Privacy policy of the website www.deutschakademie.de

Below we explain how we handle your personal data.

Details of the person responsible

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

DeutschAkademie GmbH
Mönckebergstraße 11
D-20095 Hamburg

Telefon: +49 40 30039366
E-Mail: service@deutschakademie.com

Details of the data protection officer (DPO)

We have appointed a data protection officer:

activeMind AG Management- und Technologieberatung
Kurfürstendamm 56
10707 Berlin

Telefon: +49 (0)30 / 770 19 10 70
E-Mail: datenschutz@deutschakademie.com

§ 1 Your data subject rights

You can exercise the following rights at any time using the contact details provided:

Information about your data stored by us and its processing (Art. 15 GDPR),
Correction of incorrect personal data (Art. 16 GDPR),
Erasure of your data stored by us (Art. 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
Objection to the processing of your data by us (Art. 21 GDPR) and
Data portability if you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

The right to information may be restricted in accordance with §§ 29 para. 1 p. 2 BDSG i.V.m. § 8 HinSchG may occur.

If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state of your place of residence or with the authority responsible for us as the controller.

You can find a list of the supervisory authorities with their addresses at: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

§ 2 Information about your right to object pursuant to Art. 21 GDPR

Right to object on a case-by-case basis
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection
The objection can be made informally with the subject ‘Objection’, stating your name, address or other identifying features, to the contact addresses listed above.

Processing on the website

§ 3 Server log files

(1) Type and purpose of processing: When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed for the following purposes in particular:

Ensuring a smooth connection to the website
Ensuring the smooth use of our website
Ensuring and analysing system security and stability, in particular to detect misuse
Ensuring the error-free presentation and optimisation of our website

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

(2) Legal basis: Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU/EEA.

(5) Storage period: Data is stored in server log files in a form that enables the identification of the data subjects for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, server log files are stored until the security-relevant incident has been eliminated and fully clarified.

(6) Provision prescribed or required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

(7) Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this privacy policy.

§ 4 Making contact

(1) Type and purpose of processing: A contact form is available on our website which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored at the time the message is sent

Date and time of the enquiry
URL from which the enquiry was made

It is also possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information on the servers involved in the e-mail communication.

You can also contact us via the telephone number provided. In this case, we collect log data that includes your telephone number and the duration of the call.

Regardless of the type of communication selected, we collect the content of your enquiry. Your data will be stored for the purpose of personalised communication with you.

(2) Legal basis: The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). Our legitimate interest in processing your data is to make it easy for you to contact us.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: Although personal data is primarily stored and processed in Europe, HubSpot, Inc. is located in the USA, so certain storage and processing may continue outside the location, including in the USA. HubSpot is certified under the EU-U.S. Data Privacy Framework; data transfers to HubSpot are therefore covered by the European Commission's adequacy decision for the U.S.

(5) Storage period: Data will be deleted no later than 6 months after the enquiry has been processed. If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

(6) Provision prescribed or required: The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the required data and the reason for the enquiry.

(7) Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this Privacy Policy.

§ 5 Newsletter

(1) Type and purpose of processing: For the delivery of our newsletter or comparable information, we collect personal data that is transmitted to us via an input mask. We require a valid e-mail address for effective registration. We use the ‘double opt-in’ procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the registration for the newsletter, the sending of a confirmation email and the receipt of the requested response. No further data is collected.

The following data is also stored at the time of the ‘double opt-in’ confirmation

Date and time
Country and language

(2) Legal basis: On the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

(3) Recipient: We use a service provider who acts as our processor to send the newsletter.

(5) Storage period: The data will only be processed in this context for as long as the corresponding consent is available.

(6) Provision prescribed or required: The provision of your personal data is voluntary, solely on the basis of your consent. We cannot send you our newsletter without your consent.

(7) Revocation of consent: You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. The cancellation can be requested via the link contained in every e-mail or the contact information listed in this data protection declaration.

