Privacy Policy
(Prepared in accordance with EU GDPR, German Federal Data Protection Act (BDSG) and Telemedia Act (TMG))
1. Overview
This privacy policy explains what personal data Fleydo English School ("we") collects, on what legal basis we process it, how long it is stored, and what rights you have when you visit our website www.fleydo.com or use our services.
2. Data Controller
Fleydo English School – Sole Proprietorship
Lilay Ozkara (Owner & Legal Representative)
Kaiser-Friedrich-Ring 2, 65185 Wiesbaden, Germany
Phone: +49 176 329 526 69
Email: [email protected]
3. What Data Do We Process?
| Processing | Data | Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|---|---|
| Server Logs | IP address, browser type, access time | Secure & error-free website operation | Art. 6(1)(f) | 14 days |
| Cookies | Device ID, cookie ID | Functional, analytics & marketing cookies | Essential: Art. 6(1)(f) / Analytics: Art. 6(1)(a) | Varies by cookie |
| Contact Form | Name, email, phone, message | Responding to your inquiry | Art. 6(1)(b) or (f) | Inquiry + 3 years |
| Course Registration | Identity & contact data, course selection, payment data | Contract conclusion & fulfillment | Art. 6(1)(b) | Contract end + 10 years |
Longer statutory retention periods remain unaffected. Payment data is processed only by the payment provider; we do not store card numbers.
4. Cookies
We use session and persistent cookies. Essential cookies provide basic functionality; analytics/marketing cookies are only set with your explicit consent. You can change your settings at any time via the "Cookie Settings" link in the footer.
5. Hosting & Server Logs
Our website is hosted by DigitalOcean. DigitalOcean logs the above-mentioned data with each page view.
6. Your Rights
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent (Art. 7(3))
- Right to lodge a complaint with the supervisory authority: Hessian Commissioner for Data Protection, Gustav-Stresemann-Ring 1, 65189 Wiesbaden
7. Security Measures
We protect data with SSL/TLS encryption during transmission. Additional technical and organizational measures are regularly reviewed.
8. Mobile App “Fleydo English School”
Our mobile app (Android and iOS) is intended solely for enrolled students, their parents or legal guardians, and our teaching and administrative staff. There is no sign-up inside the app – accounts are created only by the school.
| Processing in the app | Data | Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|---|---|
| Profile | Name, email, phone, student number | Sign-in and course assignment | Art. 6(1)(b) | Contract end + 10 years |
| Course data | Timetable, attendance, homework and results, level & learning progress | Delivery of tuition | Art. 6(1)(b) | Contract end + 10 years |
| Messages | Message text and attachments (photos, files) | Communication with teachers, classmates and school staff | Art. 6(1)(b) or (f) | Until deleted by the school |
| Invoices | Amount, status, due date | Displaying payment status – no payment is taken inside the app | Art. 6(1)(b) | Statutory periods |
Device permissions. The camera and photo library are used only when you yourself attach a photo or file to a message or a piece of homework. Notifications tell you about new messages and upcoming lessons. Every permission can be refused or withdrawn in your device settings; the app remains usable without them.
Data stored on your device. Your sign-in token and – only if you choose “keep me signed in” – your password are kept in the protected storage of the operating system (iOS Keychain / Android Keystore). They leave your device only to sign in to our server.
No advertising, no analytics, no tracking. The app contains no advertising, analytics or tracking libraries and builds no usage profiles. App data is not sold and not shared with third parties. Transmission is encrypted (HTTPS) to our servers hosted at DigitalOcean.
Deletion. App accounts are created and deleted by the school. You may request deletion of your data at any time at [email protected]; the app provides this route under “Profile → Legal”.
9. Children and Young People
Both children and adults attend our courses. Minors are always registered by a parent or legal guardian, who thereby consents to the processing of the student's data as described above; students under 18 do not create their own accounts. Parents and guardians may request access to, correction of, or deletion of their child's data at any time at [email protected]. Without that consent we do not knowingly collect data from minors.
The app contains no advertising, no in-app purchases and no publicly visible profiles. Messaging is limited to the student's own teachers, classmates and school staff; there is no contact with unknown third parties.
10. Updates
Last updated: 4 September 2026 (sections on the mobile app and on minors added).
Contact
Questions about data protection? [email protected]
Fleydo English School – Data Protection
Lilay Ozkara, Kaiser-Friedrich-Ring 2, 65185 Wiesbaden, Germany
