Built for everyday teaching.

Privacy policy guidelines

The protection of your personal data is of utmost importance to us.

We process your data exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

This privacy policy informs you about which personal data we process when you use our website, our chat function, and other services, for what purposes this is done, and what rights you have.

1. Hosting and processed data

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you access our website, the following data is automatically processed and stored in server log files:

IP address of the device

Date and time of access

Page/file accessed

Browser type and version

Referrer URL

Amount of data transferred

User’s operating system

Purpose of processing:
Operation and security of the website, misuse detection, error analysis
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage period: 7–14 days, at the latest until the aforementioned purposes are achieved
This data is not combined with other data sources.

2. Cookies

We use cookies to make our website user-friendly and to enable certain functions.

Some cookies are technically necessary and are set without your consent.

We only set cookies for analysis and marketing purposes if you have given us your prior consent (opt-in).

At the point given, we use the CookieYes cookie consent tool to manage your consent. We reserve ourselves the right to change to another cookie consent tool if necessary.

This tool stores your selection (consent or refusal, time, pseudonymous ID) locally on your device.

You can withdraw or change your consent at any time via the cookie banner.

Legal basis:

Technically necessary cookies: Section 165 Paragraph 3 of the Austrian Telecommunications Act 2021 (TKG 2021)

Analytics and marketing cookies: Article 6 Paragraph 1 Letter a of the GDPR (consent)

3. Integrated content and services

Our website integrates external content and services. When you use these, data such as your IP address and device information is transferred to the respective provider.

This data processing only occurs after you have given your explicit consent via the cookie banner (prior blocking).

Third-party providers used:

OpenAI, Inc., USA – Chat function

Google Ireland Limited – YouTube, Google Analytics, Google Tag Manager

Meta Platforms Ireland Ltd. – Facebook Pixel, Instagram

TikTok Technology Limited – TikTok videos

LinkedIn Ireland Unlimited Company – LinkedIn content

Google Fonts (locally embedded) – no data transfer

Review widgets (e.g., Google Reviews)

Transfer to third countries:

Data transfers to the USA are carried out exclusively:

based on the EU-US Data Privacy Framework (Art. 45 GDPR) or,

if not applicable, based on Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

4. Google Analytics

We use Google Analytics to analyze user behavior on our website and optimize our services.

Responsible provider:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data processed:

IP address (truncated/anonymized)

Usage data such as pages visited, click paths, and time spent on the site

Device type, browser information

Location data (approximate, based on IP address)

Legal basis:

Art. 6 para. 1 lit. a GDPR (consent)

Storage period:

Data is stored for a maximum of 14 months and then automatically deleted.

We have concluded a data processing agreement with Google.

5. Pixel use

We use the Facebook Pixel to optimize our marketing efforts and deliver personalized advertising.

Responsible provider:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Data processed:

IP address

Usage data (pages visited, clicks)

Device information

Facebook ID (if logged in)

Legal basis:

Art. 6 para. 1 lit. a GDPR (consent)

Meta may combine this data with other data it holds and use it for its own purposes.

Further information can be found in the Meta Privacy Policy.

6. Contact information processing

When you contact us via form or email, we process your information (e.g., name, email address, message) to handle your request.

Legal basis:

Art. 6 para. 1 lit. b GDPR (pre-contractual communication)

Art. 6 para. 1 lit. f GDPR (legitimate interest in customer communication)

Storage period:

Until your request has been fully answered and resolved, and thereafter only as long as statutory retention obligations apply.

7. Chat function

Our chat function is provided via the OpenAI API.

Data processed:

Content of your chat messages during the session

Possibly metadata such as IP address, timestamp, and technical error logs

We do not permanently store chat content.

OpenAI receives the content solely for the purpose of providing the chat function.

Where possible, the service is configured so that chat content is not used for training purposes.

We reserve ourselves the right to change to an other AI API services provider to maintain our services or develop our products if necessary.

Transfer to third countries:

Since OpenAI is based in the USA, the transfer is based on the EU-US Data Privacy Framework or Standard Contractual Clauses.

Further information can be found in the OpenAI Policies.

Legal basis:

For registered users: Art. 6 para. 1 lit. b GDPR (performance of a contract)

For other users: Art. 6 para. 1 lit. f GDPR (legitimate interest)

8. Payment Services

We use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, for payments.

Data processed:

Name, email address, billing address

Payment information (tokenized; we do not store complete card details)

Transaction and fraud prevention data

Legal basis:

Art. 6 para. 1 lit. b GDPR (contract)

Art. 6 para. 1 lit. f GDPR (legitimate interest in secure payment processing)

Further information can be found in the Stripe Privacy Policy.

9. Data storage and deletion

We only store personal data for as long as necessary for the respective purposes or as required by statutory retention periods.

Ephemeral storing on paulinagreen.com:
Chat histories, user uploads, and downloads are deleted after a session ends. (ephemeral) In addition to that, a deletion of cache is also performed once daily. We do not save, train or sell any content of our users.

After these periods expire, the data is permanently deleted.


10. Minors

Our services are not intended for individuals under the age of 18.
If we become aware that we hold personal data of minors, we will delete it immediately.


11. GDPR Rights of users

Under the GDPR, you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to certain processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7 para. 3 GDPR)
To exercise your rights, please contact hello@paulinagreen.com.


12. Contact

Name: Melanie Liebisch
Email: hello@paulinagreen.com
Contact Form

As I operate a sole proprietorship and am not required to appoint a data protection officer, there is no external data protection officer. For all data protection matters, please contact me directly at the address provided above.

 

13. Right to Lodge a Complaint

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Website: www.dsb.gv.at

We reserve the right to amend this privacy policy if necessary due to technical, legal, or organizational changes.

We will actively inform you of any significant changes affecting your consents via email or a notice on the website.

Last updated: Salzburg, January 4, 2026

0

Subtotal