§ 6 Applications

(1) Type and purpose of processing: You can send us your application documents by e-mail and via job portals. We will only process the data you provide to assess your professional suitability and to contact you.

(2) Legal basis: The processing is carried out to establish an employment relationship as part of the implementation of pre-contractual measures that are carried out on request, Art. 6 para. 1 lit. b GDPR.

(3) Recipients: Within the company, those departments that need your data to fulfil contractual, legal and supervisory obligations and to protect legitimate interests will have access to it. In addition, we use service providers who act as processors to manage the application process.

(4) Transfer to third countries: There is no transfer to third countries. The data is processed exclusively in the EU.

(5) Storage period: If your application is rejected, the data will be deleted six months after notification of the decision.
If an employment relationship is established, the application documents will be stored by us for at least the period of employment.

(6) Provision required or necessary: The provision of personal data is neither required by law nor by contract. However, it is not possible to process the application without this information.

§ 7 DeutschAkademie Trainer

(1) Type and purpose of processing: We offer you free German courses with the DeutschAkademie Trainer. This primarily includes grammar and exam trainers. The following data is processed in particular:

IP address and other metadata
Entries in the masks of the trainer
Selected name
Mail address

You have the option of registering, e.g. to write to your trainer. The communication data will also be processed.

(2) Legal basis: The processing is based on our legitimate interest in providing an easy way to practise the language and determine your own language level (Art. 6 para. 1 lit. f GDPR).

As part of the optional registration process, your consent to the processing of this data is obtained in accordance with Art. 6 para. 1 lit. a GDPR.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

(5) Storage period: The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when the process has been completed and the company can infer from the circumstances that the data is no longer required. We reserve the right to delete data without giving reasons and without prior or subsequent notification.

If an account is created, the data will be stored in this context until the account is deleted.

(6) Mandatory or required provision: The provision of your personal data is voluntary. However, you can only use the trainers if you provide us with the necessary information.

(7) Revocation of consent: The cancellation of your optional account is possible at any time in the user settings and can likewise be requested in the contact information listed below.

(8) Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this Privacy Policy.

§ 8 Forum

(1) Type and purpose of processing: We operate a forum in which German learners can exchange information.

(2) Legal basis: The processing of data in the forum is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the forum, we would like to enable you to interact in an uncomplicated manner.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

You can also have your entries deleted by us at any time. To do so, please send an e-mail to the contact information listed in this privacy policy and provide the e-mail address used to create the comment for identification purposes.

(6) Mandatory or required provision: The provision of your personal data is voluntary.

(7) Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR in § 2 of this privacy policy.

§ 9 Whistleblower system

(1) Type and purpose of processing: As a company, we are obliged to set up and operate an internal reporting centre in accordance with the German Whistleblower Protection Act (HinSchG). Whistleblowers can use the whistleblower system to inform DeutschAkademie about possible violations of legal requirements or internal regulations (‘rule violations’) (‘whistleblowing’) and thus contribute to their clarification and prosecution.

(2) Legal basis: We process personal data of whistleblowers if this is necessary to fulfil our tasks as an internal reporting office (Art. 6 para. 1 lit. c) GDPR in conjunction with §§ 10 HinSchG). §§ 10 HinSchG). The tasks include the receipt, processing and documentation of reports.

Furthermore, on the basis of legitimate interest (Art. 6 para. 1 lit. f) GDPR), the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcement of civil law claims and defence in legal disputes.

In the case of telephone reports or reports by means of another type of voice transmission, an audio recording or a verbatim transcript will only be made with your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

(3) Recipient: Our internal reporting centre is operated by Personio SE & Co. KG. In accordance with Section 8 (1) HinSchG, the reporting centre must maintain the confidentiality of the identity of the persons making the report, the persons who are the subject of a report and the other persons named in the report. In principle, personal data may not be disclosed by the reporting centre. Exceptions are expressly regulated in § 9 HinSchG and are subject to strict conditions. Data may be disclosed to the following recipients if the requirements in Section 9 HinSchG are met:

Law firms (support in the investigation of your report)
Law enforcement authorities: in criminal proceedings at the request of the law enforcement authorities
Administrative authorities: on the basis of an order in administrative proceedings following a report, including administrative fine proceedings
Courts: on the basis of a court decision

Service providers used by us (processors) may also receive data if they require the data to fulfil their respective service (e.g. operation of the reporting portal). Our service providers are contractually obliged to treat your data confidentially.

