Datenschutz­erklärung

In order to provide you with the services of the GLS Sprachenzentrum, we naturally need some information about you. We take the protection of personal data very seriously and always process it in accordance with applicable privacy regulations, in particular the EU General Data Protection Regulation. With this Privacy Policy, we would like to inform you about the nature, scope, and purpose of the personal data we process, as well as your rights as a data subject.

1. Data Controller and General Information

Your data is processed by GLS Sprachenzentrum, owned by Barbara Jaeschke, Kastanienallee 82, 10435 Berlin, Phone: +49 30 78008930, Email: info(at)GLS Sprachenzentrum(dot)de (service provider as defined by the German Telemedia Act (TMG) and data controller as defined by the General Data Protection Regulation (GDPR)). In this document, “GLS Sprachenzentrum” refers to the website www.gls-campus.berlin, including all subpages, content, and features available there (e.g., the booking feature). Our services are intended for the general public. Since minors may also use our services, such as language courses, we collect data from minors only with the consent of their legal guardians.

2. Collection and Processing of Personal Data

As a general rule, you can use online services that do not require payment or registration without providing any personal data. In certain cases, however, we process the personal data listed in Section 3. This is generally done only to the extent necessary to provide a fully functional website as well as our content and services. Furthermore, we process personal data in connection with the use of the GLS Sprachenzentrum if you provide it voluntarily—for example, when submitting an inquiry or booking a language course—or if there is another legal basis for doing so (see Section 4.). If you do not wish to do so, unfortunately you will not be able to use our services, or at least not to their full extent.

3. Categories of Processed Data

As soon as you use the GLS Sprachenzentrum, our system automatically collects information from the computer system of the device you are using to access the site. The following data, among others, may be collected:

• Information about the browser type and version being used
• User’s Operating System
• Date and time of access
• Web analytics data / pseudonymous user profiles (cookie ID, ad ID, etc.)
• Websites from which users access our website
• Websites that users visit via our website

In addition, we process the following personal data if a contractual relationship exists between you and us or if you have otherwise provided the data to us:

• Personal Master Data (Name, Address, Date of Birth)
• Contact information (phone number, email address)
• Contract Master Data (Contract Relationship, Product or Contract Interest, Order History)
• Personal data, to the extent necessary for the performance of the contract (this also includes sensitive personal data, such as allergies or food intolerances, which must be known in advance for the purpose of booking a product or placement in a private household)

4. Legal Basis and Purposes of Processing

We process your data solely on the basis of one or more of the following legal grounds:

Under the GDPR, personal data may be processed, in particular, on the basis of a contract or for the purpose of taking steps prior to entering into a contract, where consent has been given, on the basis of a legitimate interest or a legal requirement, or to protect vital interests or public interests.

When you book a language course or accommodations, or when you use other paid services, we use your contract master data—including your contact information—to execute and fulfill the contract, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, as well as for the enforcement of legal claims or demands (Art. 6(1)(b) GDPR). The same applies to processing operations necessary for the implementation of precontractual measures, such as in cases of inquiries regarding our products or services. In the case of paid services, we process certain data because we are subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations (Art. 6(1)(c) GDPR).

We also use the email address you provided during registration or in connection with the performance of the contract to inform you via email about our own similar products or services, as well as about existing reservations or, more generally, about the GLS Sprachenzentrum. In this case, the processing of your email address is based on our legitimate interest in promoting our products and services (Art. 6(1)(f) GDPR).

In addition, we use your email address to send you our newsletter if you have previously given us your express consent to receive a newsletter or promotional materials. In this case, we process your email address so that we can send you the newsletter as requested (Art. 6(1)(b) of the GDPR). You may object to the use of your email address for such purposes at any time in writing or in text form by contacting newsletter(at)GLS Sprachenzentrum(dot)de or Kastanienallee 82, 10435 Berlin, with future effect, without incurring any costs other than the transmission costs according to the standard rates.

On the Internet, every device requires a unique address—known as an IP address—to transmit data. The storage of the IP address, at least temporarily, is technically necessary to enable the website to be delivered to the user’s computer. We truncate the IP addresses before any processing takes place and process them only in anonymized form. The full IP addresses are neither stored nor further processed. Our servers also store your IP address for 14 days for our own security purposes.

In the case of processing operations that are not covered by any or several of the aforementioned legal bases, processing may take place if it is necessary to safeguard a legitimate interest and, based on a comprehensive balancing of interests, your interests, fundamental rights and freedoms do not override them (Art. 6(1)(f) GDPR). A legitimate interest is presumed to exist if the data subject is a customer of the controller. If the processing of personal data is based on this, our legitimate interest is, in particular, the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders.

