Privacy policy
The GLS Campus in Berlin is home to the GLS Language Center.
In order to be able to offer you the services of the GLS Language Center, we naturally also need some data about you. We take the protection of personal data very seriously and always process it in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation. With this privacy policy, we would like to inform you about the type, scope and purpose of the personal data we process and your rights as a data subject.
1.Responsible person and general information
Your data will be processed by GLS Language Centre, owner Barbara Jaeschke, Kastanienallee 82, 10435 Berlin, Telefon: +49 30 78008930, E-Mail: info(at)gls-sprachenzentrum(dot)de (service provider within the meaning of the German Telemedia Act (TMG) and controller within the meaning of the General Data Protection Regulation (GDPR). In this document, ‘GLS Language Centre’ refers to the website www.gls-campus-berlin.de including all subpages, content and functions available there. Our services are intended for the general public.
2. Collection and processing of personal data
As a rule, you can use online services for which no payment or registration is required without providing personal data. In certain cases, however, we process the personal data listed in section 3. This only occurs to the extent necessary to provide a functional website and our content and services. Furthermore, we process personal data in connection with the use of GLS Language Centre if you provide it voluntarily, whether in the context of an enquiry or in the form of a customer review submitted on this website. (see section 4.).
3. Categories of processed data
As soon as you use GLS Language Centre, our system automatically collects information from the computer system of the accessing computer. The following data may be collected in the process:
- Information about the browser type and version used
- Operating system of the user
- Date and time of access
- Web analytics data / pseudonymous usage profiles (Cookie ID, Ad ID, etc.)
- Websites from which the user accessed our website
- Websites that the user visits via our website
In addition, we process the following personal data if a contractual relationship exists between you and us or if you have provided us with the data in another way:
- Personal master data (name, address, date of birth)
- Communication data (telephone number, email address)
- Contract master data (contractual relationship, product or contract interest, order history)
4. Legal Basis and Purposes of Processing
We process your data exclusively based on one or more of the possible legal grounds.
1. Data Controller and General Information
Your data is processed by GLS Sprachenzentrum, owned by Barbara Jaeschke, Kastanienallee 82, 10435 Berlin, Phone: +49 30 78008930, Email: info(at)gls-sprachenzentrum(dot)de (Service provider as defined by the German Telemedia Act (TMG) and Data Controller as defined by the General Data Protection Regulation (GDPR)).
In this document, “GLS Sprachenzentrum” refers to the website www.gls-campus-berlin.de, including all available subpages, content, and functions. Our services are intended for the general public.
2. Data We Process
- Information about the browser type and version used
- Operating system of the user
- Date and time of access
- Web analytics data / pseudonymized usage profiles (Cookie ID, Ad ID, etc.)
- Websites from which the user accessed our website
- Websites the user visits via our website
In addition, we process the following personal data if a contractual relationship exists between you and us or if you have otherwise provided this data:
- Personal master data (name, address, date of birth)
- Contact data (telephone number, email address)
- Contract data (contractual relationship, product or contract interest, order history)
4. Legal Basis and Purposes of Processing
We process your data solely based on one or more legal grounds under GDPR.
Personal data may be processed under GDPR particularly due to a contract or pre-contractual measures, with consent, based on a legitimate interest or legal obligation, or to protect vital or public interests.
When booking an event space or using other paid services, we use your contract data, including contact details, to fulfill and execute the contract. This includes processing necessary for delivering goods, providing services, enforcing legal claims, or fulfilling contractual obligations (Article 6(1)(b) GDPR). The same applies to pre-contractual processing, such as inquiries about our products or services.
For paid services, certain data processing is required by law, such as tax obligations (Article 6(1)(c) GDPR).
We also use the email address provided during registration or contract execution to inform you about similar GLS Sprachenzentrum products and services, existing bookings, or general updates. This processing is based on our legitimate interest in promoting our offerings (Article 6(1)(f) GDPR).
Additionally, we use your email address for our newsletter if you have expressly consented to receive it. In this case, we process your email address to send you the newsletter as requested (Article 6(1)(b) GDPR). You can unsubscribe anytime by contacting newsletter(at)gls-sprachenzentrum(dot)de or writing to Kastanienallee 82, 10435 Berlin.
