Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Henry van de Vorming
c/o AutorenServices.de
Birkenallee 24
36037 Fulda
Germany

Email: hello@arrimundo.com

Studienkolleg.org is an information portal. We process personal data to operate and secure the website, for reach and usage analytics, and — on the basis of your consent — for analytics and advertising purposes (see Sections 8–10 for details). The following types of data may be affected:

• Usage data – pages visited, access times, referrer URLs
• Meta/communication data – IP addresses (anonymised), device and browser information
• Analytics and advertising data – pseudonymous identifiers as well as interaction and device information from the analytics and advertising services used
• Contact data – email address, if you contact us or use our live chat

There is no registration and no login on this website. Consent-based analytics and advertising services (Google Analytics, Mediavine/Grow) are only loaded after you have given consent. Data is transferred to third countries outside the EU/EEA only where explicitly stated below.

We process personal data on the basis of the following legal grounds under the GDPR:

• Art. 6(1)(a) GDPR – Consent of the data subject
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR – Legitimate interests (e.g. security and optimisation of the website)

Where cookies or comparable technologies are used, their permissibility is additionally governed by § 25 TDDDG (German Telecommunications Digital Services Data Protection Act, formerly TTDSG).

We implement technical and organisational measures in accordance with Art. 32 GDPR to ensure a level of protection appropriate to the risk. These include in particular:

• Encrypted data transmission via HTTPS/TLS
• Regular review of security measures
• Access control and minimisation of processed data

This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When you visit our website, connection data (e.g. IP address, time of access) is automatically collected by Netlify and stored in server log files.

Netlify is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection. For more information, please see the Netlify Privacy Policy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable provision of the website).

Each time you access our website, the following data is automatically collected and temporarily stored in server log files:

• IP address of the requesting device
• Date and time of access
• Requested URL and HTTP status code
• Amount of data transferred
• Referrer URL (previously visited page)
• Browser type and version, operating system

This data is used exclusively to ensure smooth operation and to improve our services, and is deleted after no more than 30 days. No identification of individual persons takes place.

Legal basis: Art. 6(1)(f) GDPR.

For our own features we use no tracking cookies and only employ technically necessary storage technologies:

• Local Storage – To save user preferences (e.g. dark mode setting, language preference)
• Service Worker Cache – For offline functionality and faster page loading

These technologies are strictly necessary for the functionality of the website and are not used for tracking. Consent is not required for these pursuant to § 25(2)(2) TDDDG.

In addition, our functional live-chat (Crisp, see Section 12) sets a technically necessary first-party cookie and a localStorage identifier to maintain the chat session; details are provided in the Crisp section below.

An exception are consent-based third-party services — Google Analytics (see Section 9) and Mediavine/Grow (see Section 10) — which set cookies and comparable technologies only after you have given consent.

Legal basis: § 25(2)(2) TDDDG in conjunction with Art. 6(1)(f) GDPR.

To analyse website usage and improve our services, we use the following privacy-friendly analytics tools:

a) Plausible Analytics

We use Plausible Analytics (Plausible Insights OÜ, Tallinn, Estonia). Plausible is a privacy-friendly analytics tool that uses no cookies and collects no personal data. No IP addresses are stored or shared with third parties. All data is processed on servers within the EU.

Plausible only collects aggregated, anonymous usage statistics (page views, referrers, device type, country). It is not possible to identify individual users.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analysing website usage). Consent is not required as no personal data is processed.

More information: plausible.io/data-policy

b) PostHog

We use PostHog (PostHog, Inc.) for product analytics. PostHog helps us understand how the website is used and improve the user experience. The following data may be collected:

• Anonymised usage data (page views, click paths, time on site)
• Device information (browser type, screen size, operating system)
• Approximate location (country level, based on anonymised IP)

We have configured PostHog so that IP addresses are not stored in full. No tracking cookies are set. Data is processed on servers within the EU (Frankfurt).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the analysis and optimisation of the website).

More information: posthog.com/privacy

With your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA). Google Analytics helps us understand how the website is used and improve our services.

For this purpose, cookies and comparable technologies are used and, among others, the following data is processed:

• truncated (anonymised) IP address as well as device and browser information
• usage data (pages visited, time on site, interactions, referrer)
• a pseudonymous identifier (Client ID) to recognise the device
• approximate location (city/country level)

Google Analytics is loaded via the Cloudflare Zaraz consent management only after you have given consent. Your consent is voluntary and can be withdrawn at any time with effect for the future (e.g. via the cookie settings).

Transfer to the USA: data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses are additionally in place.

Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with § 25(1) TDDDG.

More information: Google Privacy Policy.

This website embeds Grow, a service provided by Mediavine, Inc. (8 The Green, #20971, Dover, DE 19901, USA). Grow is loaded via the faves.grow.me script and provides audience-engagement features (e.g. saving articles as "Faves", following our content, and an optional reader account). Mediavine is also the partner through which the future advertising and audience measurement of this website may take place.

In connection with Grow, the following data may be processed:

• IP address as well as device and browser information
• Usage data (pages visited, interactions with the Grow features)
• Cookie and device identifiers (unique IDs)

For this purpose Grow sets cookies and comparable storage technologies and may assign unique identifiers. This processing only takes place after you have given consent. Your consent is voluntary and can be withdrawn at any time with effect for the future.

Transfer to the USA: Mediavine also processes data in the United States. The transfer is based on appropriate safeguards within the meaning of Art. 44 et seq. GDPR (in particular EU Standard Contractual Clauses and – where applicable – the EU-U.S. Data Privacy Framework).

Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with § 25(1) TDDDG.

More information on data processing by Mediavine: Mediavine Privacy Policy.

If you contact us by email, the data you provide (email address, possibly your name, message content) will be stored by us in order to respond to your enquiry. We delete the data collected in this context once storage is no longer necessary, or restrict processing where statutory retention obligations apply.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

To let you contact us directly, we embed the live-chat and support tool Crisp, provided by Crisp IM SAS, 2 boulevard de Launay, 44100 Nantes, France. Crisp is a French (EU) provider and operates its core service within the EU, so there is no transfer to third countries in the core service.

Crisp sets technically necessary first-party cookies and localStorage entries (e.g. the crisp-client session identifier) to maintain your chat session. When you actively use the chat, your messages and technical data (session/visitor identifier, browser information) as well as any contact details you provide yourself (name, email address) are processed.

The Crisp live-chat is strictly necessary / functional. It therefore loads without consent and is not placed behind the cookie banner — clearly distinct from the consent-based tools Google Analytics (Section 9) and Mediavine/Grow (Section 10).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a support and communication channel); if you actively initiate contact via the chat, additionally Art. 6(1)(b) GDPR.

Further information: Crisp Privacy Policy

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR) – You may request information about the data we process about you.
• Right to rectification (Art. 16 GDPR) – You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) – You may request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) – You may object at any time to the processing of your data based on Art. 6(1)(f) GDPR.
• Right to withdraw consent (Art. 7(3) GDPR) – Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, please contact: hello@arrimundo.com

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. You may contact the supervisory authority of your place of residence, your workplace, or the place of the alleged infringement.

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will apply to any subsequent visit.