Who is responsible
Contenza K/S, Holmgade 8, 6430 Nordborg, Denmark (CVR 43349023) is the data controller for the personal data described here. You can contact us through the help form in your account after you log in, or by post to the address above.
What we collect
- Your email address, to log you in and send login links, receipts and answers to your messages.
- Your settings, such as the language of explanations.
- What you do in the course: progress, answers, texts you write, your word lists and flashcards, and results of tests and exams.
- Recordings, when you use the pronunciation and speaking exercises. They go to our own speech service, are analysed and then deleted; we keep only the result (a score, or the text that was recognised).
- Purchases: what you bought, when, the amount and your billing country (for VAT). Card details go to Stripe and never reach us.
- Messages you send us through the help form.
- If the AI conversation partner is switched on for your account: the messages and texts you exchange with it.
Why, and on what legal basis
To provide the course and the levels you bought (contract), to keep accounting records (legal obligation), and to keep the service secure and prevent abuse, for example by limiting how many login links can be requested (legitimate interests). We do not sell your data and we do not use advertising trackers.
You need to give your email address to have an account; everything else is optional. We do not make decisions about you based solely on automated processing. Exercises are marked automatically, but that only affects your own progress in the course.
Who processes data for us
- Hetzner Online (Germany): servers in the EU for the website, the course and the database.
- Stripe: payments. For some payment data Stripe is itself responsible under its own privacy policy.
- Resend (EU region), with Mailgun (EU) as a backup: sending emails.
- Anthropic (USA): only if the AI conversation partner is switched on for your account. Your messages are sent to its AI model to generate replies. The transfer is covered by the EU Standard Contractual Clauses.
Our speech service and our visitor statistics run on servers we control.
Cookies and statistics
We use one essential cookie that keeps you logged in. Your browser also remembers your language choice and, while you log in, the page you were going to. To count visits we use Plausible Analytics on our own server in the EU: it uses no cookies, does not follow you across websites and stores no personal data, only anonymous totals. That is why there is no cookie banner.
How long we keep data
Account and course data for as long as your account exists; you can ask us to delete it at any time. Purchase records for 5 years from the end of the financial year, as the Danish Bookkeeping Act requires. Login links expire after 30 minutes, and a login lasts 60 days.
Your rights
You can ask for a copy of your data, and for it to be corrected, deleted or restricted; you can object to processing based on legitimate interests and ask for your data in a portable format. Write to us through the help form in your account after you log in, or by post to the address above. We answer within one month. You can export your word lists yourself as a CSV file. You can also complain to a data protection authority: in Denmark, Datatilsynet (datatilsynet.dk), or the authority in the country where you live.