Our legitimate interest in being able to offer you products tailored to your needs, inform you about new products, and continuously improve our services—and thereby also increase our revenue—is the legal basis for processing data for usage-based online advertising and web analytics. For details on web analytics services, see Section 9. Another legitimate interest is the functionality of business processes (e.g., address management / invoicing).

You may object to processing based on a legitimate interest at any time (see Section 14).

In the event that the data is processed for a purpose other than that specified at the time of data collection, a compatibility assessment is conducted in accordance with Article 6(4) of the GDPR. Further processing is then permitted only if the original purpose is compatible with the new purpose or is authorized on the basis of a separate legal basis. Recognized compatible purposes include, among others, the assertion, exercise, or defense of civil law claims, provided that no overriding interest of the data subject exists. In this case, we will inform you of the change in purpose. If the new purpose is not compatible with the purpose stated at the time of collection, new data will be collected based on a new legal basis. In this case as well, we will inform you of the change in purpose.

5. Location of Processing

In certain cases, we transfer your data to partner schools abroad to the extent necessary to fulfill the contract (in accordance with Article 45(1) and Article 49(1)(b) of the GDPR). We have no knowledge of or control over whether third parties with whom you have your own contractual relationship (such as Facebook, if you have a Facebook account) transfer data to countries outside the European Economic Area.

6. Disclosure of Your Information to Third Parties

We will only disclose your personal data to third parties if such disclosure is necessary to fulfill our contractual obligations to you and is clearly made through or in conjunction with another provider, if we are otherwise legally authorized or obligated to disclose it, or if you have given us your consent to do so.

To fulfill your study abroad program booked through the GLS Sprachenzentrum, we share only the personal data necessary for its execution with individual service providers; depending on the booking, these may include, for example, language schools, partner organizations, travel agencies, tour operators, airlines, hotels, accommodation providers, internship placement agencies, etc.

Depending on the destination booked, personal data may be transferred to a third country outside the EU to the extent necessary to fulfill the contract for the booked trip abroad. Similarly, the transfer of data to government institutions and authorities entitled to receive such information takes place only within the scope of statutory disclosure obligations or pursuant to a court order requiring disclosure.

In order to provide our services, selected personal data may be shared within our company with specific departments. These include accounting, marketing, and IT. Once you have decided to book accommodations, we will forward your data within the company to the appropriate department responsible for hotel and apartment accommodations.

In certain cases, we also engage external service providers or affiliated companies that we have commissioned to process data on our behalf in accordance with our instructions. We contractually bind such service providers as data processors in accordance with the strict requirements of the GDPR, and they are not permitted to use your data for any other purposes. The data processors we use provide the following services for us in particular: registration services, hosting, newsletter distribution, review services, maintenance and support, and web analytics.

The transfer of data to processors is based on Article 28(1) of the GDPR, or, alternatively, on our legitimate interest in the economic and technical benefits associated with the use of specialized processors, pursuant to Article 6(1)(f) of the GDPR. To the extent that we are legally required to do so or it is permitted under data protection law, we transfer personal data to public authorities, such as the police or the public prosecutor’s office (Article 6(1)(c) of the GDPR). The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offenses, and securing, asserting, and enforcing claims, provided that your rights and interests in the protection of your personal data do not override these interests, Art. 6(1)(f) GDPR.

7. Cookies and Similar Technologies

We use cookies. Cookies are small files that your browser stores on your device in a designated directory. Among other things, they allow us to determine whether you have visited a website before. If you consent, cookies can also store login credentials for an online service, so that you do not have to enter these credentials every time you visit the site. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the visited websites and servers to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID.

We use two types of cookies: technically necessary cookies, without which the functionality of our website would be limited, and optional cookies, which help us make our website more user-friendly. The user data collected by technically necessary cookies is not used to create user profiles. We use analytics cookies to improve the quality of our website and its content. These cookies help us understand how the website is used, allowing us to continuously optimize our offerings. Further information on the individual analytics services can be found in Section 9 of this Privacy Policy. Additionally, we use a so-called tracking cookie when you access our website via a link from a partner. This is done to fulfill our contractual obligations to the partner.

You can prevent us from setting cookies at any time by adjusting the settings in your web browser, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using a web browser or other software programs. This is possible in all common web browsers. If you disable cookies in your web browser, you may not be able to use all features of our website to their full extent.

Cookies cannot identify you personally. In any case, the use of cookies is justified on the basis of our legitimate interest in tailoring the website to user needs and in the statistical analysis conducted by GLS Sprachenzentrum (Art. 6(1)(f) GDPR).