(4) Transfer to third countries: Your personal data is not currently transferred to bodies in third countries or international organisations.

(5) Storage period: The documentation will be deleted three years after completion of the procedure in accordance with Section 11 (5) HinSchG. The documentation may be stored for longer in individual cases in order to fulfil the requirements of the HinSchG or other legal provisions, as long as this is necessary and proportionate.

(6) Provision prescribed or required: The provision of personal data is neither legally nor contractually prescribed or required for the conclusion of a contract. Within the scope of information provided, we must process all data received as long as it is necessary to clarify the facts of the case. You are not obliged to provide information, but it is helpful to provide information that is as complete and comprehensive as possible for processing. Our reporting centre also processes reports received anonymously. If the whistleblower submits their report anonymously and does not provide a contact option, we have no way of contacting the whistleblower in the event of any queries and, if necessary, informing them of the outcome of the investigation.

(7) Right of revocation and objection: You can revoke your consent to us at any time. Please note that the cancellation is only effective for the future. Processing that took place before the revocation is not affected.

Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this privacy policy.

Processing in the shop

§ 10 Registration/creation of a user account

(1) Type and purpose of processing: On our website we offer you the opportunity to register. This has many advantages for you, e.g. you can view your order history at any time and benefit from a more personalised course shopping experience. Under ‘My account > User settings’ you can save further information and change it regularly.

For example, if you save your preferred personal and billing address, you will not have to enter it again when you place another order. This will make your shopping faster and more convenient. You can register by entering your title, first and last name, address, date of birth (optional) and a password.

In addition to the data you provide, the following data is stored at the time of registration:

Date and time
Country and language
Channel: Webshop

As soon as you have created a user account, you will receive a registration confirmation by e-mail. If you have forgotten your password, you can use the link provided to reset your password and assign a new password.

(2) Legal basis: As part of the registration process, your consent is obtained in accordance with Art. 6 para. 1 lit. a GDPR for the processing of this data.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

(5) Storage period: Data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

(6) Provision prescribed or required: The provision of your personal data is voluntary, solely on the basis of your consent. However, we cannot create an individual customer account for you without your consent.

(7) Revocation of consent: The deletion of your customer account is possible at any time in the user settings and can also be requested in the contact information listed below.

§ 11 Placement test

(1) Type and purpose of processing: On our website we offer you the opportunity to buy German courses depending on your language level. To determine this language level, we carry out a placement test. We process your data solely to determine your language level in order to suggest a suitable course for you.

The placement test consists of a written and an oral part (language test). Both tests, including your answers, will be sent to us for evaluation after you have completed them.

(2) Legal basis: The processing in the context of the written test is carried out to establish a contractual relationship in the context of the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR.

The oral test is carried out on the basis of your consent in accordance with Art. Art. 6 (1) a) GDPR.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU/EEA.

(5) Storage period: Data is only processed in this context as long as it is required to determine the appropriate German course or as long as the corresponding consent has been given. After that, it will be deleted.

(6) Mandatory or required provision: The provision of your personal data is voluntary. However, we cannot offer you a customised course without your consent for the language test.

(7) Withdrawal of consent: With regard to the oral test, you can withdraw your consent at any time with effect for the future. In this case, the corresponding data will be deleted.

§ 12 Ordering a course online

(1) Type and purpose of processing: We process the data you provide when placing an order in order to fulfil or process your order. This also includes exchanges and complaints about courses.

Your personal data will only be used to the extent necessary to process this order and deliver the requested products and services.

