Privacy policy

1. Controller

Fräulein Lisa GmbH
Webergasse 3
88499 Riedlingen
Germany
Email: info@fraeulein-lisa.de
Phone: 015560802885

If you have any questions about data protection, you can contact the address above at any time.

2. What data we process

When you create an account, place an order or use courses, we process personal data. This may include:

• Name and email address (for login and communication)
• Profile and birth data (for age verification and parental protection)
• Course progress, earned badges and quiz results
• Billing and shipping address (when ordering baking kits)
• Payment data (processed by our payment provider Stripe)
• Technical data such as IP address, browser type and device data (for security and stability)

3. Legal bases

Processing is based on the General Data Protection Regulation (GDPR), in particular:

• Art. 6(1)(a) GDPR (consent), e.g. for optional cookies
• Art. 6(1)(b) GDPR (performance of a contract), e.g. for accounts, courses and orders
• Art. 6(1)(c) GDPR (legal obligation), e.g. for tax and commercial law
• Art. 6(1)(f) GDPR (legitimate interest), e.g. for the security and operation of the app

4. Third parties and processors

We use selected service providers to operate the app:

• Lovable Cloud / Supabase: Hosting, database, authentication and storage of course and profile data.
• Stripe: Payment processing for subscriptions and baking kits. Stripe processes payment information according to its own privacy policy.
• Google Analytics: Usage analysis to improve the app (only with consent).

5. Storage period and deletion

Your data is stored only as long as necessary for the stated purposes or as required by statutory retention periods. After the end of the contract or account deletion, the data is deleted unless there is a legal obligation for further retention.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise your rights, please contact the address given in the imprint. You also have the right to lodge a complaint with a data protection supervisory authority.

7. Cookies and tracking

We use cookies and similar technologies to ensure the functionality of the app and to analyse usage. Further details can be found in our cookie policy.

8. Location of data processing

Data is generally processed within the European Union. If individual service providers transfer data to third countries, this only happens on the basis of appropriate safeguards (e.g. EU standard contractual clauses).