Privacy Policy
View your statistics preference or withdraw permission at any time.
Personal data (usually referred to just as „data“ below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 2 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.
Our privacy policy is structured as follows:
I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing
I. Information about us as controllers of your data
The party responsible for this website (the „controller“) for purposes of data protection law is:
Patrick Jebeili
Goethestr. 6
78603 Renquishausen
Germany
Phone: +49 177 3166001
Email: hello@teanavi.com
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Hosting and email services
We use netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, to host this website and provide our email services. The server used to host this website is located in Germany.
In providing these services, netcup processes website connection and server log data and, for email correspondence, email addresses, message contents, attachments and technical delivery information. We have concluded a data processing agreement with netcup under Article 28 GDPR for processing on our behalf and according to our instructions. The purposes, legal bases and retention information for our use of these services are explained in the Contact and Server data sections below.
Further information about the provider is available in netcup’s privacy policy.
Contact
If you contact us by email, we process your email address, the contents of your message and any other information you provide to handle and respond to your inquiry.
Where processing your inquiry is necessary to perform a contract with you or to take steps at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other inquiries, including general questions, suggestions and bug reports, we rely on Article 6(1)(f) GDPR. Our legitimate interest is to handle and respond to these communications.
We delete your correspondence when it is no longer needed to handle your inquiry, unless a legal retention obligation or another lawful reason, such as the establishment, exercise or defence of legal claims, requires continued storage.
Our email hosting provider creates daily backups for recovery purposes and retains each backup for up to seven days. Deleted emails may therefore remain in these backups until they expire.
For the secure and reliable operation of our email service, netcup also records connection data for incoming and outgoing emails. According to netcup’s published retention policy, these logs contain no email contents and are retained for 14 days. This processing is based on our legitimate interest in secure and reliable email communication under Article 6(1)(f) GDPR. These connection logs are separate from mailbox contents and backups.
Server data
To operate this website securely and reliably, we process server log data, including IP addresses, access times, requested URLs (which may include query parameters), browser information, referrer information and technical response or error information. We use these records to detect and investigate misuse, attacks and technical faults.
Processing is based on our legitimate interest in maintaining the security and reliability of the website under Article 6(1)(f) GDPR. These logs are used for operational and security purposes, separately from optional session statistics, and do not depend on your statistics consent.
Our website server logs are normally retained for up to eight days and then deleted. Relevant records may be retained longer where necessary to investigate a specific security incident or establish, exercise or defend legal claims. These records are deleted once they are no longer needed, unless a legal obligation requires further retention.
Local settings in your browser
Your Auto, Light or Dark appearance choice is stored locally under “teanavi-theme”. Auto is the default and follows your device’s light or dark appearance setting. We also remember the playback settings described below, under “teanavi-keep-screen-on” and “teanavi-player-view”, so your chosen settings apply on later visits. These values are not visitor identifiers.
Your “Keep screen on during audio” choice is saved locally in this browser so it can be remembered for future sessions. It is not sent with session statistics. Clearing this site’s browser storage resets the choice.
Your Full or Simple player view is also saved locally in this browser. This display preference is not sent to the server and is reset when you clear this site’s browser storage.
These settings have no automatic expiry. They remain until you change them, clear this website’s browser storage or your browser removes them. They are not included in feedback submissions. Where storage is unavailable, preferences may only apply to the current page or session.
Storage and access needed to remember these explicitly selected functions rely on Section 25(2) No. 2 TDDDG. Insofar as personal data is processed, the basis is Art. 6(1)(f) GDPR, with our legitimate interest in providing the display and playback settings you request. This does not authorise optional usage statistics.
Optional session statistics
With your permission, we use session statistics to understand whether the guidance is useful and where it can be improved. You can use every tea session without allowing statistics. We do not use an external analytics service or collect advertising profiles.
We count session starts, chapters used, active-minute milestones up to 60 minutes, brewing-wait starts and rounded completed waiting durations, playback coverage, endings and technical failures. Form answers are handled separately as voluntary feedback, described below. Your personal tasting note is never sent. These statistics do not count general page visits or collect your country.
For the “My tea is ready” wait, we count entry and, when you confirm readiness, one rounded duration: under 30 seconds, then the nearest whole minute (30–89 seconds counts as 1 minute, 90–149 seconds as 2 minutes, and so on). All waits from 59 minutes 30 seconds upwards share the capped “60 minutes or more” group. This includes cooling and interruptions while the session remains open, not just tea steeping. Exact start and end times are not transmitted or stored. Leaving without confirming produces no completed duration. Permission must be present at entry and remain valid throughout the wait.
Requests contain the lesson identifier, content version, audio or reading mode and fixed event names. The lesson identifier identifies the tea lesson, not a person or individual visit. Temporary progress and duplicate-event checks stay in memory during the session. Activity before permission or after withdrawal is not collected for later transmission.