Every device needs a unique address (IP address) to transfer data online. The temporary storage of your IP address is technically necessary to enable website delivery. We anonymize IP addresses before processing and do not store or process unaltered IP addresses. Our servers store your IP address for 14 days for security purposes.
If processing does not fall under any of the above legal bases, we process data if it is necessary for a legitimate interest and does not override your fundamental rights and freedoms (Article 6(1)(f) GDPR). A legitimate interest exists if the data subject is a customer of the controller.
We use data-driven online advertising and web analytics based on our legitimate interest in offering products tailored to your needs, informing you about new products, and improving our services (Article 6(1)(f) GDPR). See section 9 for details on web analytics services. Another legitimate interest includes maintaining operational functionality (e.g., address management, invoicing).
You can object to processing based on legitimate interest at any time (see section 14).
If data is processed for a purpose different from the one originally specified, we conduct a compatibility check per Article 6(4) GDPR. Further processing is allowed only if it is compatible with the original purpose or legally permitted. Recognized compatible purposes include legal claims, unless outweighed by the data subject’s interests. In such cases, we will notify you of the purpose change. If the new purpose is incompatible, we will collect new consent.
5. Location of Processing
In specific cases, we transfer your data to service providers (e.g., external decorators) when necessary to fulfill a contract (Article 45(1) and Article 49(1)(b) GDPR).
If third parties with whom you have a contractual relationship (e.g., Facebook, if you have an account) transfer data outside the European Economic Area, we are not responsible for and have no control over this.
6. Sharing Your Data with Third Parties
We share your personal data only when necessary to fulfill our contractual obligations, when legally permitted or required, or with your consent.
To provide our services, we may share select personal data within GLS Sprachenzentrum, including the accounting, marketing, and IT departments. If you inquire about accommodation, we will forward your data to the relevant department.
In some cases, we use external service providers or affiliated companies that process data on our behalf under strict GDPR guidelines. These service providers are contractually bound to process data only as instructed and may not use it for other purposes. They provide services such as registration processing, hosting, newsletter distribution, customer reviews, maintenance, support, and web analytics.
Data transfers to service providers occur based on Article 28(1) GDPR or, alternatively, on our legitimate interest in the technical and economic benefits of using specialized processors (Article 6(1)(f) GDPR).
If legally required or permitted, we share data with authorities such as law enforcement (Article 6(1)(c) GDPR). This transfer is based on our legitimate interest in preventing abuse, prosecuting crimes, and enforcing legal claims (Article 6(1)(f) GDPR).
7. Cookies and Similar Technologies
We use cookies—small files stored by your browser—to recognize returning users. With your consent, login details can be stored in cookies, so you don’t need to re-enter them each time. Each cookie has a unique ID that allows websites and servers to distinguish individual browsers.
We use two types of cookies:
Technically necessary cookies, which are essential for website functionality.
Optional cookies, which improve usability and analytics.
Data collected through necessary cookies is not used for user profiling. Analytics cookies help us improve our website by analyzing user behavior (see section 9 for details). We also use tracking cookies when you visit via a partner link to fulfill our agreements.
You can disable cookies anytime via browser settings. Already stored cookies can be deleted through browser settings or software. However, disabling cookies may limit website functionality.
Cookies do not identify you personally. We use them based on our legitimate interest in providing a user-friendly experience and statistical analysis (Article 6(1)(f) GDPR).
