Controller
Evgenia Akhomgotva, sole proprietor, trading as “Smile Academy by Jiji”, c/o KU64, Kurfürstendamm 64, 10707 Berlin, Germany
Email: hello@smile-acdmy.de
Processing
We process necessary connection data to securely provide the site (Art. 6(1)(f) GDPR) and name, email, optional phone number, selected treatment or training, booking, payment, access, appointment data, exceptional scheduling requests and their reasons, and legal-acknowledgement data to perform contracts (Art. 6(1)(b) GDPR) and meet retention duties (Art. 6(1)(c) GDPR).
Providers
Web design and implementation: Webkove (webkove.de). OpenAI and Cloudflare provide hosting, SumUp or, when selected, PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg processes payment references, amounts, currencies and necessary transaction data under Art. 6(1)(b) GDPR. PayPal privacy notice: https://www.paypal.com/de/legalhub/paypal/privacy-full. Resend sends transactional emails and Google Workspace provides business email. The Academy uses Google Calendar to organise booked appointments, including the customer’s name, email address, optional phone number, training or treatment and appointment time. The restricted internal appointment dashboard also uses Google Apps Script to process the booking details and change requests required for appointment management. Full card data is not stored by us. Applicable transfer safeguards are used for processing outside the EEA.
Storage and rights
The language preference is stored for up to twelve months. Your ad-measurement choice is stored in the smile-ads-consent-v1 cookie for six months. A protected smile-payment-return cookie may connect a payment confirmation to your learning access for up to 30 minutes. Only with your express consent do we load the Google Ads tag (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It measures successfully submitted enquiries and provider-confirmed training payments, using click and cookie identifiers, device and connection data, a cleaned page address, a random transaction ID and the purchase amount and currency. Names, email addresses, message contents, payment details and private access tokens are not included in measurement events. Enhanced conversions with customer data, personalised advertising and Google Analytics are not enabled. The legal basis is consent under section 25(1) TDDDG and Art. 6(1)(a) GDPR. No Google tag loads without consent; booking remains available. You can change or withdraw consent at any time through Cookie settings in the footer. With consent, random event IDs and timestamps are kept locally for up to 90 days to prevent duplicates; our Google Ads cookie lifetime is set to 90 days. Details on Google processing, possible processing in the USA and retention: https://policies.google.com/privacy and https://policies.google.com/technologies/ads. Tax accounting records are generally kept for eight years and business correspondence for six years. Under the GDPR you may request access, rectification, erasure, restriction or portability, object to processing and complain to a supervisory authority.