Privacy Policy

1. Controller

The controller responsible for data processing on Nett Academy (academy.christophernett.com) is:

Christopher Nett
c/o Postflex #9164
Emsdettener Str. 10
48268 Greven
Germany
E-mail: contact@christophernett.com

2. Overview

Nett Academy is an online course platform. To run it we process:

  • Data you give us — the name and e-mail address you use to create an account, and the billing details you enter at checkout.
  • Data created by your use of the platform — which lessons you opened and completed, quiz attempts and scores, and anything you write in a comment or send us by e-mail.
  • Technical data — IP address, browser, device, and time of access, processed by the platform in order to deliver the site and keep it secure.

We use this data to give you access to what you bought, to process the payment and meet our tax and accounting obligations, to answer your questions, and to keep the platform working and secure.

3. Legal Bases

  • Art. 6(1)(b) GDPR — performance of the contract: your account, your access to purchased courses, your progress and quiz records, and support for them.
  • Art. 6(1)(c) GDPR — legal obligations: retaining invoices and payment records under German tax and commercial law.
  • Art. 6(1)(f) GDPR — legitimate interests: keeping the platform secure and available, and preventing abuse.
  • Art. 6(1)(a) GDPR and § 25(1) TDDDG — your consent, where it is asked for: for our analytics and our newsletter.

4. The Platform (Teachable)

Nett Academy runs on Teachable. For users in the European Union the operator is Hotmart B.V., Spuistraat 168, 1012 VT Amsterdam, The Netherlands; the group's US entity is Teachable, Inc., Convene, 9th Floor, WorkSuite #807, 530 Fifth Avenue, New York, NY 10036, USA.

Teachable processes your data on our behalf as our processor, under a data processing agreement that incorporates the EU Standard Contractual Clauses for any transfer outside the European Economic Area. It hosts the site, stores your account and course data, runs the checkout, and sends the platform's transactional e-mails.

Teachable's privacy policy: https://teachable.com/privacy-policy

5. Account Data

To buy a course you need an account. We process the name and e-mail address you provide and the password hash the platform stores. The legal basis is Art. 6(1)(b) GDPR.

Your account and its data remain until you ask us to delete it, or until we close it because it has been unused for a long period. Records we are legally required to keep — invoices in particular — survive account deletion, in a form limited to that purpose.

6. Purchases and Payment

At checkout we process the course you bought, the price, the currency, the tax applied, your country, and the time of the transaction.

Payment is collected through Teachable Payments, which uses Stripe as its payment processor. Your card details are entered on the payment provider's own form and are processed by that provider. We do not receive or store them; we see the transaction, the last four digits of the card, and whether it succeeded.

Legal bases: Art. 6(1)(b) GDPR for processing the purchase, and Art. 6(1)(c) GDPR for retaining the records.

Retention. Invoices and the accounting records behind them are kept for the statutory retention periods under German tax and commercial law (§ 147 AO, § 257 HGB) — currently up to ten years from the end of the year in which the record was created. During that period the data is retained for that purpose only.

Stripe's privacy policy: https://stripe.com/privacy

7. Course Progress and Quiz Results

The platform records which lessons you opened and completed, and your attempts and scores on the practice quizzes inside a course.

This exists so the course works: so you can resume where you stopped, so progress is shown, and so a quiz can tell you whether an answer was right. We also read it in aggregate to see which parts of a course are finished and which are abandoned, which is how a course gets improved.

The legal basis is Art. 6(1)(b) GDPR — the progress record is part of the course you bought.

We do not use quiz results to assess you outside the course, do not share them with your employer, and do not publish them.

8. Comments and Support

If you comment on a lesson, your name, the comment, and the time are stored and visible to other students enrolled in that course. Do not put anything in a comment that you would not want other students to read.

If you write to us, your message and contact details are processed to answer it and in case of follow-up questions. Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns your purchase, otherwise Art. 6(1)(f) GDPR.

9. Cookies and Similar Technologies

Teachable sets cookies on this domain that are necessary to run the platform — keeping you logged in, holding your cart through checkout, and protecting against abuse. These are strictly necessary for a service you have requested (§ 25(2) TDDDG) and are set without consent.

Teachable also sets its own analytics and product cookies on the platform, which we as the school operator can neither inspect nor switch off individually. Where you can control them, that control is in your browser settings and in Teachable's own privacy tools. What Teachable collects and why is set out in its privacy policy, linked in section 4.

Our own analytics (Google Analytics), only with your consent. If you click Accept in the cookie banner, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors find and use this site — for example which pages are viewed and where visitors come from. Google Analytics sets cookies (_ga, _ga_*) and processes device and browser information and your interactions with the site; Google Analytics 4 does not store full IP addresses. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework, and is retained for at most 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without it, our Google Analytics does not load. You can withdraw your consent at any time via Cookie settings in the footer; our analytics cookies are then deleted.

Google's privacy policy: https://policies.google.com/privacy

Apart from this, we add no advertising pixels or other tracking of our own to this platform.

10. Newsletter

If you subscribe to our free newsletter, your e-mail address is processed by Kit (Kit, Inc., 750 West Bannock Street #761, Boise, Idaho 83701-0761, USA) as our processor, under a data processing agreement incorporating the EU Standard Contractual Clauses.

Subscription uses double opt-in: you receive an e-mail in which you confirm. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link in every newsletter e-mail.

Buying a course does not subscribe you to the newsletter. Where a purchase is passed to Kit, it is passed so that a subscriber who already owns a course is not sent an offer for it. It does not create a subscription and does not add you to any mailing.

Kit's privacy policy: https://kit.com/privacy

11. International Data Transfers

Some of the services we use — Teachable, Stripe, Kit, Google — are operated by companies based in the USA or may process data outside the European Union. Where personal data is transferred to a third country, this is done on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework.

Please note that despite these safeguards, a level of data protection fully comparable to that in the EU cannot be guaranteed in all third countries.

12. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise any of these rights, write to contact@christophernett.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
https://www.ldi.nrw.de

13. Data Security

Connections to this platform are encrypted with SSL/TLS. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

14. Changes to This Policy

We update this policy when the processing it describes changes — for example when a new provider is introduced. The version published on this page applies.