The application stores daily totals by session version and audio or reading mode, without a visitor identifier, IP address, individual event timestamps or browsing history in the statistics file. Requests still pass through our hosting infrastructure and are subject to the processing described in the Hosting and email services and Server data sections above.
Optional statistics rely on your consent under Art. 6(1)(a) GDPR and, to the extent optional storage or access on your device requires permission, Section 25(1) TDDDG. Collection starts only after you select “Allow statistics”. Closing or ignoring the banner does not give permission. See Withdrawing consent below to stop future collection.
Your choice, the notice version, decision time and expiry are stored locally under “teanavi-statistics-choice”, for both acceptance and refusal. The choice expires after 180 days; the expired record is removed when the website next checks it. This preference is not a visitor identifier and is not sent as a receipt to the server. If browser storage is unavailable, your choice applies only to the current tab. If you clear browser storage, use another browser, or the choice expires, we may ask again. A change to the scope of collection requires a new choice.
Remembering acceptance and refusal allows us to respect your choice without asking on every visit. Storage and access to this preference rely on Section 25(2) No. 2 TDDDG. Insofar as personal data is processed, the basis is Art. 6(1)(f) GDPR, with our legitimate interest in respecting and applying your privacy choice. No choice, or an expired or obsolete choice, means statistics are off. The 180 days run from your latest decision; local storage does not automatically delete the record while the website is closed.
The statistics store retains daily counters for up to 365 days to compare usage and improve sessions over time. Older counters are removed automatically each day while the application is running, as well as on writes and exports. If the application is stopped, cleanup runs when it next starts.
We may export aggregated statistics and feedback totals for private analysis to improve our sessions and compare results over time. These exports are deleted when no longer needed and no later than twelve months after export. Exporting data does not extend the retention of the live counters.
Voluntary session feedback
At the end of a session, you can answer two optional questions about whether the guidance helped and whether you would choose another session. By selecting “Send feedback”, you agree to send the answers you selected to help us improve the guidance and plan future sessions. You can instead select “Finish without feedback”; no form answers are sent. There are no preselected answers, and either question can be left unanswered.
This separate submission is based on your consent under Art. 6(1)(a) GDPR. Select at least one answer to send feedback, or finish without sending. Consent to feedback does not authorise ongoing tracking.
Feedback works even if you declined session statistics. Sending it does not enable tracking or change your statistics preference. Alongside your selected answers, we send the session identifier and content version, audio or reading mode, and your current statistics choice: allowed, declined or not decided. This helps us understand how feedback differs between these groups. It cannot tell us whether you are a new visitor or whether your session appeared in the usage statistics.
Your personal tasting note stays only in the current form. It is never read for submission, transmitted or saved, and disappears when you leave the form. We do not request names, email addresses or other free text in feedback.
The application immediately adds each answer to separate daily counters and counts submissions. It does not store individual forms, answer combinations, visitor identifiers, IP addresses or exact submission times in the feedback file, and does not link feedback to your usage history. Network requests still pass through our hosting infrastructure, as described in the Hosting and email services and Server data sections above.
You can change or clear your answers or leave without sending before submission. Once received, answers are merged into totals without a way to identify your contribution for individual removal. Changing the statistics preference cannot undo a feedback submission. See Withdrawing consent for the available controls and how to contact us about your rights.
Feedback counters use the same retention window of up to 365 days and automatic cleanup as session statistics.
Daily counters use UTC calendar dates, not individual event timestamps. We may combine them into weekly or monthly totals for analysis. Website logs and email backups have the separate retention periods described above.
The suggestions email link opens your email application with a fixed subject. It does not include your personal note, answers or statistics choice. If you choose to send an email, the message and sender information are handled separately as correspondence, not as anonymous feedback counters.
Withdrawing consent
Where processing relies on consent, you can withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Following withdrawal, we stop processing personal data on the basis of that consent and delete it without undue delay unless another lawful basis or a legal exception permits its retention.
To stop session statistics, open Privacy settings and select “Decline statistics”. This stops further collection in this browser. Other open tabs on the same website apply the change when they receive it. If browser storage is unavailable, change the choice in each tab. Choices in other browsers or on other devices must be changed there separately. All tea sessions remain available.
Requests already sent cannot be recalled. Existing session and feedback totals contain no identifier by which we can find and remove your individual contribution. We do not collect additional identifying data just to link you back to these totals.
For voluntary feedback, you can leave without submitting before choosing “Send feedback”. Submission immediately combines your selected answers into totals and does not give ongoing tracking permission. To withdraw consent to any continuing identifiable processing or exercise your data protection rights, contact hello@teanavi.com. This contact route does not make an already aggregated contribution individually retrievable.
Model Data Protection Statement for Anwaltskanzlei Weiß & Partner