Privacy Policy — Salam Institut

1. Controller

Salam Institut is the controller responsible for your personal data processed through this website and our online learning platform. Contact us at info@salam-institut.com.

2. Data We Collect

Account data: name, email address, role (student/teacher).
Profile data: phone number, date of birth (for student profiles), language preferences.
Usage data: bookings, attendance records, grades, course progress.
Technical data: IP address (for rate limiting only), browser type, session tokens.
Payment data: handled exclusively by Stripe — we never store card numbers.

3. Purpose and Legal Basis

Providing and managing online courses (performance of contract, Art. 6(1)(b) GDPR).
Sending account verification and password-reset emails (legitimate interest, Art. 6(1)(f) GDPR).
Processing payments via Stripe (performance of contract).
Security and fraud prevention (legitimate interest).

4. Data Sharing

We share your data only with:

Neon (PostgreSQL): cloud database provider (EU-US data processing agreement).
Stripe: payment processor (PCI-DSS certified).
AWS S3: file storage for uploaded content.
Vercel: hosting platform.

We do not sell your data to third parties.

5. Data Retention

Account data is retained for as long as your account is active or as needed to provide services. You may request deletion at any time by contacting us. Payment records are retained for 7 years as required by German tax law.

6. Your Rights (GDPR)

Under GDPR you have the right to: access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local supervisory authority.

7. Cookies

We use only essential session cookies required for authentication (NextAuth.js). No tracking or advertising cookies are used.

8. Contact

For privacy inquiries: info@salam-institut.com