Privacy Policy

We are very pleased about your interest in our language school. A-Z Deutsch Sprachkurse attaches great importance to data protection. The views of the websites of A-Z Deutsch Sprachkurse is possible in all cases without the provision of personal data. But in order to offer a special service via our website, to a person concerned, could require the collection and therefore processing of personal data. If the processing of personal data is required and is for this no legal basis, we will seek the prior consent of the person concerned.

The processing of personal data, e.g. name, address, e-mail, phone number of the person concerned, will be done in accordance with the data protection declaration. And A-Z Deutsch Sprachkurse will handle personal date according to the applicable law on privacy. Through this data protection declaration A-Z Deutsch Sprachkurse will inform the public about the nature, extend and purpose of the collection, processing and use of personal data. By this privacy statement persons concerned will be fully informed about the rights granted to them.

A-Z Deutsch Sprachkurse has as a controller of charge implemented a numerous of technical and organizational measures to ensure a complete protection of personal data processed via this website. Nevertheless internet-based data-transmission can have some security gaps, so that a full protection cannot be guaranteed. For this reason any person concerned is free to transfer their personal data in different ways, e.g. via phone.

1. Definitions

The privacy statement of A-Z Deutsch Sprachkurse is based on definitions that were used by the European regulators and guidelines when the basic Data - Regulation was adopted (DSGVO). Our declaration should be easy to read and understandable for the public as well as for our customers and our buisness partners. To be sure, we will explain some definitions beforehand.

We use in our privacy statement inter alia, the following definitions:

a) personal data / personal information

Personal data is any information about an identified or identifiable person (in the following "person concerned"). As identifiable is considered a specific or definable natural person, who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.

b) Person concerned / data subject

Person concerned is every identified or identifiable natural person, for those whose personal data are processed by the data controller.

c) The Processing of personal data

The processing of personal data and processing mean any operation which is performed upon personal data, carried out with or without the assistance of automated processes, such as collection, recording, organization, storage, adaption or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available alignment or combination, blocking, erasure or destruction.

d) Limitation of processing

The limitation of processing means the marking of stored personal data with the aim of limiting their processing in future.

e) Profiling

Profiling is all processing of personal data, which consists of, the use of this personal data to evaluate specific personal aspects relating to a natural person. In particular to analyze or predict e.g. the residence of a natural person.

f) To make anonymous/ Pseudonymisierung

To make anonymous means to modify personal data in such a way that details of personal or material circumstances can no longer be attributed to an identified or identifiable natural person.

g) Controller or data controller

Controller or data controller means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.

h) Processor

Processor means any body which processes personal data on behalf of the controller.

i) Recipient

Recipient means a natural or legal person, public authority, agency or any body to which data are disclosed.

j) Third parties

Third parties is a natural or legal person, public authority, agency or any body except the person concerned, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.

k) Consent (of the data subject)

The data subject´s consent means any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed.

2. Name and address of the controller/person responsible

The controller/person responsible within the meaning of the General Data Protection Regulation and of other provisions of data protection law is:

A-Z Deutsch Sprachkurse
Colombistr.11
79098 Freiburg
Deutschland

Tel.: +76124699
E-Mail: info@a-z-deutsch.com
Website: https://a-z-deutsch.com

3. Collection of general data and information

The website of A-Z Deutsch Sprachkurse collects a set of general data and information, each time the website is accessed by a person concerned or an automated system. This general data and information is stored in the log files of the server. The data can be seized are the (1) browser types and versions used, (2) the operating system used by the accessing system accesses our website (so-called referrers), (4) the sub-web pages which can be accessed via (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used in the event of attacks on our information technology systems.

By using this general data and information, A-Z Deutsch Sprachkurse do not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack. This anonymously collected data and information is evaluated by A-Z Deutsch Sprachkurse on the one hand statistically and further with the aim to increase the data protection and data security in our company. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

4. Registration on our website

The person concerned has the possibility to register on the website of the data controller by providing personal data. The personal data that will be sent to the controller is derived from the respective input mask used for the registration. The personal data entered by the the person concerned shall be collected and stored solely for internal use by the controller and for his own purposes. The controller may initiate the transfer to one or more processors who also use the personal data solely for internal use attributable to the controller.

By registering on the website of the controller the IP address assigned by the Internet service provider (ISP) of the person concerned, the date and time of registration are also stored. The storage of this data takes place to prevent the misuse of our services. A disclosure of these data to third parties is not happening, unless there is a legal obligation to pass on.