(2) Legal basis: The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

The processing of your personal data for the detection of fraud and misconduct is based on our legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) as a company.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website or, for example, when processing your payment to us.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. Other recipients of your personal data are, for example, public bodies and institutions (e.g. tax authorities, law enforcement authorities) in the event of a legal or official obligation, tax consultants, economic and payroll tax/company auditors (statutory audit mandate).

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

(5) Storage period: We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

(6) Provision prescribed or required: The provision of your personal data is contractually required in order to be able to fulfil the contract with you. Without the provision of your personal data, we cannot fulfil the order.

§ 13 Transaction mails

(1) Type and purpose of processing: Transactional emails are automated emails that are sent as a result of certain visitor actions or following business transactions. This is not a newsletter, but emails that are sent automatically based on your actions (e.g. order confirmation, registration confirmation, etc.).

(2) Legal basis: The processing is carried out for the fulfilment of a business relationship, Art. 6 para. 1 lit. b GDPR and on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in sending transactional emails in order to increase customer loyalty and satisfaction.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website or for sending e-mails. With regard to the transfer of data to recipients outside our company, we only transfer necessary personal data in compliance with the applicable data protection regulations.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU/EEA.

(6) Provision prescribed or required: The provision of your data is necessary for the fulfilment of the contract. Without the sending of transactional emails, we cannot offer you various services.

§ 14 Payment processing

(1) Type and purpose of processing: Payment processing takes place via the payment service provider Mollie B.V (Keizersgracht 126 in 1015 CW Amsterdam, Netherlands). The payment service provider accepts payments from customers using the various payment methods (including Apple Pay, credit card payment, instant bank transfer, etc.) for our company in its own account and pays out the funds from the sale of the products to our company.

Which data is processed depends on the selected payment method. This involves data such as contact details (name, address, email address), the transaction (shopping basket value, product group), the payment method and the data required for this (e.g. credit card details).

(2) Legal basis: This data is processed for the purpose of payment processing (Art. 6 para. 1 lit. b GDPR). Mollie also processes your data for the purpose of preventing payment fraud and also passes this data on to its customers as intended (Art. 6 para. 1 lit. f GDPR). Further information on data processing at Mollie B.V. can be found here.

(3) Recipients: Recipients of the data are technical service providers who act as processors for the operation and maintenance of our website or, for example, when processing your payment to us.

(4) Third country transfer: Processing may also take place outside the EU. For these countries, Mollie concludes additional guarantees for the third country transfer.

(6) Provision prescribed or required: The provision of your data is necessary for the fulfilment of the contract. Without the payment, we cannot offer you the services/courses.

§ 15 Cookies

Like many other websites, we also use so-called ‘cookies’. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

§ 15a Technically necessary cookies

(1) Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
We require cookies for the following applications:

Consent management
Language selection

(2) Legal basis: The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

(5) Storage period: The data is stored for up to 60 days.

(6) Provision required or necessary: The provision of the aforementioned personal data is neither required by law nor by contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

(7) Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this privacy policy.

§ 15b Technically unnecessary cookies

(1) Type and purpose of processing: We also use cookies to better customise the offer on our website to the interests of our visitors or to generally improve it on the basis of statistical analyses.

To find out which providers use cookies, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

(2) Legal basis: The legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

For further recipients, please refer to the information below on the display, tracking, remarketing and web analysis technologies used in Section 16 of this Privacy Policy.

(4) Third country transfer: For information on this, please refer to the lists for the individual tools in Section 16 of this Privacy Policy.

(5) Storage period: For more information, please refer to the information on the individual tools in Section 16 of this Privacy Policy.

(6) Provision prescribed or required: Of course, you can also view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see Revocation of consent).

Please note that individual functions of our website may not work if you have deactivated the use of cookies.

(7) Withdrawal of consent: You can withdraw your consent at any time via our cookie consent tool.

(8) Profiling: To what extent we analyse the behaviour of website visitors with pseudonymised user profiles, please refer to the information below on the technologies used in Section 16 of this Privacy Policy.

