Privacy Policy

of Sprachschule Aktiv München

The controllers responsible for data processing within the meaning of data protection law are:

Iryna Basarab & Dina Kaminidi
Owners of Sprachschule Aktiv München GbR
Heßstraße 90, 80797 Munich, Germany

Contact

Phone: +49 (089) 20 06 24 35
Fax: +49 (089) 20 06 24 54
E-mail: kontakt@sprachschule-aktiv-muenchen.de

Collection of General Information

When you access our website, information of a general nature is automatically collected. This information (server log files) includes, in particular, your IP address, the type of browser used, the operating system used, the domain name of your internet service provider, the date and time of access, and similar details. This is information that, as a rule, does not allow any direct conclusions to be drawn about your identity. This information is technically necessary to correctly deliver the content you request from websites and is inevitably generated when using the internet. The legal basis for the temporary storage of this data is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and secure operation of our website). Server log files are stored for a period of [retention period to be added once confirmed by our hosting provider] and are then deleted.

Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website.

The host is used for the purposes of fulfilling our contract with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our host processes your data only to the extent necessary to fulfil its contractual obligations and follows our instructions with respect to this data. We have entered into a data processing agreement (DPA) with our host.

.

Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored by your browser. Some cookies are technically necessary, others are used to embed external content or to analyse the use of our website.

Insofar as cookies are required to provide certain functions requested by you, they are stored on the basis of Art. 6(1)(f) GDPR. For all other cookies (external media, statistics, marketing), your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG is the legal basis.

We use the cookie consent tool Borlabs Cookie. On your first visit to our website, you are asked via a consent banner which categories of cookies you wish to accept. Non-essential cookies are only loaded after you have given your consent. You can withdraw or change your consent at any time via the “Cookie Settings” link in the footer of this website or via the cookie icon.

Cookie Settings and Services Used

Below you will find an overview of the services currently in use, grouped by the categories of our consent tool.

Essential
These cookies are necessary for the operation of the website and cannot be disabled.

  • Sprachschule Aktiv München (cookie consent management, Borlabs Cookie)

External Media
These services embed content from external platforms (e.g. maps, videos, social media posts). They are only loaded after your consent.

  • Facebook – Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. More information: Facebook Privacy Policy.
  • Google Maps – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google Privacy Policy.
  • Instagram – Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. More information: Instagram Privacy Policy.
  • OpenStreetMap – OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, UK. More information: OpenStreetMap Privacy Policy.
  • Twitter (X) – X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. More information: X Privacy Policy.
  • Vimeo – Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA. More information: Vimeo Privacy Policy.
  • YouTube – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google Privacy Policy.

Where consent is given, loading this content establishes a connection to the servers of the respective provider. The provider thereby receives information that you have visited our website. For further information, please refer to the privacy notices of the respective provider.

Transfer of Data to Third Countries: Most of the providers listed above (including Facebook, Google, Vimeo, YouTube) are based in, or are subsidiaries of companies based in, the USA. When using these services, a transfer of your personal data to the USA cannot be ruled out. To our knowledge, these providers are certified under the EU-US Data Privacy Framework and/or rely on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure an adequate level of data protection. A copy of the relevant safeguards can be viewed via the respective provider’s privacy policy.

Statistics
These services help us understand and improve the use of our website. Data is only collected with your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).

  • Google Analytics – Google Ireland Limited. We use Google Analytics for anonymised analysis of user behaviour on our website. The IP address is shortened prior to processing, so that no direct personal reference can be established. More information: Google Privacy Policy.
  • Microsoft Clarity – Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity creates anonymised heatmaps and session recordings to help us understand how visitors use our website. More information: Microsoft Privacy Statement.

Marketing
We currently do not use any marketing cookies.

Registration on Our Website

When registering to use our personalised services, we collect some personal data, such as name, address, and contact and communication details such as phone number and e-mail address. Registered users also have the option to change or delete the data provided at registration at any time as needed. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Please use the contact details given at the end of this Privacy Policy to get in touch regarding this.

