Privacy Policy
1. Privacy at a Glance
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on our website.
2. Responsible Party
PLUCO GROUP SP. Z O.O.
Ksawerów 3, 02-656 Warsaw, Poland
info@deutschpilot.de
3. Your Rights
Where applicable, you have the right to access, correct, delete, restrict, port, and object to the processing of your personal data. You may withdraw consent at any time for the future. To exercise a right, email info@deutschpilot.de. You may also complain to a competent supervisory authority.
4. Account, learning and subscription
We process account and sign-in data, learning progress, selected content and subscription status to perform the contract (GDPR Art. 6(1)(b)). Firebase handles identity; Supabase stores learning data and server-confirmed entitlements. Client-side claims alone never unlock paid access.
5. Payments and invoices
Stripe processes payments, recurring billing, invoices and the billing portal. We receive customer, subscription, payment-status, invoice and tax data, but not full card details. Legal bases are contract performance and accounting/tax obligations (GDPR Art. 6(1)(b) and (c)).
6. Hosting, email and transfers
Vercel hosts the web application; the configured email provider sends contractual, payment and security messages. Where providers process data outside the EEA, required GDPR transfer mechanisms are used. Technical logs are processed for security and troubleshooting based on legitimate interests (GDPR Art. 6(1)(f)).
7. Retention and contact
Account data is generally retained until account deletion or the purpose ends. Contract, invoice and payment evidence is retained for statutory accounting and tax periods; security and delivery evidence only as long as necessary. Data-subject requests: info@deutschpilot.de. You may complain to the competent supervisory authority, including Poland's UODO.
8. Cookies, local storage and analytics
We use necessary session and security storage for sign-in, language, learning progress, and entitlements. Optional analytics or marketing technologies may be enabled only after the corresponding consent. If the current release does not present a consent control for an optional category, this notice does not claim that category is active. Browser data can be cleared in browser settings, and consent can be withdrawn for the future at any time.
9. Security and data management
We use reasonable technical and organisational measures, including encrypted transport, provider-managed account security, server-side verification of paid entitlements, and role-based access. No system is absolutely secure. Use a strong, unique password and do not submit special-category personal data unless a feature expressly calls for it.