In principle, it is possible to use the Euro-Internatsberatung website without entering any personal data.

Personal data such as the name, address, email address or telephone number of a data subject is always processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions that apply to Euro-Internatsberatung (particularly the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG)).

Below, we would like to provide you with information on the nature, scope and purpose of the personal data that we collect, use and process. Furthermore, this Data Protection Statement will provide data subjects with clarity regarding their rights.

1. Definitions

This Data Protection Statement uses the terms applied when adopting the General Data Protection Regulation (Article 4 GDPR).

2. Name and address of the controller

Euro-Internatsberatung Tumulka GmbH & Co. KG
Liebigstr. 22
80538 Munich

Telephone: +49 (0) 89/94 39 71-29
Email: info@internatsberatung.com

Managing Director: Wolfgang Tumulka

3. Cookies

The Euro-Internatsberatung website uses cookies. Cookies are small text files that are stored locally in your web browser’s cache so that your browser can be recognised again. Your browser accesses these files. Using cookies makes this website more user-friendly and secure. The legal basis for this data processing is point (f) of Article 6(1) GDPR (the controller’s legitimate interests).

Cookies make websites easier for users to operate. Certain websites cannot be accessed without using them, or cannot be accessed without errors. These grounds also constitute a legitimate interest in this data processing in accordance with point (f) of Article 6(1) GDPR (the use of cookies for analytical purposes is addressed in another point).

Current browsers give users the option to disable cookies. You can thus set your browser so that you are informed when cookies are stored on your computer and so that cookies are only allowed on a case-by-case basis, so that cookies are disabled or so that cookies are automatically deleted when you close your browser.

Note: It is not guaranteed that you will be able to access all functions of this website without restriction if you adjust such settings.

4. Collection of data and information when you visit this website (log files)

The Euro-Internatsberatung website collects certain general data and information every time you visit. This data is stored in our system’s log files. The following data and information may be collected:

1. browser types and versions used,
2. the operating system used by the accessing system,
3. the website from which our website is accessed,
4. the sub-webpages that are directed to our website via an accessing system,
5. the date and time of access,
6. the IP address of the requesting computer, and
7. the Internet service provider of the accessing system.

When using this general data and information, Euro-Internatsberatung draws no conclusions related to the data subject. The legal basis for this data processing is point (f) of Article 6(1) GDPR (the controller’s legitimate interests).

This information is necessary to:

1. display the content of the website correctly,
2. optimise the content of the website as well as the advertising for it,
3. guarantee that IT systems and website technology are constantly working, and
4. provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack or other offences.

These grounds also constitute a legitimate interest in this data processing in accordance with point (f) of Article 6(1) GDPR. Point (e) of Article 6(1) GDPR (public interest) is also a legal basis.

The anonymous data in the server log files is stored separately from all personal data provided by the data subject.

5. Google Analytics

We use Google Analytics, a web analysis service from Google Inc. ("Google"). Google uses cookies (see point 3.). The information generated by the cookie regarding use of this website by users is usually transferred to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate use of our website by users, to compile reports on activities within this website and to provide other services to us related to the use of this website and the Internet. As part of this process, pseudonymised usage profiles of users may be generated using the data processed.

We only use Google Analytics with IP anonymisation enabled. This means that users’ IP addresses are first truncated by Google within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.The IP address transmitted by the user’s browser is not merged with other data by Google.

Users can prevent cookies being stored via the relevant setting in their browser software; users can also prevent the data generated by the cookie regarding their use of the website being shared with Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on the use of data for advertising purposes by Google, as well as settings options and procedures available for opting out, can be found on Google’s website: https://www.google.com/intl/de/policies/privacy/partners/ (“Use of data by Google when you use our partners’ websites or apps”), http://www.google.com/policies/technologies/ads (“Use of data for advertising”), http://www.google.de/settings/ads  (“Manage information that Google uses to show you advertisements”) and
http://www.google.com/ads/preferences/ (“Choose which adverts Google shows you”).

Google Analytics cookies are stored based on point (f) of Article 6(1) GDPR. The website owner has a legitimate interest in analysing user behaviour in order to optimise both its online content and its advertisements, and therefore also with regard to the financing and customer-orientated use, adaptation and updating of the website.

We have concluded a data processing agreement with Google.

6. ReachLocal

This website contains advertisements and advertising services provided to us by the agency ReachLocal GmbH. ReachLocal collects and processes certain data related to our interaction and provides this to us. It uses cookies in order to do so. You can find information on the data collected as well as guidance on objecting to/disabling cookies here:
[https://www.reachlocal.com/de/de/legal/terms-and-conditions/richtlinien-über-die-nutzung-von-cookies-im-rahmen-der]
http://www.reachlocal.com/trackingopt-out

7. Contact via the website

To make it easy to contact us, we provide a contact form and an email address on this website. When a data subject contacts us by email or via the contact form, the following data must be entered into the form and is stored automatically after it is sent:

•  Email address
• First name, surname
• Telephone number

The legal basis for the processing of data that is transmitted using the contact form or by sending an email is point (f) of Article 6(1) GDPR. If the aim of contact by email is to enter into a contract, point (b) of Article 6(1) GDPR is also a legal basis for the processing.

