← Back

Privacy Policy

Last updated: 7 July 2026

This policy explains what personal data we process when you use TandemPartners, why, and your rights under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for your data is TandemPartners.org, contactable at info@tandempartners.org.

2. Data we collect

Account data: first and last name, email address, phone number (optional), password (stored only as a secure hash).
Profile data: gender, date of birth, city, languages spoken/learning, level, a short description, profile picture, and optional social links.
Messages you send to and receive from other members.
Technical data: IP address and browser information, processed by our hosting provider and analytics.

3. How and why we use it

To create and operate your public profile and enable member-to-member contact — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
To send email notifications about messages — contract / legitimate interest.
To improve and translate your self-description using an AI service — your consent / legitimate interest.
To promote the community by posting a profile card on our social-media pages — legitimate interest; removed when you delete or disable your account.
To analyse usage and improve the Service — consent (analytics cookies).

4. Recipients and third parties

We share data only as needed to run the Service:

Cloudflare Pages (Cloudflare, Inc.) — hosts and serves the website and routes traffic through its content-delivery network.
ALL-INKL.COM (Neue Medien Münnich, Germany) — database hosting where your account data is stored.
Google Analytics — usage statistics via cookies.
OpenAI — processes your self-description text to rewrite and translate it (data transferred to the USA).
Meta / Facebook — when a profile card is published to our Facebook Page (data transferred to the USA).
Email delivery — our SMTP provider sends transactional emails.
Translation widget (GTranslate) — provides on-page translation.

5. International transfers

Some recipients (e.g. OpenAI, Meta, Google) may process data in the USA. Such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Cookies

We use essential cookies to keep you logged in, and analytics cookies (Google Analytics) which are only set with your consent. You can control cookies through your browser settings.

7. Retention

We keep your data for as long as your account exists. When you delete your account, your profile, messages, and the social-media post we created are removed. Some records may be retained where required by law.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact info@tandempartners.org.

9. Deleting your data

You can permanently delete your account and associated data yourself from the Account tab in your profile settings.

10. Changes

We may update this policy; the date above reflects the latest version.