§ 15c Overview of cookies and tools

§ 16 External tools

In the following section you will find information on the tools of external providers integrated on our website.

§ 16a Borlabs Cookie

Our website uses Borlabs Cookie (Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany) for consent management. This tool sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.

The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again. Further information on this can be found in Borlabs Cookie's privacy policy at https://borlabs.io/privacy/.

§ 16b Google Ads

(1) Type and purpose of processing: We use Google Ads. Google Ads is an online advertising programme of Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

Google Ads also uses web beacons, invisible graphics that enable Google to analyse clicks on this website, traffic on this website and similar information. As a result, an individual cookie, i.e. a small file, is stored on the website user's device.

The following information is stored in this file

which websites the user has visited, what content they are interested in
which offers the user has clicked on
technical information about the browser and operating system
referring websites
time of visit
Information on the use of the online offer

We also receive an individual ‘conversion cookie’. The information obtained with the help of the cookie is used by Google to create conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our advert and were redirected to a page with a conversion tracking tag. No data is collected that can be used to identify individual website visitors. User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data in relation to cookies within pseudonymised user profiles. This means that, from Google's perspective, the adverts are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymisation.

(2) Legal basis: The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDDG. Consent can be revoked at any time.

(3) Recipient of the data: Our website is maintained by service providers who act as our processors. All service providers are contractually obliged to treat your data confidentially.

(4) Third country transfer: The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision by the European Commission for companies that are certified under the Data Privacy Framework. Google is certified but does not rely on this framework. We have concluded so-called standard contractual clauses with Google LLC.

(5) Storage period: Data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

(6) Provision prescribed or required: The provision of your personal data is voluntary, solely on the basis of your consent. You will not suffer any disadvantages. We cannot show you any adverts without your consent.

(7) Revocation: You can revoke your consent at any time.

§ 16c Google Remarketing

(1) Type and purpose of processing: This website uses the remarketing function of Google Inc. The operating company of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’). The function is used to present interest-based adverts to website visitors within the Google advertising network. A so-called ‘cookie’ is stored in the website visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with adverts that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

(2) Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR.

(3) Recipients: Recipients of the data may be technical service providers. Your data will be transmitted to Google. You can find more information on data processing by Google in Google's privacy policy.

(4) Third country transfer: Your personal data will be transferred to Google in the USA. In order to protect your data even after the transfer, we have concluded standard contractual clauses with the service provider.

(5) Storage period: The data will only be processed in this context as long as the corresponding consent has been given.

(6) Mandatory or required provision: The provision of your personal data is voluntary, solely on the basis of your consent.

(7) Revocation of consent: You can revoke this consent at any time with effect for the future by refusing to accept cookies in your browser settings.

§ 16d Google Analytics

(1) Type and purpose of processing: If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Analytics uses cookies that enable us to analyse your use of our website and to draw conclusions about user behaviour on our website.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google uses this information on behalf of the Deutsch Akademie to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage.

Further information on data processing by Google can be found at the following link https://policies.google.com/privacy?hl=en.

We use Google signals: Google signals are session data from websites and apps. With their help, we can collect additional information about website visitors who are logged into their Google account and have activated personalised advertising. By linking data, cross-device remarketing campaigns can be delivered to these users.

(2) Legal basis: The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

(3) Storage period: The data will be deleted as soon as you withdraw your consent or it is no longer required to fulfil the purpose for which it was collected. The deletion takes place 14 months after the provision of the data.

(4) Recipients: We use technical service providers who act as our processors to operate and maintain our website and to analyse cookies.

Other recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

(5) Third country transfer: Your personal data will be transferred to Google in the USA. In order to protect your data even after transmission, we have concluded standard contractual clauses with the service provider.

(6) Mandatory or required provision: The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

(7) Profiling: With the help of the Google Analytics tracking tool, the behaviour of visitors to the website can be evaluated and their interests analysed. We create a pseudonymised user profile for this purpose.

