Privacy Notice
1. Controller
The controller (Art. 4 No. 7 GDPR / DSGVO) is the operator of the Quinavi service. For privacy requests, contact office [at] quinavi.com. No additional personal details of the operator are published here. A postal address will be provided on request to that email, where required to handle a data-subject request or official correspondence.
2. Scope
This notice describes processing for the Quinavi TOEIC-style practice newsletter under the GDPR (DSGVO), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG), and § 7 of the German Act Against Unfair Competition (UWG) for email communications.
3. Data we process
- Email address
- Consent text, consent version, and time of registration
- Subscription status and confirmation time
- Security tokens used only to confirm or cancel the subscription
- Technical data that may be generated by your request, such as an IP address, to document confirmation and protect against misuse
We do not require your name, postal address, or payment data for this service.
4. Purposes and legal bases
- Sending the newsletter and managing the subscription: your consent, Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR), including via the unsubscribe link in our emails.
- Proving consent and protecting the service (for example double opt-in records and limited technical data): Art. 6(1)(f) GDPR (legitimate interests in documenting consent under Art. 7(1) GDPR and preventing abuse).
- Commercial email: only after confirmed consent, § 7 UWG.
5. Double opt-in
After you submit the form, we send a confirmation email. We send the newsletter only after you confirm that address. Confirmation links expire after 24 hours.
6. Recipients
We do not sell your data and we do not share it for third-party advertising. Categories of recipients are service providers acting for us (processors), in particular hosting and email delivery, and only as needed to operate this service. Public authorities may receive data where we are legally obliged to disclose it.
7. Transfers outside the EU/EEA
Where a provider processes data outside the EU/EEA, this is done only on the basis of an adequacy decision or appropriate safeguards under Arts. 44 et seq. GDPR.
8. Storage period
Confirmed subscriptions are stored until you unsubscribe or otherwise withdraw consent. We then delete the related registration data, unless a short additional retention is required to handle residual requests or to meet a legal obligation. Unconfirmed registrations are not used to send the newsletter.
9. Cookies and similar technologies
These pages do not use advertising or analytics cookies. Any technically necessary storage required to provide the form or page is based on § 25(2) TDDDG.
10. Your rights
You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection (Arts. 15–18, 20, 21 GDPR), and the right to withdraw consent at any time. To exercise them, email the contact above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or of the alleged infringement (Art. 77 GDPR). An overview of authorities is available from the European Data Protection Board.
11. Automated decisions
We do not use your data for automated decision-making including profiling within the meaning of Art. 22 GDPR.
Quinavi is not affiliated with or endorsed by ETS (Educational Testing Service). This notice may be updated if the service or the legal situation changes.