Responsible for data processing is:
Peter and Michael Hughes Sprachdienste GbR
Lindenthaler Straße 7
04155 Leipzig
info@estudia-espana.eu
The protection of your data is of the utmost importance to us. Below you can find out how we handle your data.
Access data and hosting
You can visit our websites without providing any personal information. Each time you visit a page, the web server saves a server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and also documents the request. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer on the website. In accordance with Art. 6 (1) (f) GDPR, this serves to protect our legitimate interests in the correct presentation of our website. All access data is deleted no later than seven days after the end of your visit to the site.
Hosting services by a third-party provider
A third-party provider provides hosting and website presentation services. This serves to protect our legitimate interests in a correct presentation of our service. All data collected in the course of using this website or in forms provided for this purpose on the website, as described below, are processed on its servers. Processing on other servers only takes place within the framework explained here. This service provider is located within a country of the European Union or the European Economic Area.
Collection and use of data for contract processing, contacting us
We collect personal data when you provide it to us as part of your booking or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process the booking, or to process your enquiry and you can not complete the booking or request for contact or information without providing this information to us. Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 (1) (b) GDPR to process the booking and any other requests. After complete processing of the booking or request, your data will be restricted for further processing and deleted after expiry of any retention periods under tax and commercial law, unless you have expressly consented to further use of your data.
Data transfer
When you book one of our language courses, we will transfer your personal data to our local contract partners (e.g. language school, accommodation provider), strictly limited and according to the purpose of use. This also applies to additional information provided by you voluntarily, for example, if we are asked to pass on allergies, intolerances or other information to the host family. This is also the case if the desired destination is outside of the EU. Our partners are independent and have their own data protection regulations, which are additionally subject to the legal system of the respective country. We have no influence on and are not responsible for the data protection of the respective local service providers.
Payment (PayPal)
We offer the option of processing payments via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) (f) GDPR). In this context, we pass on the following data to PayPal insofar as it is necessary for the fulfilment of the contract (Art. 6 (1) (b) GDPR).
PayPal collects the following information: First name, Last name, Address, E-mail address, Telephone number. The processing of the data provided under this section is not required by law or contract. We cannot process a payment via PayPal without the submission of your personal data. If you do not want to use this service, other payment options are available, for example bank transfer.
PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to the legitimate interest of PayPal (pursuant to Art. 6 (1) (f) GDPR) and serves the execution of the contract (pursuant to Art. 6 (1) (b) GDPR). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending.
You can find more information about objection and removal options regarding PayPal at: www.paypal.com/de/webapps/mpp/ua/privacy-full.
Your data will be stored until payment processing is completed. This includes the period required for processing refunds, claims management and fraud prevention.
Email newsletter
If you register for our newsletter, we will use the data required and provided by you to send you the newsletter at an unspecified date and on a regular basis, based on your consent pursuant to Art. 6 (1) (a) GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact address listed below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data.
The newsletter is sent on our behalf by a service provider to whom we pass on your email address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.
Cookies
In order to make the visit to our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests in an optimised presentation of our offer, which prevail in the context of a balancing of interests, in accordance with Art. 6 (1) (f) GDPR. Cookies are small text files that are automatically stored on the devic you use to access our website. Some cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser the next time you visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings, and is described in the browser's help menu, which explains how you can change your cookie settings.
Not accepting cookies may limit the functionality of our website.
Use of Google (Universal) Analytics for web analysis
Insofar as you have given your consent to this in accordance with Art. 6 (1) (a) GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analytics service is provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. After the end of the purpose and the end of the use of Google Analytics by us, the data collected in this context will be deleted. Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here: www.privacyshield.gov/list. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with future effect by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. This will prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.
If you have given your consent to this in accordance with Art. 6 (1) (a) GDPR, this website also uses Google Signals. This is an extension function of Google Analytics that enables so-called "cross-device tracking". This means that, insofar as your internet-enabled devices are linked to your Google account, Google can create reports on usage behaviour (in particular cross-device user numbers), even if you change your terminal device. For this purpose, Google uses data if you have activated the setting "personalised advertising" in your Google account.
Online marketing
Google Ads Remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. If you have given us your consent for this in accordance with Art. 6 (1) (a) GDPR, the so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous CookieID and on the basis of the pages you have visited. After the end of the purpose and the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.
Any further data processing will only take place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalise ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.
Google Ads is an offering of Google Ireland Limited, a company incorporated and operated under the laws of Ireland with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here: www.privacyshield.gov/list. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with future effect by deactivating the remarketing cookie via this link: myadcenter.google.com/. In addition, you can obtain information from the Digital Advertising Alliance about the setting of cookies and make settings in this regard.
Live chat tool
If you use the live chat tool to contact us, the data you voluntarily enter there (name, email address, message) will be processed by us in accordance with Art. 6 (1) (b) GDPR for the purpose of answering the inquiry within the scope of contract processing. In addition, the use of this tool serves to protect our legitimate interests in effective and improved customer communication, which prevail in the context of a balancing of interests, pursuant to Art. 6 (1) (f) GDPR. The data is subsequently deleted.
In the context of processing on our behalf, the third-party provider renders the services for us to provide the live chat tool. All data collected in the course of using the chat tool is processed on its servers.
Google Maps
This website uses Google Maps to visually display geographical information. Google Maps is a service provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This serves to protect our legitimate interests in an optimised presentation of our offer and easy accessibility of our locations, which outweigh our interests in accordance with Art. 6 (1) (f) GDPR.
When using Google Maps, Google transmits or processes data about the use of the Maps functions by website visitors, which may include in particular the IP address and location data. We have no influence on this data processing.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
To deactivate the Google Maps service and thus prevent data transfer to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent.
Further information about data processing by Google can be found in Google's privacy policy. The terms of use for Google Maps contain detailed information about the map service.
Data processing takes place on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.
Your rights as a data subject
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (f) GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR, which may take place, for example, for customer advice and support. If you object, we will no longer process your personal data. In addition, according to Art. 15 or Art. 21 GDPR, you have a permanent right to withdraw your consent to data processing for further purposes, should you have given us consent of this form.
In these cases, please contact
Peter and Michael Hughes Sprachdienste GbR
Dufourstr. 33
04107 Leipzig
info@estudia-espana.eu
Should you wish to contact the competent supervisory authority regarding a question relating to the processing of your data, this is the Saxon Data Protection Commissioner, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, www.datenschutz.sachsen.de, saechsdsb@slt.sachsen.de