The registration of the data subject through the voluntary stating of personal data, serves the data controller to provide the data subject with content or services that, due to nature of the case, can only be offered to registered users. Registered persons are free to modify the personal data given at registration at any time or to delete it completely from the database of the data controller.

The controller shall, at any time upon request, provide information to each person concerned /data subject as to which personal data about this person is stored. Furthermore, the data controller corrects or deletes personal data at the request or reference of the data subject, insofar as this does not conflict with any statutory storage requirements. All data subjects of the controller are available to the person concerned as a contact person in this context.

5. Contact options via the website

The website of A-Z Deutsch Sprachkurse contains due to legal regulations, information that enables quick electronic contact with our language school as well as direct communication with us, which also includes a general e-mail address. If a person concerned contacts the data controller by e-mail or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal data, voluntarily transmitted by an individual (person concerned) to the controller, is stored for the purpose of processing or contacting the the person concerned (data subject). There is no disclosure of this personal data to third parties.

6. Routine erasure and blocking of personal data

Personal data shall be rectified if inaccurate and, where this is possible and necessary, completed or updated. The data controller only keeps the data for as long as this are necessary with regard to the purpose of the processing of personal data.

Personal data shall be erased or made anonymous when they are no longer required for the purposes for which they were lawfully collected or are lawfully further processed. All personal data will be deleted from databases 1 year after the processing.

7. Rights of the data subject/person concerned

a) Right of confirmation

Each data subject has the right, as granted by the European Regulators, to require the controller to confirm whether personal data relating to him/her is being processed. If a data subject/ person concerned wishes to make use of this right of confirmation, they can contact an employee of the controller at any time.

b) Right of information

Any person concerned by the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, at any time to obtain from the data controller information free of charge on the personal data stored about him and a copy of this information.

Furthermore, the European legislator and regulator has provided the data subject with the following information:

• the purposes of the processing
• the categories of personal data to be collected and processed
• the recipients or categories of recipients, to which the personal data have been disclosed or are yet to be disclosed.
• if possible the planned duration for the storage of personal data, or, in case this is not possible, the criteria to set this duration
• the existence of the right to rectification or erasure of personal data which concerns them or limiting of processing through the responsible person/controller or the right of objection against this processing
• the existence of the right to appeal with regulatory authorities
• if the personal data have not been obtained from the data subject/person concerned: any available information about the origin of personal data
• the existence of an automated decision-making including profiling in accordance to Article 22 (1) and (4) DSGVO and - in least in these cases - meaningful information about the logic as well as about the scale and intended effects of this processing of a person concerned

In addition the data subject/ person concerned has the right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If a person concerned/data subject wishes to exercise this right of information/access, they may at any time contact an employee of the controller.

c) Right of rectification

Every data subject has the right of rectification if his/her personal data is shown to be inaccurate or incomplete. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking in account the purposes of the processing.

If a person concerned wishes to exercise this right of rectification, they may, at any time, contact an employee of the controller.

d) Right of erasure (Right to be forgotten)

Any person affected by the processing of personal data has the right granted from the European directive and regulatory body, to require the controller to delete the personal data concerning him/her without delay, if personal data for the purpose of the data processing are not longer required and regarding of the following aspects:

• The person concerned revokes the consent on which the processing was based on the provisions of Article 6 (1) (a) DSGVO or Article 9 (2) (a) DSGVO and lacks any other legal basis for the processing.
• According to Art. 21 (1) DSGVO, the data subject submits an objection to the processing and there are no legitimate reasons for the processing, or the person concerned objects to the processing pursuant to Art. 21 (2) DSGVO.
• The personal data were processed unlawfully.
• The erasure of personal data is necessary to fulfill a legal obligation under Union or national law wo which the controller is subject.
• The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

If one of the above reasons is correct and a person concerned wishes the erasure of personal data stored at A-Z Deutsch Sprachkurse, they may, at any time, contact an employee of the controller. The employee of A-Z Deutsch Sprachkurse will arrange that the request of erasure be fulfilled immediately.

