Controller
The controller for personal data processed on this site is the service provider named in the Imprint.
Send requests about your data protection rights to contact@road2germany.de.
What we process
Account data: your email address, first and last name, an optional phone number, and an irreversible hash of your password (bcrypt).
Guest sessions: using the site without an account creates a technical guest record. Registering upgrades that record in place, so the answers you already gave are not lost.
Your eligibility test answers and the score calculated from them.
Your Life in Germany exam sessions and the answers you gave.
If you submit an advertising enquiry: your name, company, email, phone and message.
Legal basis and purpose
Creating an account, running the test and delivering a purchased service are performance of a contract (Art. 6(1)(b) GDPR).
Keeping the service secure, preventing abuse and improving it rest on our legitimate interest (Art. 6(1)(f) GDPR).
Where a statutory retention duty applies, processing rests on a legal obligation (Art. 6(1)(c) GDPR).
Country detection
Subscription prices depend on your country. To determine it, your IP address is matched against a database held locally on our own server.
That lookup happens entirely on our infrastructure: your IP address is not sent to any third party for this purpose, and the result is not stored.
Email delivery
Password reset and welcome emails are sent through Resend (Resend, Inc., USA). Your email address and the message content are transferred for that purpose.
The transfer is based on the European Commission's standard contractual clauses.
Cookies and browser storage
The site keeps a session key and your language preference in your browser's local storage. Both are technically necessary for the service to work.
We set no advertising or tracking cookies and run no third-party analytics.
Payments
Payment is taken by bank transfer. We do not collect, store or process card details.
Information about the transfer is handled between your bank and ours under banking law.
Retention
Account data is kept for as long as your account exists. Password reset links expire after 60 minutes.
Records subject to a statutory retention period are kept for that period and then deleted.
Your rights
You have the right to access your data, to have it corrected, erased or its processing restricted, to object to processing, and to receive your data in a portable form.
Where processing rests on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority.