8. Web Analytics Services

To continuously improve our content, tailor it to our users’ interests, and display usage-based online advertising, we use several analytics services that collect and analyze data on our website on our behalf. These service providers process pseudonymized user data in accordance with our instructions, based on a data processing agreement. The data is not stored together with any other personal data belonging to users. You can disable the individual analytics services at any time with future effect. Below, you can find details about the analytics services we use:

Google AdWords

We have integrated Google AdWords into this website. Google AdWords is an online advertising service that allows advertisers to place ads both in Google’s search results and on the Google Display Network. Google AdWords enables an advertiser to specify certain keywords in advance, so that an ad is displayed in Google’s search results only when a user enters a search query containing one of those keywords. Within the Google Display Network, ads are distributed to thematically relevant websites using an automated algorithm and based on the previously specified keywords. The operator of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our website by displaying interest-based advertisements on third-party websites and in Google search results, as well as by displaying third-party advertisements on our website. If a data subject arrives at our website via a Google ad, Google places a so-called conversion cookie on the data subject’s computer system. What cookies are has already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain subpages—such as the shopping cart of an online store system—on our website have been accessed. The conversion cookie allows both us and Google to track whether a data subject who arrived at our website via an AdWords ad generated revenue—that is, whether they completed or abandoned a purchase.

The data and information collected through the use of the conversion cookie are used by Google to generate visitor statistics for our website. We, in turn, use these visitor statistics to determine the total number of users who were referred to us via AdWords ads—that is, to assess the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.

The conversion cookie is used to store personal information, such as the websites visited by the data subject. Consequently, each time our websites are visited, personal data—including the IP address of the Internet connection used by the data subject—is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, disclose this personal data—collected through technical means—to third parties.

As described above, the data subject may at any time prevent our website from setting cookies by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Such a setting in the user’s web browser would also prevent Google from setting a conversion cookie on the data subject’s computer system. In addition, a cookie already set by Google AdWords can be deleted at any time via the web browser or other software programs.

In addition, the data subject has the option to opt out of interest-based advertising by Google. To do so, the data subject must visit the link https://www.google.de/settings/ads from each of the web browsers they use and configure the desired settings there. Additional information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

Google Analytics

We have integrated Google Analytics (with the anonymization feature). Google Analytics is a web analytics service. Web analytics refers to the collection, gathering, and analysis of data regarding the behavior of website visitors. Among other things, a web analytics service collects data on which website a user came from (known as a “referrer”), which subpages of the website were accessed, and how often and for how long a subpage was viewed. Web analytics is primarily used to optimize a website and to perform cost-benefit analyses of Internet advertising. The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. For web analytics via Google Analytics, we use the add-on “_gat._anonymizeIp” for web analytics via Google Analytics. This suffix causes Google to truncate and anonymize the IP address of the data subject’s Internet connection when access to our websites occurs from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information collected, among other things, to evaluate the use of our website, to compile online reports for us that illustrate activity on our websites, and to provide other services related to the use of our website. Google Analytics places a cookie on the data subject’s computer system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time a user visits one of the individual pages of this website—which is operated by us and on which a Google Analytics component has been integrated—the internet browser on the data subject’s computer is automatically prompted by the respective Google Analytics component to to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains personal data, such as the data subject’s IP address, which Google uses, among other things, to trace the origin of visitors and clicks and, consequently, to facilitate commission settlements. The cookie is used to store personal information, such as the time of access, the location from which access originated, and the frequency of the data subject’s visits to our website. Each time our websites are visited, this personal data—including the IP address of the internet connection used by the data subject—is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, disclose this personal data collected through the technical process to third parties. As described above, the data subject may prevent our website from setting cookies at any time by adjusting the settings of the internet browser being used, thereby permanently objecting to the setting of cookies. Such a setting in the internet browser would also prevent Google from setting a cookie on the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs. Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics regarding the use of this website, as well as to the processing of such data by Google, and to prevent such collection and processing. To do so, the data subject must install a browser add-on available at the link Download and install http://tools.google.com/dlpage/gaoptout?hl=de. This browser add-on uses JavaScript to instruct Google Analytics not to transmit any data or information regarding website visits to Google Analytics. Google considers the installation of the browser add-on to be an objection. If the data subject’s information technology system is subsequently deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their control, it is possible to reinstall or reactivate the browser add-on. Further information and Google’s applicable Privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link: https://www.google.com/intl/de_de/analytics/.

