Legal
Privacy policy
This policy describes which personal data are processed when you visit this website, for what purpose this happens and what rights you have.
Controller
The controller for data processing on this website is:
Andreas Molau
Madamenweg 126
38118 Braunschweig
Germany
Phone: +49 1573 2655152
E-mail: andreas.molau@gmail.com
I am not required to appoint a data protection officer, because the legal conditions for this are not met.
Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data exclusively on my behalf; a data processing agreement pursuant to Art. 28 GDPR is in place. The servers are located in Germany.
Every time a page is called up, data transmitted by your browser are automatically stored in what are known as server log files:
- page called up and volume of data transferred
- date and time of access
- browser and operating system used
- previously visited page (referrer)
- IP address of the requesting device
The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure, stable operation of the website and in defending against attacks. These data are not merged with other data sources and are deleted as soon as they are no longer required for these purposes.
Encrypted transmission
This website is delivered exclusively over an encrypted connection (SSL/TLS). You can recognise this by “https://” in the address bar and by the padlock symbol in your browser. This means that your entries – in the contact form, for example – cannot be read on their way to the server.
Cookies
This website uses a consent dialogue (consent banner) from the service Cookiebot. It is shown to you on your first visit and asks whether you wish to allow cookies and services in the categories preferences, statistics and marketing. Without your consent, no cookies are set and no external services are loaded in these categories.
The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. A script from consent.cookiebot.com is loaded for the dialogue; your IP address is transmitted to the provider and anonymised there. Your decision is stored in a cookie called CookieConsent in your browser so that the dialogue does not reappear on every page view. This cookie contains the categories you chose and a time stamp, but no information about your person. It is stored for up to twelve months.
The legal basis for using the dialogue is Art. 6 (1) (c) GDPR, because I am legally obliged to obtain consent and to document it verifiably.
Changing your decision: you can withdraw or adjust your choice at any time. To do so, open the consent dialogue again using the small icon at the bottom left of the screen. The withdrawal applies from the moment of the change; processing up to that point remains lawful.
Independently of this, WordPress sets technically necessary cookies when someone logs in to the administration area. This concerns the website operator only.
Contact form
You can send an enquiry using the contact form on the “Contact” page. The information you enter yourself is processed:
- name and phone number (required, so that I can reach you)
- e-mail address (optional)
- current language level, your goal and your message (optional)
This information is used solely to deal with your enquiry and any related questions. The legal basis is Art. 6 (1) (b) GDPR, since the processing serves the initiation of a teaching contract, and Art. 6 (1) (a) GDPR on the basis of the consent you give when sending. You can withdraw this consent at any time with effect for the future; an informal message is sufficient.
To protect against automatically sent spam, the form contains an additional field that is invisible to humans and checks how quickly the form was filled in. Both run exclusively on this server. No external service such as reCAPTCHA is used, and no additional data about you are collected in the process.
Your enquiry is delivered to me by e-mail. My e-mail account is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); data may also be processed on servers in the USA. The information stays with me until your enquiry has been dealt with conclusively and no further questions are to be expected. Statutory retention periods – for example under tax law, if the enquiry leads to a teaching relationship – remain unaffected.
Contact by e-mail, telephone and WhatsApp
If you contact me by e-mail or telephone, I process your information solely in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR.
On several pages you will find buttons that prepare a message on WhatsApp. These buttons are plain links: no connection to WhatsApp is established unless you click them. Only then does WhatsApp open with my phone number and a prepared text. If you write to me there, WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) processes your data under its own terms; I have no influence over this. If you wish to avoid this, please use the telephone, e-mail or the contact form.
Level check
The level check runs entirely in your browser. Your answers are not transmitted to the server, not stored and not evaluated. I do not see the result either – it disappears as soon as you close or reload the page. No cookies are set.
Fonts
This website uses its own fonts, which are delivered directly from this server. No connection to Google Fonts or any other external font service is made. Your IP address is not transmitted to anyone.
YouTube videos
Videos from my YouTube channel are embedded in a few places. When a page loads, only a preview image stored locally on this server is shown at first. At this point no connection to YouTube or Google is made.
The video is only loaded once you have allowed the Marketing category in the consent dialogue and then clicked on the preview image. If you have not consented, clicking opens the consent dialogue again instead – nothing is loaded without your consent.
Once loaded, YouTube learns your IP address and which video you are calling up, among other things; if you are logged in to YouTube at the same time, the request can be assigned to your account. The videos are embedded via youtube-nocookie.com, which means YouTube sets no advertising cookies before playback. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Transfer to the USA cannot be ruled out.
The legal basis is your consent under Art. 6 (1) (a) GDPR. You can find further information in Google’s privacy policy: policies.google.com/privacy.
Links to external sites
This website links to external offerings, for example to my YouTube channel and to my Google business profile with the reviews. These pages are only called up when you click the link; after that the privacy policy of the respective provider applies. The review texts shown on this website are stored here – nothing is loaded from Google when the page opens.
Analytics, tracking and advertising
This website uses no analytics, tracking or marketing tools. No reach measurement takes place, no usage profiles are created, and no data are passed on to advertising networks or social networks. No social media plugins are embedded.
The only thing prepared technically is what is known as Google Consent Mode. It records in your browser which categories you have allowed in the consent dialogue, so that services added later respect that decision from the outset. As long as no such services are embedded, no data are transmitted to Google.
Your rights
You have the right at any time:
- to request information about the data stored about you (Art. 15 GDPR)
- to have incorrect data corrected (Art. 16 GDPR)
- to request the deletion of your data (Art. 17 GDPR)
- to have processing restricted (Art. 18 GDPR)
- to receive your data in a transferable format (Art. 20 GDPR)
- to object to processing (Art. 21 GDPR)
- to withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR)
An informal message to andreas.molau@gmail.com is enough.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.
Automated decision-making or profiling under Art. 22 GDPR does not take place.
Version and changes
Version of this privacy policy: September 2026. If the website or the legal situation changes, I will adapt this policy. You will always find the current version on this page.