(8) Withdrawal of consent: You can prevent tracking by Google Analytics on our website by clicking on this link. This will install an opt-out cookie on your device. This will prevent data collection by Google Analytics for this website and for this browser in the future as long as the cookie remains stored in your browser.

You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

§ 16e Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that enables us to manage tags used for tracking and marketing via a single interface. It allows us to quickly deploy and update JavaScript and HTML tags on our website. The Google Tag Manager tool that implements these tags does not set cookies and does not collect any personal data. Rather, it is only used to manage other services, such as Google Analytics. These services may themselves collect data.

Further information on this can be found on the following website: https://marketingplatform.google.com/intl/en/about/analytics/tag-manager/use-policy/.

§ 16f Google Maps

(1) Type and purpose of processing: We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy?hl=en. You can also change your personal data protection settings there in the data protection centre.

Detailed instructions on managing your own data in connection with Google products can be found here: https://www.dataliberation.org

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish to be associated with your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or customised design of its websites. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(2) Revocation of consent: The provider does not currently offer the option of simply opting out or blocking data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

§ 16g Hubspot

(1) Nature and purpose of processing: HubSpot is a software solution that we use to cover various aspects of our online marketing. This includes email marketing, reporting, social media publishing, contact management, landing pages and contact forms. The service is provided by HubSpot Inc, 25 First Street, Cambridge, MA 02141, USA (‘HubSpot’).

The relevant information is stored on the servers of our service provider HubSpot. We can use it to contact website visitors and to determine which of our company's services are of interest to them.

You can find more information about the processing of your data by HubSpot at the following link: https://legal.hubspot.com/privacy-policy.

(2) Legal basis: The legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.

(3) Recipient: The provider Hubspot processes the access data on our behalf for the purpose of user analysis and statistical processing. We have concluded a corresponding order processing contract with the provider for this purpose.

Within our company, those departments that require your data to safeguard legitimate interests or to process your enquiry will have access to it.

(4) Third Country Transfer: While Personal Data is primarily stored and processed in Europe, HubSpot, Inc. is located in the United States, and therefore certain storage and processing may continue outside of that location, including in the United States. HubSpot is certified under the EU-U.S. Data Privacy Framework; the data transfers to HubSpot are therefore covered by the European Commission's adequacy decision for the U.S.

(5) Storage period: Depending on the type of data, it is stored for the duration of the session, 30 minutes, one day, one year or 13 months.

(6) Revocation of consent: If you wish to prevent the use of HubSpot, you can revoke your consent at any time in .

§ 16h LiveChat

(1) Type and purpose of processing: A live chat of the company LiveChat Inc. 101 Arch Street, 8th Floor, Boston MA 02110, United States of America is integrated on our website. You can use the live chat like a contact form to chat with our employees in near real time. In this way, we want to make it easy for you to contact us. When using the chat, personal data is collected, in particular

Date and time of access,
Browser type and version,
IP address,
operating system used,
URL of the previously visited website,
Amount of data sent,
first name, surname and
e-mail address./li>

Depending on the course of the conversation with our employees, further personal data that you have entered may be collected in the chat. The nature of this data depends largely on your enquiry or the problem you describe to us. LiveChat also saves the history of live chats. The purpose of this is to save you the trouble of having to provide extensive details about the history of your enquiry and to ensure the ongoing quality control of our live chat service. If you do not wish this to happen, you are welcome to let us know using the contact details below.

(2) Legal basis: Data processing by LiveChat only takes place if you have given your consent via the cookie banner. The legal basis is therefore your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

(3) Recipient: LiveChat as the recipient of your data transmits your data to the USA. We have concluded standard contractual clauses with LiveChat in order to implement the European data protection regulations and to protect your data adequately even after the transfer. We will provide you with a copy of the standard contractual clauses on request.

For more information about LiveChat and the data collected, please refer to the following link: https://www.livechat.com/legal or LiveChat's privacy policy: https://www.livechat.com/legal/privacy-policy/.