9. Social Networks

You can also find us on third-party social networks, such as Facebook or Instagram. In addition, we have integrated certain features of these networks into our online services. However, you can only use either of these options if you are registered with and logged into the respective social network. Please note that the terms of use and privacy policies of the respective social media platform apply to your use of that platform, and we have no control over them. However, we’re happy to explain how these platforms process your personal data in this context:

Facebook

We have integrated components from Facebook into this website. Facebook is a social network designed for sharing opinions, experiences, and media. Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject resides outside the United States or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Each time a user visits one of the individual pages of this website—which is operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the internet browser on the data subject’s IT system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook learns which specific subpage of our website the data subject is visiting. If the data subject is logged into Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of their visit to our website. This information is collected by the Facebook component and assigned by Facebook to the data subject’s respective Facebook account. If the data subject clicks one of the Facebook buttons integrated into our website—such as the “Like” button—or posts a comment, Facebook associates this information with the data subject’s personal Facebook account and stores this personal data. Facebook receives information via the Facebook component that the data subject has visited our website whenever the data subject is logged into Facebook at the same time as accessing our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not wish for this information to be transmitted to Facebook, they can prevent such transmission by logging out of their Facebook account before visiting our website. Facebook’s Privacy Policy, available at https://de-de.facebook.com/about/privacy/, provides information about Facebook’s collection, processing, and use of personal data. It also explains the settings Facebook offers to protect the data subject’s privacy. In addition, various applications are available that allow users to prevent data from being transmitted to Facebook. The data subject may use such applications to prevent data from being transmitted to Facebook. On smartphones and tablets, the aforementioned services are often implemented not through plug-ins but through a device-internal “Share” function. Depending on the settings of this function, information may also be shared with other social media service providers. Please refer to your device’s settings for details.

YouTube

Some pages on this website contain links to YouTube in order to provide videos and, through them, visual information in an appropriate format. When you click on these links, you will leave the GLS Campus Berlin website and be redirected to YouTube’s platforms. We have no control over YouTube’s Privacy practices or privacy policy. Therefore, please review the privacy policy currently in effect there: policies.google.com/privacy;

Instagram

Some parts of this website contain links to Instagram, a service provided by Facebook. When you click on these links, you will leave the GLS Campus Berlin website and be redirected to Instagram’s platforms. We have no control over Instagram’s Privacy practices or privacy policy. Therefore, please refer to the currently valid privacy policy available there: help.instagram.com/519522125107875;

10. Payment Service Providers

If you use a paid service or make a purchase through our website or app, we offer various payment methods. If you choose to use one of these payment service providers, you will leave our site. All data will then be collected and processed by that payment service provider. We do not receive any personal data—in particular, no bank or credit card information—but only the confirmation that the payment was successfully processed. The following payment service providers are available to you:

PayPal

We have integrated PayPal as a payment option on this website. PayPal is an online payment service provider operated by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Payments are processed through so-called PayPal accounts, which are virtual personal or business accounts. PayPal also allows users to make virtual payments via credit cards if they do not have a PayPal account. PayPal enables users to initiate online payments to third parties or to receive payments. If the data subject selects “PayPal” as the payment method during the ordering process in our online store, the data subject’s information is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data necessary for payment processing. The personal data transmitted to PayPal generally includes first name, last name, address, email address, IP address, phone number, cell phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the fulfillment of the service contract. The purpose of transmitting this data is to process payments and prevent fraud. We will transfer personal data to PayPal in particular when there is a legitimate interest in doing so. The personal data exchanged between PayPal and us may be transferred by PayPal to credit bureaus. The purpose of this transfer is to verify identity and creditworthiness. PayPal may disclose personal data to affiliated companies, service providers, or subcontractors to the extent necessary to fulfill contractual obligations or where the data is to be processed on its behalf. The data subject may revoke their consent to the processing of personal data by PayPal at any time. A revocation does not affect personal data that must be processed, used, or transmitted for the mandatory (contractual) processing of payments. PayPal’s current privacy policy can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Instant Transfer

