Data Controller and Contact
Company Information
i-Citadel Exzellenz UG (haftungsbeschränkt)
Freiburger Weg
48151 Münster
Germany
Represented by
Dr. Onyedika Anthony Igbokwe, Managing Director
Data Protection Officer: Not required for our company size, but for data protection inquiries, please contact: info@i-citadelexz.com
General Information and Principles
We take the protection of your personal data very seriously and process it in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG).
This privacy policy explains what personal data we collect when you use our website, how we process it, and your rights regarding your data.
Definitions
In accordance with Art. 4 GDPR:
- Personal data means any information relating to an identified or identifiable natural person.
- Processing means any operation performed on personal data, such as collection, storage, use, transmission, or deletion.
- Controller means the entity that determines the purposes and means of processing personal data (i-Citadel Exzellenz UG).
- Processor means an entity that processes personal data on behalf of the controller.
- Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes.
Security and Protection of Your Personal Data
We consider it our primary duty to maintain the confidentiality of the personal data you provide and to protect it against unauthorized access. We therefore apply the utmost care and the most modern security standards to ensure maximum protection of your personal data.
We have implemented technical and organizational measures to ensure that data protection regulations are observed by us and by our external service providers.
SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller).
You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser address bar.
Hosting and Server Logs
Hosting Provider
Namecheap, Inc.
4600 E Washington St #305
Phoenix, AZ 85034, USA
Website: https://www.namecheap.com
Privacy Policy: View Policy
Data Processed
When you visit our website, our hosting provider automatically collects and stores the following information in server log files:
- IP address (anonymized after 7 days)
- Date and time of access
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Requested page/file name
- HTTP status code
- Amount of data transferred
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure, and efficient website operation).
Storage Period: Log files are automatically deleted after 7 days.
Contact Form and Email Communication
Data Collected
- Name
- Email address
- Message content
- Any other information you voluntarily provide
Purpose: To respond to your inquiry, provide information about our services, or process pre-contractual or contractual matters.
Storage Period: We store your inquiry for 12 months after the inquiry has been resolved, then delete it unless legal obligations require longer storage.
Course Registration and Bookings
Data Collected
- Full name
- Email address
- Phone number (optional)
- Billing address
- Course selection and preferences
- Payment information (processed by Stripe)
Purpose
- To process your course registration
- To provide access to course materials and learning platforms
- To communicate course schedules, updates, and certificates
- To fulfill our contractual obligations
Storage Period: Course registration data is retained for 10 years to comply with German tax and commercial retention requirements (§§ 147 AO, 257 HGB).
Payment Processing via Stripe
We use Stripe to process payments for our courses and services securely.
Service Provider
Stripe, Inc.
510 Townsend Street
San Francisco, CA 94103, USA
Website: https://stripe.com
Privacy Policy: View Policy
Important: Stripe handles all payment card information securely. We do not store complete credit card numbers on our servers. Stripe uses tokenization and encryption to protect your payment data.
Data Processed by Stripe
- Name
- Email address
- Billing address
- Payment information (credit card number, expiration date, CVV)
- Transaction amount, currency, and date
- Device and browser information (for fraud prevention)
Cookies and Tracking Technologies
What are Cookies?
Cookies are small text files stored on your device when you visit a website. They enable the website to recognize your device and remember certain information about your visit.
Your Rights Under the GDPR
You have the following rights regarding your personal data:
Right of Access
Art. 15 GDPR
Request confirmation of data processing and obtain a copy of your data.
Right to Rectification
Art. 16 GDPR
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Art. 17 GDPR
Request deletion of your personal data when no longer necessary.
Right to Restriction
Art. 18 GDPR
Request restriction of processing under certain conditions.
Data Portability
Art. 20 GDPR
Receive your data in a machine-readable format.
Right to Object
Art. 21 GDPR
Object to processing based on legitimate interests.
Withdraw Consent
Art. 7(3) GDPR
Withdraw consent at any time for consent-based processing.
Lodge a Complaint
Art. 77 GDPR
File a complaint with a supervisory authority.
Contact for Data Protection Inquiries
If you have questions about this privacy policy or how we process your personal data, please contact us at:
i-Citadel Exzellenz UG (haftungsbeschränkt)
Freiburger Weg
48151 Münster, Germany