If personal data has been made public by A-Z Deutsch Sprachkurse and if our company as the person responsible is obliged to delete personal data pursuant to Art. 17 (1) DSGVO, A-Z Deutsch Sprachkurse will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs in order to inform other data controllers processing the published personal data that the data subject has requested the erasure of all links to such personal data or copies or replications of such personal data from those other data controllers unless the processing is required. The staff of A-Z Deutsch Sprachkurse will arrange the necessary in individual cases.

e) Right of restriction of processing

Any person affected by the processing of personal data has the right, granted by the the European directive and regulatory authority, to require the controller to restrict the processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject for a period of time that enables the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to delete the personal data and instead requests the direction of the use of personal data.
• The controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims.
• The person concerned has objection to the processing acc. Art. 21 para. 1 DSGVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored at A-Z Deutsch Sprachkurse, they may, at any time contact the staff. They will cause the restriction of processing.

f) Right to data portability

Any person affected by the processing of personal data shall have the right conferred by the European Directives and Regulations to obtain the personal data concerning him/her provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to transmit this data to another person without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) DSGVO or Art. 9 (2) (a) DSGVO or on a contract pursuant to Article 6 (1) (b) DSGVO and processing by means of automated procedures, unless the processing is necessary for the performance of a public-interest or public-authority task; which has been transferred to the responsible person.

Furthermore, in exercising their right to data portability under Article 20 (1) of the DSGVO, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and if not so the rights and freedoms of others are affected.

To assert the right to data portability, the data subject may at any time contact the staff of A-Z Deutsch Sprachkurse.

g) Right to objection

Any person concerned by the processing of personal data shall have the right conferred by the European directive and regulatory authority at any time, for reasons arising from its particular situation, against the processing of personal data relating to it pursuant to Article 6 (1) (e or f) DSGVO takes an objection. This also applies to profiling based on these provisions.

A-Z Deutsch Sprachkurse no longer processes personal data in the event of an objection, unless we can demonstrate compelling legitimate reasons for processing.

In addition, the data subject has the right, for reasons arising from his/her particular situation, to process personal data concerning A-Z Deutsch Sprachkurse for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DSGVO to object, unless such processing is necessary to fulfill a public interest task.

h) Automated decisions in individual cases including profiling

Any person concerned by the processing of personal data has the right, as granted by the European legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) with the express consent of the data subject.

If the decision (1) is required for the conclusion or performance of a contract between the data subject and the controller or (2) it is done with the express consent of the data subject, A-Z Deutsch Sprachkurse shall take appropriate measures to protect the rights and freedoms and the authorized persons interests of the data subject, including at least the right to obtain intervention of a person by the controller, to express his own position and to contest the decision.

If the data subject wishes to claim automated decision-making rights, they can contact an employee of the controller at any time.

i) Right to revoke a data protection consent

Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to revoke consent to the processing of personal data at any time.

If the data subject wishes to assert their right to withdraw consent, they may, at any time, contact an employee of the controller.

8. Data protection in applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents will be automatically deleted two months after the announcement of the rejection decision, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).

9. Legal basis of processing

Art. 6 I lit. a DSGVO serves our company as the legal basis for processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as the case, for example, in processing operations necessary for the supply of goods, processing shall be based on Art. 6 I lit. b DSGVO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a third party. Then the processing would be based on Art. 6 I lit. d DSGVO. Ultimately, processing operations could be based on Art. 6 I lit. f DSGVO. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and freedoms of the person concerned prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller.

10. Legitimate interests in the processing that are being pursued by the controller or a third party

Is the processing of personal data based on Article 6 I lit. f DSGVO is our legitimate interest in conducting our business for the benefit of all of our employees and our shareholders.

11. Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill contract or to initiate a contract.

12. Legal or contractual provisions for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the data subject to provide personal data; possible consequences of non-provision

We clarify that the provision of personal information is in part required by law (such as tax regulations) or may result from contractual arrangements (such as details of the contractor). Occasionally it may be necessary for a contract to be concluded that an affected person provides us with personal data that must subsequently be processed by us. For example, the data subject is required to provide us with personal information when our company enters into a contract with her. Failure to provide personal data would mean that the contract with the person concerned could not be closed. Prior to any personal data being provided by the person concerned, the person concerned must contact one of our employees. Our employee will inform the individual on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of the non-provision of the personal data.

13. Existence of automated decision-making

As a responsible company we refrain from automatic decision-making or profiling.

Current state: 5.2018

Diese Datenschutzerklärung wurde durch den Datenschutzerklärungs-Generator der DGD Deutsche Gesellschaft für Datenschutz GmbH, die als Externer Datenschutzbeauftragter Schwaben tätig ist, in Kooperation mit den Datenschutz Anwälten der Kanzlei WILDE BEUGER SOLMECKE | Rechtsanwälte erstellt.