Privacy policy

Controller

The name of the controller required by Art. 13(1)(a) GDPR is being added and will appear here shortly.

The full postal address is being added and will appear here shortly. Until then, please use the email address below for any data-protection matter.

The controller within the meaning of Art. 4(7) GDPR is the natural person who operates this service as a sole trader — see also the legal notice (Impressum).

Contact for data-protection matters: hello@dome-lingua.com

Data we process

Account data: your email address, a display name if you provide one, and your sign-in credentials. If you sign in via a third-party sign-in provider you choose, we receive your name and email address from that provider when you initiate it.

Content you upload: documents and books. You review and edit the extracted text before it is saved; the original file is retained in a private store under a key tied to your account and is read back only on your own request (for example, scanned-document text recognition).

Learning activity: reading progress, saved vocabulary and its review state, and word lookups.

Organization membership: if you join an organization or group, your membership and role. Reporting shown to organization administrators is aggregate, with small groups suppressed; per-person detail exists only where the organization has explicitly enabled it, and that change is recorded.

Technical data: server logs kept by the hosting provider for operation and abuse prevention, and usage analytics that receive only the masked shape of the page visited — identifiers in the address are removed before anything is sent.

Purposes and legal bases

Providing the service — accounts, reading, vocabulary, organizations: Art. 6(1)(b) GDPR (performance of contract).

Security and service integrity — rate-limiting, bot protection, aggregate statistics: Art. 6(1)(f) GDPR (legitimate interest in a secure, working service).

Optional features you actively choose, such as social sign-in: Art. 6(1)(a) GDPR (consent, revocable at any time with effect for the future).

Processors and recipients (by category)

Processing happens on our documented instructions under data-processing agreements with the following categories of recipients (Art. 13(1)(e) GDPR): our hosting and content-delivery provider (application hosting and private document storage), our database provider, and our transactional-email provider.

Where a deployment is configured for it, word-lookup enrichment, scanned-document text recognition, and translation of uploaded documents send the text concerned to AI model or translation providers for the duration of the request. The bundled library uses precomputed translations without any external call.

Data is stored in the EU. No data is transferred to recipients for their own purposes. The current list of engaged processors is available on request via the contact address above.

Cookies

Only strictly necessary cookies are set: the session cookie that keeps you signed in and a preference cookie storing your interface language. No consent-requiring cookies are used.

Retention

When you delete content or request deletion of your account, the data is removed within 30 days; residual copies in backups expire within 90 days at the latest.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)).

You have the right to lodge a complaint with a data-protection supervisory authority — in the EU, the authority in the member state of your residence, place of work or the alleged infringement.

Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR, including profiling, takes place.