We only use the personal data entered into the contact form for the purpose of handling correspondence from the data subject.
During submission, the following data pertaining to the data subject is stored automatically:

• IP address
• Date and time of login

This data is used to prevent misuse of the contact form and to ensure that our IT systems are secure. The legal basis for this data processing is point (f) of Article 6(1) GDPR (the controller’s legitimate interests).

This personal data is not shared with third parties.

7. Boarding school search

You can use the boarding school search on our website to display boarding schools that are appropriate to you based on various criteria. We use the data entered to find the most suitable boarding schools for you. The data is shared with the boarding schools listed in the results so that they can contact you and provide further details if necessary. We ask you for your consent to share this data when you enter it. To enable us to carry out the most precise search possible, we collect the following data for the boarding school search:

Information on your child:

• First name, surname
• Date of birth
• Desired type of school
• Class
• Desired date of change
• Optional: Languages, average grade, strong subjects, weak subjects, hobbies, repeated classes, information on motivation and talents

Parent information:

• First name, surname
• Address
• Telephone number
• Email address

The following data is also stored automatically when you register:

• IP address
• Date on which you open the newsletter

We use the email address provided during registration to inform you by email of important changes, such as changes to our products and services or technical changes we need to make. The legal basis for the processing of the data entered when searching for boarding schools is point (a) of Article 6(1) (consent).

8. Website hosting

This website is hosted by the company Hetzner Online GmbH. Therefore, all data entered is stored on this provider’s servers. However, the provider does not access the data.

We have concluded a data processing agreement with this company.

The legal basis for this data processing is point (f) of Article 6(1) GDPR (the controller’s legitimate interests).

9. Erasure of personal data

The data subject’s personal data is only stored for the period of time necessary to achieve the purpose of storage, for as long as storage is prescribed by law in accordance with point (c) of Article 6(1)(1) GDPR (e.g. in accordance with the German Commercial Code (Handelsgesetzbuch, HGB), German Criminal Code (Strafgesetzbuch, StGB) or German Tax Code (Abgabenordnung, AO)) or if consent for storage beyond this has been given in accordance with point (a) of Article 6(1)(1) GDPR.

If the purpose of the storage ceases to apply or a storage period prescribed by law expires, the personal data will be blocked or erased.

10. The data subject’s rights

a)    Right to confirmation
Every data subject has the right to obtain information on whether personal data concerning them is being processed.

b)    Right of access (Article 15 GDPR)
Every data subject has the right to obtain access free of charge to personal data concerning them that is being stored and to receive a copy of such information.

c)    Right to rectification (Article 16 GDPR)
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.

d)    Right to erasure (“right to be forgotten”, Article 17 GDPR)
Every data subject has the right to obtain without undue delay the erasure of personal data concerning them, as long as one of the legal requirements is met and provided that processing is not necessary.

e)    Right to restriction of processing (Article 18 GDPR)
Every data subject has the right to obtain the restriction of processing, as long as one of the legal requirements is met.

f)     Right to data portability (Article 20 GDPR)
Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format as well as the right to transmit this data to another controller without hindrance, provided that the processing is based on consent in accordance with point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract in accordance with point (b) Article 6(1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In addition, when exercising their right to data portability in accordance with Article 20(1) GDPR, the data subject has the right to have their personal data transmitted directly from one controller to another, provided that this is technically feasible and the rights and freedoms of others are not adversely affected by this.

g)      Right to withdraw consent given under data protection law in accordance with Article 13 GDPR
Every data subject has the right to withdraw at any time consent given for the processing of personal data where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2) without affecting the lawfulness of processing based on consent before its withdrawal.
_______________________________________________________________________________________

b)    Right to object in accordance with Article 21 GDPR
Every data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them that is based on points (e) or (f) of Article 6(1) GDPR. This also applies for any profiling based on these provisions.

Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
_______________________________________________________________________________________

i)    Automated individual decision-making, including profiling (Article 22 GDPR)
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects for them or similarly significantly affects them, unless the decision:

• is necessary for entering into or performing a contract between the data subject and the controller, or
• is authorised by the Union or Member State law to which the controller is subject and that also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or
• is based on the data subject’s explicit consent.

In the cases referred to in points (1) and (3), the controller will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express their own point of view and to contest the decision.

11. Right to lodge a complaint with the competent supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority in the event of infringements of data protection law. This is the data protection authority of the German federal state in which our company is based. For a list of data protection authorities, see: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.