We have integrated Sofortüberweisung components into this website. Sofortüberweisung is a payment service that enables cashless payments for products and services on the Internet. Sofortüberweisung utilizes a technical process through which the online merchant immediately receives payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order is placed. The operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany. If the data subject selects “Sofortüberweisung” as the payment method during the ordering process in our online store, the data subject’s data is automatically transmitted to Sofortüberweisung. By selecting this payment option, the data subject consents to the transfer of personal data necessary for payment processing. When completing the purchase via Sofortüberweisung, the buyer transmits the PIN and the TAN to Sofort GmbH. Sofortüberweisung then, after technically verifying the account balance and retrieving additional data to check for sufficient funds, executes a transfer to the online merchant. The online merchant is then automatically notified of the completion of the financial transaction. The personal data exchanged with Sofortüberweisung includes first name, last name, address, email address, IP address, phone number, cell phone number, or other data necessary for payment processing. The purpose of this data transfer is to process payments and prevent fraud. We will also transfer other personal data to Sofortüberweisung if there is a legitimate interest in doing so. The personal data exchanged between Sofortüberweisung and us may be transferred by Sofortüberweisung to credit bureaus. The purpose of this transfer is to verify identity and creditworthiness. Sofortüberweisung may disclose personal data to affiliated companies, service providers, or subcontractors to the extent necessary to fulfill contractual obligations or where the data is to be processed on its behalf. The data subject has the option to revoke their consent to the processing of personal data at any time by notifying Sofortüberweisung. A revocation does not affect personal data that must be processed, used, or transmitted for the purpose of (contractual) payment processing. Sofortüberweisung’s current privacy policy can be accessed at https://www.klarna.com/sofort/privacy /.

11. Other Services

Other services we use include:

Google Maps

We use Google Maps to display maps. This integration requires that Google be able to collect users’ IP addresses. The IP address is necessary to send the content to the user’s browser. Please note that Google has its own privacy policy, which is independent of ours. Before using our website, please review Google’s privacy policy at www.google.de/intl/de/policies/privacy/. Google Maps relies on JavaScript code, so you can prevent it from running entirely by disabling JavaScript in your browser settings or by installing a JavaScript blocker. Please note that our website may not display correctly if you do so.

Newsletter2go

We use the service Newsletter2go, a technical service provider that handles the distribution of our newsletter on our behalf. To ensure that newsletters are sent only with the recipient’s consent, Newsletter2go uses the so-called double opt-in procedure. As part of this process, the potential recipient is added to a mailing list. The user then receives a confirmation email giving them the opportunity to confirm their subscription in a legally compliant manner. Only after confirmation is the email address actively added to the mailing list.

Newsletter2Go uses this data exclusively to send the requested information and offers. Newsletter2Go is used as the newsletter software. Your data is transmitted to Newsletter2Go GmbH in this process. Newsletter2Go is prohibited from selling your data or using it for any purpose other than sending newsletters.

Newsletter2Go is a German, certified provider that was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. For more information, click here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/ You may revoke your consent to the storage of your data and email address, as well as their use for sending the newsletter, at any time—for example, by clicking the “Unsubscribe” link in the newsletter.

12. Retention Period

We store personal data only for as long as we are authorized to do so and the purpose of processing remains valid. The applicable statutory retention period governs the duration of personal data storage. Once this period has expired, the relevant data is routinely deleted, provided it is no longer necessary for the performance of a contract or for entering into a contract.

13. Contact Information and Your Rights as a Data Subject

If you have any questions regarding Privacy, please contact our Data Protection Officer:

Mr. Dieter Klapproth
Email address: d.klapproth(at)ains-a(dot)de

Information and Correction

You may contact us at any time, free of charge, to find out whether we are processing personal data about you, to learn specifically what data we have stored about you, and to request a copy of the stored data. You may also have any inaccurate data corrected or supplemented.

Erasure, Restriction, and the Right to Be Forgotten

You may request the deletion or restriction of your personal data. Please note that there are legal retention requirements, for example, for paid contracts such as course registrations, and therefore we may not be able to completely delete your data in every case. In such cases, your data will be marked to restrict its future processing.

Data Portability

Where applicable, you also have the right to have the personal data concerning you transmitted to you or to another controller in a structured, commonly used, and machine-readable format, provided that the processing is based on consent or a contract and is carried out using automated means. However, this does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, you have the right to have your personal data transmitted directly from one data controller to another, provided this is technically feasible and does not infringe upon the rights and freedoms of others.

14. Revocation / Objection

You may revoke the consents you have provided at any time, effective for the future, by contacting us at the address listed above. In particular, you may object to the use of your email address for the purpose of sending newsletters at any time in writing or in text form to newsletter(at)gls-sprachenzentrum(dot)de or GLS Sprachenzentrum, Kastanienallee 82, 10435 Berlin, with effect for the future, without incurring any costs other than the transmission costs according to the standard rates. Furthermore, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of a legitimate or public interest. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes by contacting us at the address listed above. This also applies to profiling to the extent that it is related to such direct marketing. In addition, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data by us for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task carried out in the public interest.

Right to File a Complaint

In addition, you have the right to file a complaint with the competent supervisory authority and the option to seek legal remedies. The supervisory authority to which the complaint was submitted will inform the complainant of the status and outcome of the complaint, including the possibility of seeking legal remedies in court.

Existence of Automated Decision-Making

We do not use automated decision-making or profiling.

As of May 25, 2018