(4) Storage period: Saved live chats will then be deleted by us immediately. Otherwise, your data will be deleted six months after final processing of the enquiry.

(5) Mandatory or required provision: The provision of your data is voluntary, based on your consent. Unfortunately, you cannot use the chat function without providing the data.

(6) Revocation: You can revoke your consent at any time with effect for the future.

§ 16i Facebook Pixel, Facebook Custom Audiences and Facebook-Conversion

(1) Type and purpose of processing: Within our online offering, we use the so-called ‘Facebook pixel’ of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’).

The pixel allows Facebook to determine you as a visitor to our online offering as a target group for the display of adverts (so-called ‘Facebook ads’). We use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called ‘custom audiences’). With the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. Furthermore, we can track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook advert (so-called ‘conversion’).

(2) Legal basis: The legal basis for the processing is your consent in accordance with Art. 6 (1) a GDPR.

(3) Recipients: Each time you visit your profile, personal data, including your IP address, is transferred to Facebook. This personal data is usually stored by Facebook in the USA. Our company does not receive any information from Facebook that could be used to identify the data subject.

We have concluded an order processing contract with Facebook for the processing of the data.

(4) Third country transfer: Facebook processes your data in the USA. Facebook has certified itself in accordance with the EU-U.S. Data Privacy Framework; the data transfers to Facebook are therefore covered by the European Commission's adequacy decision for the USA.

(5) Storage period: Your personal data will only be processed in this context until the purpose of the processing no longer applies or until you have withdrawn your consent.

(6) Revocation: You can revoke your consent at any time with effect for the future. If you no longer wish your data to be collected by the Facebook pixel and used to display Facebook ads, you can generally deactivate this by making the appropriate settings at https://accountscenter.facebook.com/ad_preferences Further information on this can be found in Facebook's privacy policy at https://en-en.facebook.com/policy.php.

Alternatively, you can change your preferences with regard to Facebook pixels .

(7) Provision prescribed or required: The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

§ 16j Proven Expert

(1) Type and purpose of processing: We embed a widget from ProvenExpert on our website. ProvenExpert is an evaluation tool from the provider Expert Systems AG (Quedlinburger Straße 1, 10589 Berlin). We use ProvenExpert to present the ratings and experiences of our customers. Data (IP address, browser information, date and time of access) is sent to ProvenExpert.

Further information on data processing by ProvenExpert can be found in ProvenExpert's privacy policy.

(2) Legal basis: The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

(3) Recipients: We use technical service providers who act as our processors to operate and maintain our website and web shop and to analyse cookies.

(4) Third country transfer: There is no third country transfer. The data is processed exclusively in the EU.

(5) Storage period: Your personal data will only be processed in this context until you withdraw your consen

(6) Mandatory or required provision: The provision of your personal data is voluntary. However, we cannot show you the ratings without your consent.

(7) Revocation of consent: You can revoke your consent for the future at any time in the cookie settings.

§ 16k WooCommerce

(1) Type and purpose of processing: We embed a WooCommerce plugin on our website. WooCommerce is a content management system from the provider Automattic Inc (60 29th Street, San Francisco, CA 94110, USA). We provide our web shop with the help of WooCommerce. Data that you enter in the forms during the ordering process is transmitted to WooCommerce. Other data such as IP address, browser information, date and time of access are also sent to WooCommerce, stored and processed. WooCommerce also uses cookies to identify the user and to ensure the shopping basket function.

(2) Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, our legitimate interest in providing you with the shop, as well as service optimisation and improvement of the shop presentation.

(3) Recipients: We use technical service providers who act as our processors to operate and maintain our website and web shop and to analyse cookies.

(4) Third country transfer: WooCommerce may also process data in the USA. For the USA, there is an EU adequacy decision for companies certified under the Data Privacy Framework. Automattic Inc. is certified according to the Data Privacy Framework.

