Privacy Policy

The controller for data processing on this website is:

WIC West International Consulting, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Email: mail@medlingua.de. Phone: +49 895 419 2733.

Medlingua and Medlingua Academy are brands operated by WIC West International Consulting. If you have any question about your data, write to mail@medlingua.de — that address reaches the people who can answer it.

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use our website.

Google Analytics collects data such as which pages are visited, how long visitors stay, which browser and operating system they use, and which page referred them to us. This data is pseudonymised: IP addresses are anonymised before processing, and we have disabled all advertising features.

Google Analytics sets cookies (_ga, _ga_*) that remain in your browser for up to 14 months. These cookies are only set if you accept the Statistics category in the cookie banner. If you do not accept, or if you later revoke your consent via Cookie Settings in the footer, Google Analytics does not run and no tracking cookies are stored.

The legal basis for processing with your consent is Article 6(1)(a) GDPR and Section 25(1) TDDDG (the German Telecommunications-Telemedia Data Protection Act). You can withdraw your consent at any time with effect for the future by revoking it in the Cookie Settings.

Google processes the data on our behalf under the Google Ads Data Processing Terms, which include the EU Standard Contractual Clauses. Google LLC is also certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.

Web fonts

Our typefaces (Fraunces and Hanken Grotesk) are stored on our own servers and delivered from medlingua.de. Your browser makes no connection to Google Fonts or to any other font service, and no IP address is transmitted to a third party for this purpose.

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which acts as our processor.

Like every web server, the hosting infrastructure automatically records technical data that your browser transmits:

• IP address
• date and time of the request
• the page or file requested and the HTTP status
• browser type, version and operating system
• the referring page, where your browser sends one

This data is needed to deliver the site, to keep it secure and to diagnose faults. The legal basis is our legitimate interest in a reliable and secure website, Article 6(1)(f) GDPR. We do not merge these logs with other data and do not use them to identify individual visitors. Logs are kept for a short period and then deleted automatically.

The website offers several forms. Each one tells you what it is for, and none of them asks for more than that purpose requires:

• Free trial lesson and course booking: first and last name, date of birth, email, phone, country, address, the course and package chosen, your current and target level, start date, number of weeks, preferred payment method and any note you add.
• Level assessment: name, email, phone, the assessment type, your level, a preferred time and your message.
• Consulting enquiry: name, email, phone, your situation, German level, time zone, preferred days and your message.
• Service enquiry: name, email, phone, the service and your message.
• AI programme enquiry: name, email, phone, the programme, your level and your message.
• Job application: see the separate section below.

We use this data only to answer your enquiry and, where you book, to arrange the booking. The legal basis is Article 6(1)(b) GDPR for steps taken at your request before or under a contract, and otherwise your consent under Article 6(1)(a) GDPR, which you can withdraw at any time with effect for the future.

If you arrive through an advertisement or a newsletter link, the campaign parameters in that link (utm_source, utm_medium, utm_campaign) are submitted with the form so that we can see which channel the enquiry came from. They contain no information about you personally.

Enquiries are stored until they have been dealt with and no longer serve their purpose, typically no longer than two years, unless commercial or tax law requires us to keep them longer.

When you apply through our career page we collect your name, email, phone, the role you are applying for, where you are based, your right to work, your German level, your message, an optional link, and the two files you upload: your CV as a PDF and a photo of yourself.

We process this data to decide on your application, under Article 6(1)(b) GDPR and Section 26 BDSG. Your documents are sent to our office by email and are not published or passed on to anyone outside the hiring process.

If we do not offer you a position, we delete your application and both files no later than six months after we have told you. If you would like us to keep your application on file for future openings, tell us and we will — and you can ask us to delete it at any time.

If you have an account in our portal, we process the data needed to run your lessons: your name and contact details, your level and course, your booked and completed lessons, cancellations and reschedules, attendance, homework and feedback, progress reports, your lesson package and the payments recorded against it, messages you exchange with your teacher or the office, and notifications.

The legal basis is the performance of our contract with you, Article 6(1)(b) GDPR. This data is stored for the duration of the relationship and afterwards only as long as statutory retention periods require.

Login and session cookies

Logging in sets cookies that keep you signed in and protect the session against misuse. These are strictly necessary for a service you requested, so they do not require consent (Section 25(2) TTDSG / TDDDG). They are not used for analysis or advertising.

Push notifications

If you switch on notifications in the portal, your browser creates a subscription that we store so we can send you reminders about lessons and messages. You can withdraw it at any time in the portal or in your browser settings.

Database

Portal data is stored in a PostgreSQL database operated by Supabase Inc., 970 Toa Payoh North, Singapore 318992, as our processor. The database is hosted in the eu-central-1 region in Frankfurt, Germany.

Some parts of the portal — the writing feedback, the exam simulations and the practice chat — use a large language model provided by Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA, as our processor.

The text you write in these tools is transmitted to Anthropic to generate a response. Anthropic does not use data sent through its commercial interface to train its models. Please do not enter data about patients, health information or other particularly sensitive details in these tools; practice texts do not need real cases.

The legal basis is the performance of our contract with you, Article 6(1)(b) GDPR.

Confirmations, notifications and the emails generated by the forms above are sent through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), acting as our processor. The content of these emails, including your name, contact details and any attachments you sent, passes through that service in order to be delivered.

Enquiries and bookings are transferred into our own CRM system, Clouderio One, so that no enquiry is lost and we can follow it up. The system is operated for us on a Supabase database in the eu-central-1 region in Frankfurt, Germany. It holds the data you submitted in the form together with the status of your enquiry.

Our databases are located in Frankfurt, and our web hosting is provided by IONOS in Germany. However, our email provider (Resend), our AI provider (Anthropic) and our analytics provider (Google) are companies in the United States, and personal data may be processed there.

These transfers are based on the standard contractual clauses adopted by the European Commission under Article 46(2)(c) GDPR, combined with the providers' technical and organisational measures. We have concluded data processing agreements with each of them. You can request a copy of the safeguards from us.

Please note that United States authorities may in principle have access rights that are not equivalent to EU standards, and that enforcing your rights against a body in a third country can be more difficult.

We do not accept card payments on this website and no payment data is entered here. You choose a payment method in the booking form — bank transfer, card or cash — and we invoice you separately. Payment and invoice data is processed for the performance of the contract and kept for the retention periods required by commercial and tax law.

The website links to WhatsApp, Instagram, LinkedIn and Zoom. These are ordinary links: nothing is loaded from those services while you are on our pages, and no data is transmitted to them until you click. Once you do, the privacy policy of the respective provider applies.

Under the GDPR you have the right to:

• access the data we hold about you (Article 15)
• have inaccurate data corrected (Article 16)
• have your data deleted (Article 17)
• have processing restricted (Article 18)
• receive your data in a portable format (Article 20)
• object to processing based on legitimate interests (Article 21)
• withdraw a consent you gave, with effect for the future (Article 7(3))

To exercise any of these, write to mail@medlingua.de. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

This site is served exclusively over an encrypted HTTPS connection, so what you send through our forms cannot be read in transit. Access to the portal and to enquiry data is restricted to the people who need it.

We update this policy whenever the way we process data changes — for example when a form, a service provider or a retention period changes. The date at the top shows the current version.