- Responsible Entity
EinsA Sprachinstitut Berlin Privatsprachschule GmbH
Kommandantenstrasse 80, 10117 Berlin
Email: info@sprachinstitut-berlin.de
Phone: +49 (0)30-555 74 919
Data Protection Officer: Lilian Ong, info@sprachinstitut-berlin.de
- Collection and Storage of Personal Data, and the Nature and Purpose of Their Use
- a) When Visiting the Website
When you access our website www.sprachinstitut-berlin.de, information is automatically sent from your browser to the server of our website. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
The mentioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- For further administrative purposes
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case do we use the collected data for the purpose of drawing conclusions about your person.
- b) When Subscribing to Our Newsletter
If you have expressly consented according to Art. 6 para. 1 lit. a GDPR, we use your email address to send you our newsletter regularly. To receive the newsletter, providing an email address is sufficient.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to info@sprachinstitut-berlin.de by email.
- c) When Using Our Contact Form
If you have any questions, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid email address so that we know who the inquiry is from and to be able to answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out according to Art. 6 para. 1 lit. a GDPR based on your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.
- Transfer of Data
Your personal data will only be transferred to third parties if this is necessary and one of the following legal bases applies:
– Performance of a contract (Art. 6 para. 1 lit. b GDPR): If the transfer is necessary for the processing of a contractual relationship, e.g. for payment processing by payment service providers or for registration for a language course.
– Consent (Art. 6 para. 1 lit. a GDPR): If you have given us your express consent to pass on your data, for example for the sending of marketing material by third parties.
– Legitimate interest (Art. 6 para. 1 lit. f GDPR): If the disclosure is necessary to safeguard our legitimate interests and your interests or fundamental rights do not outweigh this, e.g. for the assertion or defense of legal claims.
– Fulfillment of a legal obligation (Art. 6 para. 1 lit. c GDPR): If we are legally obliged to disclose data to authorities or courts.
Recipients of the data may be:
– Technical service providers (hosting providers, email service providers) who operate our website and communication.
– Payment service providers for processing payments.
– Marketing and analysis partners, if you have given your consent to the use of analysis and tracking tools.
– Authorities or courts if we are legally obliged to disclose them.
We ensure that our partners also comply with high data protection standards. Data is only transferred to third countries (outside the EU) if this is permitted by law and suitable protective measures (e.g. EU standard contractual clauses) have been taken.
Under no circumstances will your data be sold to third parties for advertising purposes.
4 Storage period and data deletion
We only store your personal data for as long as is necessary to fulfill the respective processing purposes or as required by statutory retention obligations. As soon as the purpose of the data processing no longer applies or a statutory storage period expires, the data will be deleted in accordance with the statutory provisions.
- Your rights as a data subject
You have the right
– in accordance with Art. 15 GDPR, to request information about your personal data processed by us;
– in accordance with Art. 16 GDPR, to demand the immediate rectification of incorrect or incomplete personal data stored by us
– in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, provided that there are no legal or contractual retention obligations to the contrary
– in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, provided that the legal requirements for this are met
– in accordance with Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
– in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
– in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You can contact us at any time to exercise your rights.
- Data security
We use technical and organizational security measures to protect your data against manipulation, loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
7 Use of cookies and tracking technologies
Our website uses cookies. These are small files that your browser automatically creates and that are stored on your device when you visit our website.
Cookies are used to make our website more user-friendly and effective. Some cookies are essential for the operation of the website, others enable us to analyze user behavior or serve marketing purposes.
When you visit our website for the first time, you will be informed about the use of cookies by a cookie banner and can use the cookie settings to determine which cookies may be set. You can revoke or adjust your consent at any time in the cookie settings on our website.
The legal basis for the use of cookies is Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. f GDPR (legitimate interest).
8 Third-party providers and external services
We use third-party services such as Google Analytics, Facebook Pixel or payment service providers. These providers may be based in third countries (e.g. the USA), where a lower level of data protection may apply. In such cases, we ensure that suitable protective measures are taken in accordance with the GDPR (e.g. standard contractual clauses of the EU Commission).
Personal data will only be passed on to the extent necessary and in compliance with the applicable data protection laws. Below you will find an overview of the third-party providers we use:
- a) TalentLMS (learning management system)
Provider: Epignosis LLC
Data: Name, e-mail address, course information
Purpose: Administration of training and online courses
Legal basis: Fulfillment of contract (Art. 6 para. 1 lit. b GDPR)
- b) SEMCO (CRM system and invoicing)
Provider: Semco Software GmbH
Data: Name, email address, customer data, invoice details
Purpose: Customer management and invoicing
Legal basis: Performance of a contract (Art. 6 para. 1 lit. b GDPR)
- c) Accounting and tax consultancy (DATEV and WSLP Steuerberatung)
Provider: DATEV eG, WSLP Steuerberatungsgesellschaft
Data: Accounting documents, customer invoices, bank details
Purpose: Financial administration and tax processing
Legal basis: Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)
- d) Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC.
Data: IP address (shortened), usage statistics
Purpose: Analysis of user behaviour to optimize our website
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
Data transmission: Processing outside the EU protected by standard contractual clauses
Opt-out: Click here to deactivate Google Analytics.
- e) Google Ads
We use Google Ads to place ads on the Google network.
Data: IP address, click behavior
Purpose: Success analysis of our advertising campaigns
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
- f) YouTube videos
Videos from YouTube are embedded on our website (Google LLC).
Data: IP address, information on user behavior
Purpose: Provision of multimedia content
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
When a video is played, cookies are set by YouTube.
Further information can be found in Google’s privacy policy.
- g) Payment processing with Stripe and SumUp
For payments, we work together with Stripe, Inc. and SumUp Limited.
Data: Name, payment information, billing details
Purpose: Payment processing
Legal basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR)
Data protection provisions:
- Changes to the privacy policy
We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or new technologies. The current privacy policy can be viewed at any time on our website.
- Contact for data protection inquiries
If you have any questions about data protection, you can reach us using the following contact details
Sprachinstitut Berlin
Kommandantenstrasse 80, 10117 Berlin
Germany
E-mail: info@sprachinstitut-berlin.de