 6 Abs. 1 lit. f DSGVO; in case of consent Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG. DPF Certification: DPF Participation.

    Google Analytics

    We use Google Analytics (Google Ireland Limited) to analyze user behavior. Among other things, page views, session duration, operating systems, and origin are recorded; mouse/scroll interactions and ML-based modeling may be used if applicable. Legal basis: your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG); revocable. Transfers to the USA may be based on standard contractual clauses. DPF Certification: DPF Participation.

    IP Anonymization

    We have activated IP anonymization; the IP address is shortened within the EU/EEA. Only in exceptional cases will shortening occur in the USA. Data is not merged with other Google data.

    Browser Plugin

    You can prevent processing by Google by installing the browser plugin: gaoptout. Further information: Google Help.

    Google Signals

    We use Google Signals (if activated), whereby, for example, location, search/YouTube history, and demographic data can be used for personalized advertising and anonymized statistics.

    Data Processing Agreement

    A DPA exists with Google; the strict requirements of German supervisory authorities are complied with.

    E-Commerce Measurement

    If applicable, we use e-commerce measurement to analyze purchases (e.g., orders, order values, shipping costs). Data can be summarized under a transaction ID.

    Google Ads

    We use Google Ads (Google Ireland Limited) for keyword- and target group-based advertising. Legal basis: your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Standard contractual clauses and information: MCCS.

    Google AdSense

    We use Google AdSense to display advertisements. AdSense uses cookies/web beacons, among other things. Data may be transferred to servers in the USA. Legal basis: your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Standard contractual clauses may apply.

    Google Ads Remarketing

    Through remarketing, users who have interacted with our offering can be included in target audiences and addressed again later within the Google network. In the case of linked devices, personalized messages can be displayed across devices. Opt-out option for Google users: Ad Settings.

    Audience Formation with Customer Match

    If applicable, we use Customer Match from Google Ads Remarketing. In this process, certain data (e.g., email addresses) from customer lists is transferred to Google in order to display advertising to matching target groups in the Google network.

    Meta Pixel (formerly Facebook Pixel)

    We use the visitor action pixel from Meta (Meta Platforms Ireland Limited, Dublin). This allows us to track whether users interact on our website after clicking on our Meta ads (conversion measurement). For us, the data is anonymous; however, Meta can assign this data to user profiles and use it for its own advertising purposes in accordance with the Data Policy . Legal basis: your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Revocation possible at any time. DPF Certification: DPF Participation. Information on standard contractual clauses: SCC.

    Advanced Matching: We may transmit hashed data (e.g., email, name, postal code) to Meta in order to refine target groups and better assign conversions. Joint controllership pursuant to Art. 26 DSGVO is limited to collection/forwarding; agreement: Controller Addendum. Opt-out: Ad Settings and youronlinechoices.com.

    Facebook Conversion API

    In addition, we use the Conversion API to report interactions (including timestamp, URL, IP, user agent, purchased products/cart where applicable) to Meta on the server side. Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Art. 26 DSGVO applies as above; SCC/DPF see Meta notes. Details on parameters: Meta Documentation.

    Facebook Custom Audiences

    Upon consent, we may transfer data (e.g., emails) to Meta to form target audiences (including Lookalike Audiences). Legal basis: Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG. Terms of Service/DPA/SCC: Custom Audience Terms.

    TikTok Pixel

    Provider: TikTok Technology Limited, Dublin. Purpose: interest-based advertising and conversion measurement (including IP, page views, session duration, systems, ad interactions). Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Transfers to third countries via standard contractual clauses. Information: TikTok Privacy.

    Pinterest Tag

    Provider: Pinterest Europe Ltd., Dublin. Purpose: recording certain actions to serve interest-based advertising within the Pinterest network (including Tag ID, location, referrer, order values). Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 TTDSG) or legitimate interest (Art. 6 Abs. 1 lit. f DSGVO). Third-country transfers via SCC. Information: Pinterest Privacy.

    6. Newsletter

    Mailchimp (Performance Measurement Disabled)

    Provider: Rocket Science Group LLC, Atlanta, USA. Newsletter data is stored on servers in the USA; performance measurement is disabled. Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO); revocation via unsubscribe link possible at any time. SCC/DPF: Transfer Statement.

    ActiveCampaign

    Provider: ActiveCampaign, Inc., Chicago, USA. Purpose: distribution/analysis (opens, clicks, conversions, segmentations). If you do not wish to be analyzed, please unsubscribe. Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO). Information: Privacy Policy.

    Storage Duration / Blacklist

    Newsletter data is stored until you unsubscribe; thereafter it is deleted or added to a blacklist to avoid future mailings (legitimate interest, Art. 6 Abs. 1 lit. f DSGVO).

    Data Processing Agreement

    DPAs exist with the mentioned providers.

    7. Plugins and Tools

    YouTube (Enhanced Data Protection)

    Provider: Google Ireland Limited. In enhanced data protection mode, no cookies are set; local storage elements may be used. Legal basis: legitimate interest (Art. 6 Abs. 1 lit. f DSGVO) or consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Information: YouTube Help.

    Google Fonts (local)

    Fonts are integrated locally; no connection to Google servers takes place.

    Font Awesome (local)

    Font/icon set integrated locally; no connection to Fonticons servers.

    SolidWP

    Security plugin to defend against attacks; if applicable, transmission of IPs of recurring attackers to the US database (Network Brute Force Protection). Legal basis: Art. 6 Abs. 1 lit. f DSGVO.

    ChatGPT

    Provider: OpenAI. When use is activated, inputs including metadata are transmitted to OpenAI and processed. Legal basis: legitimate interest (Art. 6 Abs. 1 lit. f) or consent (Art. 6 Abs. 1 lit. a). Information: OpenAI Privacy.

    ManageWP

    Tool for administration/backups/monitoring; access to website content including databases is possible. Legal basis: legitimate interest (Art. 6 Abs. 1 lit. f DSGVO).

    Data Processing Agreement

    DPAs exist with the mentioned service providers.

    8. eCommerce and Payment Providers

    Processing of Customer and Contract Data

    We process customer/contract data for the establishment and execution of contractual relationships (Art. 6 Abs. 1 lit. b DSGVO). Erasure occurs after the purpose ceases to apply and statutory retention periods expire.

    Payment Services

    For payments, payment service providers process your payment data. Legal bases: Art. 6 Abs. 1 lit. b (Contract) and Art. 6 Abs. 1 lit. f (secure payment process); in case of consents Art. 6 Abs. 1 lit. a DSGVO. The terms of the respective providers apply.

    PayPal – Information: Privacy Policy; SCC: SCC/Notes.

    Apple Pay Privacy Policy.

    Google Pay Privacy Policy.

    Stripe Privacy Policy, GDPR.

    Klarna / Sofortüberweisung Privacy Policy, Cookies.

    Paydirekt / giropay Information.

    Amazon Pay Privacy Policy.

    Mollie Privacy Policy.

    PayOne Privacy Policy.

    American Express Privacy Policy, BCR.

    Mastercard Privacy Policy, BCR.

    VISA Privacy Policy, SCC Information.