8. Web Analytics Services
In order to continuously improve our content and tailor it to the interests of our users, as well as to display usage-based online advertising, we use some analytics services that collect and evaluate data on our website. These service providers process pseudonymized user data under our instructions based on a data processing agreement. The data is not stored together with other personal data of the users. You can deactivate the individual analytics services at any time for the future. Below you can find details about the analytics services we use:
Google Analytics
We have integrated Google Analytics (with anonymization function). Google Analytics is a web analysis service. Web analysis is the collection, gathering, and evaluation of data regarding the behavior of visitors on websites. A web analysis service collects data, for example, about which website a person came from (the so-called referrer), which subpages of the website were accessed, or how often and for how long a subpage was viewed. Web analysis is primarily used to optimize a website and to conduct cost-benefit analysis of online advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. For web analysis via Google Analytics, we use the addition “_gat._anonymizeIp.” This addition shortens and anonymizes the IP address of the user’s internet connection when accessing our websites from a member state of the European Union or from another contracting state of the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the collected data and information, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide additional services related to the use of our website. Google Analytics sets a cookie on the user’s information technology system. What cookies are was explained above. By setting the cookie, Google is enabled to analyze the use of our website. With each call of an individual page of this website, which is operated by us and on which a Google Analytics component is integrated, the internet browser on the user’s information technology system is automatically prompted by the respective Google Analytics component to transmit data for online analysis to Google. As part of this technical process, Google becomes aware of personal data such as the user’s IP address, which is used by Google, among other things, to track the origin of visitors and clicks and to enable commission settlements. Through the cookie, personal information, such as the time of access, the location from which the access originated, and the frequency of visits to our website by the user, is stored. With each visit to our websites, this personal data, including the IP address of the internet connection used by the user, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties. The user can prevent the setting of cookies by our website at any time by adjusting the settings in the browser they use and thus permanently object to the setting of cookies. Such an adjustment to the internet browser used would also prevent Google from setting a cookie on the user’s information technology system. In addition, any cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs. Furthermore, the user has the option to object to and prevent the collection of data generated by Google Analytics and related to the use of this website as well as the processing of this data by Google. To do so, the user must download and install a browser add-on under the link http://tools.google.com/dlpage/gaoptout?hl=de. This browser add-on tells Google Analytics via JavaScript that no data and information on the visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the user’s information technology system is later deleted, formatted, or reinstalled, the user must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or disabled by the user or another person within their control, it is possible to reinstall or reactivate the browser add-on. Further information and the applicable privacy policies of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
9. Social Networks
You can also find us on social networks of third-party companies, such as Facebook or Instagram. In addition, we have integrated some functions of these networks into our online services. However, you can only use these if you are registered and logged in to the respective social network. Please note that the terms of use and privacy policies of these companies apply to the use of the respective social network, over which we have no influence. However, we will explain how such networks process your personal data in this context:
We have integrated components of the company Facebook on this website. Facebook is a social network used for exchanging opinions, experiences, and media. The operating company of Facebook is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For the processing of personal data, the responsible entity is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, if the person concerned lives outside the USA or Canada. When accessing one of the pages of this website, which is operated by us and on which a Facebook component (Facebook plug-in) is integrated, the internet browser on the user’s information technology system is automatically prompted by the respective Facebook component to download the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook becomes aware of which specific subpage of our website the user visits. If the user is logged in to Facebook at the same time, Facebook will recognize which specific subpage of our website the user is visiting with each visit to our website and throughout their stay on the website. This information is collected by the Facebook component and assigned to the respective Facebook account of the user. If the user presses one of the Facebook buttons integrated into our website, such as the “Like” button or posts a comment, Facebook assigns this information to the user’s personal Facebook account and stores this personal data. Facebook always receives information about the visit to our website when the user is logged into Facebook at the time of the website visit, regardless of whether the user clicks the Facebook component or not. If the user does not want the transmission of this information to Facebook, they can prevent it by logging out of their Facebook account before visiting our website. The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing, and use of personal data by Facebook. It also explains what setting options Facebook provides to protect the privacy of the user. Additionally, there are various applications available that allow the suppression of data transmission to Facebook. These applications can be used by the user to prevent data transmission to Facebook. On smartphones and tablets, these services are often not implemented via plug-ins, but through an internal “share” function of the device. Accordingly, information may also be transmitted to other social media providers. For details, please refer to the information provided by your device.
Youtube
On some pages of this website, there are links to YouTube to provide videos and thus illustrative information in an appropriate form. By using the links, you leave the website of GLS Campus in Berlin and are redirected to the YouTube platforms. We have no influence on the privacy policy and data protection regulations of YouTube. Please note the applicable privacy policy on YouTube at https://policies.google.com/privacy?hl=de&gl=de.