(5) Storage period: Your personal data will only be processed in this context until the purpose of the processing no longer applies or until you have withdrawn your consent. The storage period of the cookies set can be found in the cookie overview.

(6) Mandatory or required provision: The provision of your personal data is voluntary. However, we cannot provide you with the web shop without your consent.

(7) Right of revocation and objection: You can revoke your consent to us at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Please read the information on your right to object in accordance with Art. 21 GDPR in Section 2 of this privacy policy.

§ 16l YouTube

(1) Type and purpose of processing: We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page on our website that has a YouTube video embedded, a connection to the YouTube or Google servers is automatically established. Depending on the settings, various data is transmitted (e.g. your IP address). If a YouTube video is started, the provider sets cookies that store your IP address and URL, for example.

If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy https://policies.google.com/privacy.

(2) Legal basis: The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

(3) Recipients: We use technical service providers who act as our processors for the operation and maintenance of our website and for the evaluation of cookies.

Other recipients of the data are YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

(4) Third country transfer: Since Google's headquarters are in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. Google is certified in accordance with the EU-U.S. Data Privacy Framework; the transfers take place on the basis of the EU Commission's adequacy decision for the USA.

(5) Storage period: Your personal data will only be processed in this context until the purpose of the processing no longer applies or until you have withdrawn your consent.

(6) Mandatory or required provision: The provision of your personal data is voluntary. However, we can only display the embedded videos if you give your consent.

(7) Revocation of consent: You can revoke your consent for the future at any time in the cookie settings.

§ 16m Microsoft Clarity

(1) Type and purpose of processing: On our website, we use the web analysis tool Microsoft Clarity from the American service provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the European region, the Irish company headquarters Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland is responsible for data protection aspects.

Microsoft Clarity is a tool with which we check the user-friendliness of our website based on a statistical behavioral analysis of the users of our website. Microsoft Clarity records selected user sessions for this purpose. The tool provides measurement values that indicate any problems with user-friendliness. This enables us to better understand user interaction, identify usability problems more quickly and improve the functionality of our website.

The data that Microsoft Clarity processes from the users of our website is as follows

IP address
Location
Browser information
Screen resolution
Language settings
Visited website/subpages
Date/time of access to the website
Clicks, scrolls, mouse movements

We have made appropriate masking settings so that the personal user data collected by Microsoft is pseudonymized, in particular in the form of IP masking. If you are logged in via a Microsoft account, the data collected can be linked to your account so that Microsoft also recognizes and stores your IP address, for example. You can prevent this by logging out of your Microsoft account before visiting our website.

(2) Legal basis: The data is processed on the basis of the user's consent, Art. 6 para. 1 lit. a GDPR.

(3) Recipient: We have concluded an order processing contract with Microsoft Ireland Operations Limited as the recipient of your data, Art. 28 GDPR.

Further information on data processing by Microsoft can be found in Datenschutzbestimmungen von Microsoft. If you would like to learn more about Microsoft Clarity, please read the FAQs.

(4) Third country transfer: Data processing in the USA as a third country is possible. In order to guarantee the level of data protection, Microsoft has concluded the EU standard contractual clauses. For more information about the standard contractual clauses at Microsoft, see Microsoft Compliance - European Union Model Clauses.

(5) Storage duration: Please refer to the following link for the storage duration of cookies: https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention.

(6) Mandatory or required provision: The provision of your data is voluntary, based on your consent. If you prevent access, this may result in functional restrictions on the website.

(7) Revocation: You can revoke your consent at any time with effect for the future. You can deactivate your consent for the relevant cookie category or all technically unnecessary cookies and data transfers here in the cookie consent tool.

§ 17 Final provisions

(1) Data security (TLS): To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.

(2) Changes to our privacy policy: We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

(3) Questions about data protection: If you have any questions about data protection, please send us an email to: datenschutz@deutschakademie.de

DeutschAkademie Sprachschule

hat 4,85 von 5 Sternen 6693 Bewertungen auf ProvenExpert.com