Provision of Paid Services

To provide paid services, we request additional data from you, such as payment details.

Payment Processing via PayPal

When paying via PayPal, we transmit your payment data as part of the payment process to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). This transfer is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). PayPal may pass the data on to its own subcontractors, insofar as this is necessary to fulfil contractual obligations or the data is to be processed on PayPal’s behalf. For further information on data processing by PayPal, please see PayPal’s privacy policy at https://www.paypal.com/ie/webapps/mpp/ua/privacy-full.

SSL Encryption

To protect the security of your data during transmission, we use encryption methods that reflect the current state of the art (e.g. SSL) via HTTPS.

Data Security

We take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Google Fonts

This website uses so-called Google Fonts to ensure a consistent display of typefaces.  Where fonts are loaded from a Google server (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), your browser establishes a connection to Google’s servers each time our website is accessed. In doing so, your IP address is also transmitted to Google. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interest in a technically consistent and visually appealing presentation of our website). More information on Google Fonts can be found at https://policies.google.com/privacy.

Social Media Buttons

We offer you the option of using social media buttons from the following providers on our website:

  • Facebook – Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. More information: Facebook Privacy Policy.
  • Instagram – Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. More information: Instagram Privacy Policy.
  • Twitter (X) – X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. More information: X Privacy Policy.
  • YouTube – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google Privacy Policy.
  • TikTok – TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland. More information: TikTok Privacy Policy.
  • WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). More information: WhatsApp Privacy Policy.
  • [LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA – to be confirmed whether active. If yes: LinkedIn Privacy Policy]

These buttons are embedded purely as graphics with a link. Only by clicking on the graphic are you redirected to the respective provider’s services, and only then is data transmitted to that provider. As long as you do not click on the graphic, no data exchange with the respective provider takes place.

Comment Function

If users leave comments on the blog, the time of creation and the username previously chosen by the website visitor are stored in addition to this information. This serves our security, as we can be held liable for unlawful content on our website, even if it was created by users.

Newsletter

We use the service Mailchimp, provided by The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send our newsletter. Mailchimp is a US-based provider; a transfer of your data to the USA therefore cannot be ruled out (see the section “Transfer of Data to Third Countries”).

When signing up for our newsletter, the data you provide (usually your e-mail address, and possibly your name) is transmitted to and stored by Mailchimp, solely for this purpose. To ensure valid registration, we require a valid e-mail address and use a “double opt-in” procedure. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the link in each newsletter or via our contact details. For more information on data processing by Mailchimp, please see https://mailchimp.com/legal/privacy/.

Contact Form, Registration, E-mail

If you contact us by e-mail, registration form, or contact form, the details you provide will be stored for the purpose of processing your enquiry and any follow-up questions. Your data will not be passed on to third parties. You have the right to withdraw any consent given at any time with future effect.

Deletion and Restriction of Data

We store your personal data only for as long as necessary to achieve the purposes stated here, or as required by statutory retention periods. Once the relevant purpose no longer applies, or these periods have expired, the corresponding data is routinely blocked or deleted.

Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your Rights

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR) to your personal data stored with us
  • Right to rectification (Art. 16 GDPR) of inaccurate data
  • Right to erasure (Art. 17 GDPR), unless a statutory retention obligation applies
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR) to the processing of your data where it is based on legitimate interests

Please use the contact details listed below to exercise these rights.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to the rights set out above, you also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
www.lda.bayern.de

Subject to Change

We reserve the right to update or amend this Privacy Policy from time to time to keep it aligned with current legal requirements or to reflect changes to the services we offer, for example, when new features are introduced. The version in effect at the time of your visit will apply.

Privacy Questions

If you have any questions about data protection, please e-mail us or contact us directly:

Iryna Basarab & Dina Kaminidi
Tel.: +49 (089) 20 06 24 35
E-mail: kontakt@sprachschule-aktiv-muenchen.de
Address: Heßstraße 90, 80797 Munich, Germany