On some pages of this website, there are links to Instagram, a service of Facebook. By using the links, you leave the website of GLS Campus in Berlin and are redirected to the Instagram platforms. We have no influence on the privacy policy and data protection regulations of Instagram. Please note the applicable privacy policy on Instagram at https://help.instagram.com/519522125107875?helpref=page_content
10. Payment Service Providers
In the event that you use a paid service or purchase something through our website/app, we offer various payment methods. If you choose to use one of these payment service providers, you will leave our site. All data will then be collected and processed by this payment service provider. We do not receive any personal data, particularly no bank or credit card details, but only the information that the payment has been successfully made. The following payment service providers are available to you:
PayPal
We have integrated the PayPal payment option on this website. PayPal is an online payment service provider operated by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Payments are processed through PayPal accounts, which are virtual private or business accounts. Additionally, PayPal allows virtual payments via credit cards for users who do not have a PayPal account. PayPal enables online payments to third parties or receiving payments. If the affected person selects “PayPal” as a payment option during the ordering process in our online shop, data from the affected person will be automatically transmitted to PayPal. By choosing this payment option, the affected person consents to the transmission of personal data required for payment processing. The personal data typically transmitted to PayPal includes first name, last name, address, email address, IP address, phone number, mobile number, or other data necessary for payment processing. The purpose of transmitting the data is payment processing and fraud prevention. We will transmit personal data to PayPal especially if there is a legitimate interest for the transmission. The personal data exchanged between PayPal and us may be transmitted to credit rating agencies by PayPal. This transmission is for identity and credit checks. PayPal may share personal data with affiliated companies and service providers or subcontractors if necessary to fulfill contractual obligations or for processing data on behalf. The affected person can withdraw consent to the processing of personal data at any time. A withdrawal does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing. The applicable privacy policy of PayPal can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Instant Transfer (Sofortüberweisung)
We have integrated components from Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services online. Sofortüberweisung is a technical procedure that immediately confirms a payment to the online retailer. This allows the retailer to deliver goods, services, or downloads immediately after the order. The operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany. If the affected person selects “Sofortüberweisung” as the payment option during the ordering process in our online shop, data from the affected person will be automatically transmitted to Sofortüberweisung. By selecting this payment option, the affected person consents to the transmission of personal data required for payment processing. When processing the payment via Sofortüberweisung, the buyer transmits the PIN and TAN to Sofort GmbH. Sofortüberweisung then performs a transfer to the online retailer after verifying the account balance and retrieving further data to check for account coverage. The online retailer is then automatically notified of the transaction. The personal data exchanged with Sofortüberweisung includes first name, last name, address, email address, IP address, phone number, mobile number, or other data necessary for payment processing. The purpose of transmitting the data is payment processing and fraud prevention. We will transmit other personal data to Sofortüberweisung if there is a legitimate interest for the transmission. The personal data exchanged between Sofortüberweisung and us may be transmitted to credit rating agencies by Sofortüberweisung. This transmission is for identity and credit checks. Sofortüberweisung may pass on personal data to affiliated companies and service providers or subcontractors if required to fulfill contractual obligations or if the data is processed on behalf. The affected person can withdraw consent to the processing of personal data at any time. A withdrawal does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing. The applicable privacy policy of Sofortüberweisung can be accessed at https://www.klarna.com/sofort/datenschutz/.
11. Other Services
Other services we use include:
Google Maps
We use Google Maps for displaying maps. The integration requires that Google can detect the user’s IP address. The IP address is necessary to send the content to the user’s browser. Please note that Google has its own privacy policy, which is independent of ours. Please inform yourself about Google’s privacy policy before using our website at www.google.de/intl/de/policies/privacy/. Google Maps is based on JavaScript code, so you can prevent the execution altogether by disabling JavaScript in your browser settings or by installing a JavaScript blocker. Please note that our website may not be displayed correctly without JavaScript.
