Privacy policy

1. Controller

Valerie Pfeifle M.A.
aifl Sprachinstitut
Pfälzerstraße 8, 93128 Regenstauf, Deutschland
Phone: 09402 7999799 | Email: office@aifl-institute.com

2. General

We only process personal data as far as necessary to run this website and to handle your enquiries. This website does not use cookies for analytics or advertising, uses no tracking services and does not load content from third parties. Fonts and images are served from our own server.

3. Hosting and server log files

This website is hosted by Totohost (totohost.hr), Kroatien; data is processed within the European Union. When you visit the website, the server automatically processes information sent by your browser (e.g. IP address, date and time, page requested, browser type and operating system). This data is used to run the site securely and reliably. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The log files are deleted automatically according to the hosting provider’s rules.

4. Contacting us and enquiry forms

When you contact us by email, phone or through our forms, we process your details (e.g. name, contact details, content of your enquiry and uploaded documents) solely to handle your request. You receive a confirmation by email. Uploaded documents are stored securely outside the public area and deleted automatically 90 days after the job is completed. To prevent abuse, your IP address is only stored as a non-reversible hash value. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps or performance of a contract) or our legitimate interest in answering your enquiry under Art. 6(1)(f) GDPR. We delete the data once it is no longer needed and no statutory retention periods apply.

5. Orders and payment (Stripe)

When you order a course, we process your name, email address, billing address and details of the order and payment in order to perform the contract and send you your access (Art. 6 (1) (b) GDPR). We keep invoices and accounting records for the periods required by tax and commercial law (Art. 6 (1) (c) GDPR); this data is only deleted after those periods, even if you request erasure. Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details (e.g. card number) directly with Stripe; we do not receive them. Stripe may also transfer data to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. More information: https://stripe.com/privacy

6. “Translate” function (Google Translate)

The “Translate” button lets you translate this website into other languages. The page then opens through Google Translate, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Only when you click is data such as your IP address and the requested page transmitted to Google; a transfer to the USA cannot be ruled out. The legal basis is your consent by deliberately using the function (Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.

7. Admin area

Technically necessary cookies are set for the password-protected admin area (/admin) to keep administrators signed in. Visitors to the public pages receive no cookies.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please contact the controller named above. You can also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Last updated

This privacy policy will be updated when the website is extended. Last updated: October 2026.