This is a translation for your convenience. Only the German version is legally binding.

Privacy Policy

1. Privacy at a glance

   
   

General information

StudyGhost AI places great importance on the protection of personal data. Below we explain which personal data are processed when you visit this website, use our digital services, and in connection with orders, enquiries and the use of our editor.

Personal data are all data that can be used to identify you personally. These include, for example, email addresses, payment information, communication data or content submitted while using our services.

In particular, this privacy policy explains:

• which data we collect,

• how and for what purpose we process data,

• on which legal basis this takes place,

• which rights users have,

• which external technical service providers are used,

• how long data are stored,

• and which protective measures we take.

  
  

The use of our website and our digital services is generally voluntary. However, certain functions or services cannot be provided for technical or organisational reasons without processing certain personal data.

We make sure to process personal data only to the extent necessary to provide our services, ensure technical functionality, perform contracts, maintain system security and communicate with users.

As part of our offering, cloud-based technical infrastructure, storage, communication and payment services may be used. In this context, personal data may be processed by external technical service providers.

We endeavour to use only providers that offer appropriate data protection standards and security measures. Nevertheless, we point out that, despite technical security measures, absolutely complete protection against access by third parties cannot be guaranteed for internet-based data transmissions.

If external service providers outside the European Union are used or data are transferred to so-called third countries, this takes place in compliance with the applicable data protection requirements.

Our website currently does not use any analytics or marketing tracking services such as Google Analytics, Meta Pixel, TikTok Pixel or comparable advertising and profiling services. However, technically necessary functions and security mechanisms may be used that are required for the operation of the website or individual functions.

You use our digital services on your own responsibility. The content provided serves as academic templates, guidance and sample material.

Data collection on this website

Personal data are collected in particular:

• when visiting the website,

• when contacting us,

• in the course of orders,

• when using the editor,

• when uploading your own files,

• when processing payments,

• when providing digital content,

• in automated email processes.

  
  

Some data are collected because users provide them themselves, for example by entering them into forms or uploading their own documents.

Other technical data may be processed automatically by systems insofar as this is necessary for the provision, stability or security of the website.

What rights do you have regarding your data?

You have the right at any time to:

• information about stored personal data,

• rectification of incorrect data,

• erasure of your data,

• restriction of processing,

• object to certain data processing,

• data portability,

• withdraw consent given,

• lodge a complaint with a data protection supervisory authority.

You can find more information in the section “Your rights”.

1. Controller

The controller responsible for data processing on this website is:

StudyGhost AI
Gabriel Malochwy
Sole proprietorship

Knobelsdorffstraße 8
14059 Berlin
Germany

Email: info@studyghost.de

1. Hosting and technical provision of the website

This website is provided via external technical infrastructure and hosting services.

When you visit the website, technically necessary data may be processed. These may include in particular:

• IP address

• Browser type

• Operating system

• Date and time of access

• Referrer URL

• technical log data

• Information on device and browser configuration

Processing takes place to provide the website securely, stably and without errors in accordance with Art. 6(1)(f) GDPR.

1. General information on data processing

We process personal data exclusively within the framework of the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR).

Processing takes place in particular when:

• this is necessary for the performance of a contract,

• legal obligations exist,

• legitimate interests exist,

• or express consent has been given.

  
  

1. Types of data processed

Depending on how you use our offering, the following data in particular may be processed:

• Email addresses

• Payment and transaction data

• Billing data

• project-related information

• Topic and content information

• uploaded documents

• technical usage data

• Communication data

• provided files and result documents

  
  

1. Purposes of processing

Processing takes place in particular for the following purposes:

• Provision of our website

• Provision of digital services

• Processing of orders

• technical implementation and administration

• Creation of digital content

• Quality assurance

• Communication with users

• Provision of download links

• Invoicing

• System security and abuse prevention

• Fulfilment of legal obligations

  
  

1. Legal bases for processing

Processing takes place in particular on the basis of:

• Art. 6(1)(a) GDPR

• Art. 6(1)(b) GDPR

• Art. 6(1)(c) GDPR

• Art. 6(1)(f) GDPR

• 
  

1. Payment processing

Payments are processed via external payment service providers.

In the course of the payment process, the following may be processed in particular:

• Payment information

• Billing data

• Payment status

• Transaction data

• technical payment information

• Email address

• Payment method

Processing takes place for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

1. Payment service providers used

Depending on the payment method selected, the following payment providers in particular may be involved:

• Stripe

• PayPal

• Apple Pay

• Google Pay

• Klarna

• Sofort bank transfer

• Amazon Pay

• giropay

• American Express

• Mastercard

• Visa

The privacy policies of the respective payment service provider also apply to the respective payment processing.

Further information:

Stripe:
https://stripe.com/privacy

PayPal:
https://www.paypal.com/webapps/mpp/ua/privacy-full

Google:
https://policies.google.com/privacy

Apple:
https://www.apple.com/legal/privacy/

Klarna:
https://www.klarna.com/international/privacy-policy/

1. Processing of uploaded files

Users can upload their own files, in particular PDF or DOCX documents.

This content is processed exclusively to provide the requested digital services.

The user warrants that:

• no unlawful content is uploaded,

• no third-party rights are infringed,

• and the necessary rights of use exist.

  
  

1. Technical processing and provision

External cloud-based infrastructure, storage and processing services may be used for the technical provision, processing and storage of project-related content.

In this context, personal data may be temporarily processed or stored insofar as this is technically necessary.

1. . Automated email communication

External email service providers may be used for automated communication.

This includes in particular:

• Order confirmations

• Access information

• Download links

• system-related notifications

  
  

1. . AI-supported processing

Automated and AI-supported systems may be used to provide our digital services.

In this context, the information provided by the user may be processed automatically.

No decision based solely on automated processing with legal effect within the meaning of Art. 22 GDPR takes place.

1. . Storage and deletion

Project-related data, uploads and provided files are generally deleted after 60 days at the latest, unless statutory retention obligations prevent this.

Billing and tax-relevant data may be stored for longer due to legal obligations.

1. .Contact

If you contact us by email or telephone, the data transmitted will be processed to handle your enquiry.

Processing takes place in accordance with Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

1. Cookies and technically necessary functions

This website currently does not use any analytics or marketing cookies.

Technically necessary cookies or comparable technologies may be used insofar as they are required for the operation, security or functionality of the website.

1. SSL/TLS encryption

This website uses SSL/TLS encryption to protect confidential content and data transmissions.

1. Data transfer to third countries

When using individual technical service providers, data processing outside the European Union, in particular in the USA, cannot be ruled out.

Where possible, we take care to use appropriate data protection safeguards and protective mechanisms.

1. Recipients of personal data

Personal data may be transferred in particular to the following categories of recipients:

• Hosting providers

• Cloud and storage providers

• Payment service providers

• technical infrastructure and communication providers

• tax or legal advisors

• Authorities, insofar as legally required

  
  

1. Data processing on behalf

Where legally required, we conclude data processing agreements with external service providers in accordance with Art. 28 GDPR.

1. Your rights

In particular, you have the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object

• Right to withdraw consent

  
  

1. Withdrawal of your consent

You can withdraw consent already given at any time with effect for the future.

1. Right to object

Insofar as processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing.

1. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

1. Security notice

We take technical and organisational measures to protect personal data.

Nevertheless, we point out that internet-based data transmissions may have security gaps.

1. Changes to this privacy policy

We reserve the right to amend this privacy policy in the event of technical, organisational or legal changes.