Newsletter2go
We use the service Newsletter2go, a technical service provider who handles the sending of our newsletters. To ensure consensual newsletter distribution, Newsletter2go uses the so-called double opt-in process. In this process, the potential recipient is added to a distribution list. The user then receives a confirmation email to verify their subscription. Only after confirmation, the address is added to the distribution list.
Newsletter2go exclusively uses this data for sending the requested information and offers. As newsletter software, Newsletter2Go is used. Your data is transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters.
Newsletter2Go is a certified German provider, selected according to the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act. More information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/ The consent granted to store data, the email address, and use it to send newsletters can be revoked at any time, for example, via the “unsubscribe” link in the newsletter.
Dialog Shift Chat Bot
Our website uses the chat application from DialogShift GmbH, Torstr. 201, 10115 Berlin. This application processes and stores data for web analysis, running the chat application, and responding to inquiries. For operating the chat function, chat texts are stored, and a cookie with a unique ID is set – this is used to recognize you as a customer. A cookie is a small text file stored locally in the cache of your device. This cookie allows our application to recognize the device and retrieve past chat logs. This cookie is stored for 90 days since the last use. You can deactivate the storage of cookies in your browser settings. However, the chat function will not work without cookies. The disclosure of, for example, name, email address, or phone number is voluntary and with the consent to use this data temporarily for contact purposes until the end of the contact. These personal data are deleted after 90 days. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG based on your consent. DialogShift offers further information about the collection and use of data as well as your rights and privacy protection options at https://www.dialogshift.com/datenschutz.
12. Retention Period
We only store personal data as long as we are entitled to do so and the purpose of processing has not expired. The applicable legal retention period applies to the duration of storing personal data. After the expiration of the period, the corresponding data is routinely deleted, unless it is still necessary for contract fulfillment or contract initiation.
13. Contact Details and Your Rights as the Affected Person
If you have any questions regarding data protection, please contact our data protection officer:
Mr. Dieter Klapproth
Email address: d.klapproth(at)ains-a(dot)de
Access and Rectification
You can request information at any time about whether personal data related to you is being processed by us and which specific data is stored about you, as well as request a copy of the stored data. You can also correct inaccurate data and have it completed.
Deletion, Restriction, and the Right to Be Forgotten
You can request the deletion and restriction of your personal data. Please note that, for example, for paid contracts such as course bookings, there are legal retention obligations, and therefore we may not be able to fully delete your data. In this case, your data will be marked with the aim of restricting its future processing.
Data Portability
If applicable, you also have the right to have your personal data transmitted to you or another responsible party in a structured, commonly used, and machine-readable format, provided the processing is based on consent or a contract and carried out using automated procedures. This does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible party. Furthermore, you have the right to request that personal data be transmitted directly from one responsible party to another, as long as this is technically feasible and does not impair the rights and freedoms of others.
14. Withdrawal / Objection
You can withdraw your consent at any time with effect for the future at the contact address mentioned above. In particular, you can object to the use of your email address for sending newsletters at any time in writing or in text form to newsletter(at)gls-sprachenzentrum(dot)de or GLS Sprachenzentrum, Kastanienallee 82, 10435 Berlin, without incurring any costs other than the transmission costs based on the basic rates. Furthermore, you have the right to object to the processing of your personal data based on legitimate or public interest reasons at any time. This also applies to profiling based on these provisions. We will not process the personal data in case of objection unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the affected person, or the processing serves the assertion, exercise, or defense of legal claims.
If we process personal data for direct marketing purposes, you have the right to object to the processing of your personal data for such purposes at any time at the contact address mentioned above. This also applies to profiling, if related to such direct marketing. Additionally, you have the right to object to the processing of your personal data for scientific or historical research purposes or statistical purposes, unless such processing is necessary for the performance of a task carried out in the public interest.
Right to Complain
You also have the right to lodge a complaint with the competent supervisory authority and the possibility of filing legal remedies. The supervisory authority, where the complaint is lodged, will inform the complainant about the status and results of the complaint, including the possibility of judicial remedies.
Existence of Automated Decision-Making
We do not use automated decision-making or profiling.
As of: May 25, 2018