Privacy notice

1. Controller

Privatinstitut Falkenberg e.K., Dr. Cornelia Falkenberg, Sigismundkorso 41, 13465 Berlin-Frohnau, Germany. Telephone +49 30 4013 2287, e-mail datenschutz@privatinstitut-falkenberg.de.

We have not appointed a data protection officer because we do not meet the threshold in §38(1) BDSG. Data protection questions go to the address above and are answered by the proprietor.

2. What this website collects

Server log files. Our host records the IP address, the time of the request, the page requested, the referring page, the browser and operating system for each request. This is necessary to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a functioning and secure website. Log entries are deleted after seven days and are not combined with any other data.

The enquiry form. What you enter in the form: your name, e-mail address, optionally your telephone number, the pupil's first name, year group, subject, optionally the school, your message, and the district, day and time window you selected. Legal basis: Art. 6(1)(b) GDPR for steps prior to a contract, and Art. 6(1)(a) GDPR for the consent you give with the checkbox. If no engagement follows, the enquiry is deleted after six months.

There is no analytics on this site. No Google Analytics, no Matomo, no pixel, no A/B testing, no session recording, no advertising network, no external font loading — the two typefaces are served from our own domain.

3. Cookies

Cookie 1: pf_access. Set only when you open the tutor profiles with an access code. It contains a signed token with an expiry date and no personal data at all — not your name, not your enquiry, not an identifier that can be traced back to you. It lasts thirty days. It is strictly necessary for a function you have asked for; legal basis §25(2) no. 2 TDDDG.

Cookie 2: pf_consent. Stores whether you have allowed the map to load. It lasts six months and holds a single word. Legal basis §25(2) no. 2 TDDDG.

Nothing else is written to your browser. There is no cookie that identifies you across visits and none that leaves this domain.

4. The map

The map on the enquiry page is not loaded until you allow it. If you do, your browser contacts openstreetmap.org, which will receive your IP address, and that request is governed by the OpenStreetMap Foundation privacy policy. Legal basis for loading it: your consent under Art. 6(1)(a) GDPR and §25(1) TDDDG, which you can withdraw at any time by clearing the pf_consent cookie.

5. Tutor profile access codes

An access code is a signed string containing a random value, an expiry date and a signature. It contains no personal data and we keep no list of issued codes. We cannot tell from a code who you are, and we do not record which profiles were opened or when.

6. Data we hold as your institute

If an engagement follows we process, in addition: the pupil's full name and date of birth, the school and year group, the invoicing address, bank details for the transfer, session records, monthly reports, and any correspondence. Legal basis: Art. 6(1)(b) GDPR, performance of the tutoring contract.

Where a report touches health, a diagnosis or support needs, that is data under Art. 9 GDPR. We process it only with your explicit written consent under Art. 9(2)(a) GDPR, only where it is necessary to teach the pupil properly, and never without telling the pupil that we hold it.

Teaching records are deleted twelve months after the engagement ends. Invoices and the documents attached to them are kept for ten years under §147 AO and §257 HGB, and then deleted.

7. Who else sees it

Our hosting provider, Vercel Inc., which processes data on our instruction under a data processing agreement and standard contractual clauses. Our e-mail provider, mailbox.org, in Berlin. Our tax adviser, for the invoices, under a professional duty of confidentiality.

Tutors see only the records of the pupils they teach. No data is sold, no data is used for advertising, and no data leaves these processors.

8. Your rights

You may ask us for a copy of everything we hold about you (Art. 15), to correct it (Art. 16), to erase it (Art. 17), to restrict its processing (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on our legitimate interests (Art. 21). Where processing rests on consent, you may withdraw that consent at any time with effect for the future (Art. 7(3)).

A pupil of fourteen or over may exercise these rights themselves, including in respect of what their parents are shown.

Write to datenschutz@privatinstitut-falkenberg.de. We answer within a month and we do not charge for it.

You may also complain to a supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

9. Security

The site is served over TLS. The parent area is password-protected and rate-limited. Portrait files behind the tutor unlock are not stored at a public address and are released only against a valid access cookie. Reports and invoices are stored encrypted at rest.

10. Changes

This notice was last revised in March 2026. If we change how we process data we will revise it here and, where the change is material and an engagement is running, write to you.