Imprint & Legal Notices

This Privacy Policy informs you of the extent to which we process your personal data (hereinafter referred to as "data").

1. Data controller
The data controller as defined in the provisions of the General Data Protection Regulation (GDPR) is:
Berlitz Deutschland GmbH
Hahnstrasse 68-70
60528 Frankfurt, Germany
Tel: +49 (0)69 666 08 90
Web: www.berlitz.com/en-de
Email: info@berlitz.de

‍2. Contact details for our data protection officer
Email: datenschutz@berlitz.de
‍
3. General information about data processing
We process data in the course of operating our business and our website. This also includes disclosure by means of transmission to third parties and, if applicable, to “third countries” outside of the European Union (“EU”) and the European Economic Area (“EEA”). We have provided appropriate notices below in cases where we transfer data outside of the EU or EEA. The European Commission has not issued an adequacy decision for transfers of data to the United States. Information on the respective guarantees to ensure an adequate level of data protection can be found with the respective services.

4. Data processing
The data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:

‍a) Log files when visiting our website
‍We log your visit to our website. We process the following data in this context:
• Name(s) of the web page(s) you have accessed;
• Date and time of access;
• The quantity of data transmitted;
• Browser type and version;
• Your operating system;
• Referrer URL (the previously visited website);
• Your IP address;
• Requesting provider.
According to Art. 6 (1) (f) GDPR, the legal basis for this data processing is our overriding legitimate interest in the continuous operation and security of our website.
Log files will be deleted after seven days, unless they are needed in order to verify or investigate specific legal infringements occurring during the retention period.

‍b) Hosting
‍In order to operate our website, we use the services of web hosting providers who process the data referred to above (log file when you visit our website) and all other data to be processed in connection with the operation of our website on our behalf. According to Art. 6 (1) (f) GDPR, the legal basis for this data processing is our overriding legitimate interest, thus permitting us to operate the website in the first place.

‍c) Contacting us
‍If you contact us, we will process the following data exclusively for the purpose of processing and responding to your inquiry: salutation, first name, last name, email address, postal code, telephone, and other information if you have provided it, and your message.
The legal basis for this data processing is our obligation to satisfy a contract and/or to satisfy pre-contractual obligations according to Art. 6 (1) (b) GDPR and/or our overriding legitimate interest in processing your inquiry according to Art. 6 (1) (f) GDPR.
Data is transferred to the Salesforce customer management system if a web-based form is used (see point e). In addition to the aforementioned data, your IP address and details of your website visit are also affected. All data collected by Berlitz is processed within the EU.
Data is transferred to the Salesforce customer management system if a web-based form is used (see point d). The Zapier service provided by US-based Zapier Inc. is used for certain landing pages. As part of this process, information provided to us is automated and transferred to our Salesforce management software. In addition to the aforementioned data, your IP address and details of your website visit are also affected. This also results in the transfer of data to the United States. Zapier ensures adequate levels of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request.

‍d) Data management and customer support
‍For purposes of providing efficient customer support, we use the Salesforce customer management system, represented in Germany by Salesforce.com Germany GmbH, Erika-Mann-Strasse 63, 80636 Munich, Germany (“Salesforce”). We use Salesforce to collect, link and evaluate form data (contact details, customer account, order data, etc.) processed on our website. This data is transferred to the Salesforce servers in the course of processing.
Processing in this context is performed on the basis of our overriding legitimate interest in providing our customer service in accordance with Art. 6 (1) (f) GDPR.
Salesforce is a corporation with offices around the world. The Group’s parent company is salesforce.com, in Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States. All data collected by Berlitz is processed within the EU.

‍e) Booking appointments using Calendar
‍If you want to use our form for scheduling appointments, your data (name, contact details and selected language) will be used to process and handle your request. To provide this service, we work together with service providers to whom we transfer the above mentioned data. The specified data is processed by us on the basis of Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR in order to execute your request.‍‍

f) Integration of third-party content
We use dynamic content (“content”) from external sources to optimize the presentation of our website and what it offers. When visiting our website, an application programming interface automatically submits a request to the server of the respective content provider as part of which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transferred to our website and displayed there.
We use external content in connection with the following features:

aa) Integration of YouTube videos
We have integrated videos from YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, United States (“YouTube”) on our website. The controller for YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). However, when you play the videos, log data will be transferred to YouTube’s servers in the United States. Processing in this manner is performed on the basis of our overriding legitimate interest in the optimum marketing of our website in accordance with Art. 6 (1) (f) GDPR. The European Commission has not issued an adequacy decision for transfers of data to the United States. Google ensures adequate levels of data protection via the EU standard contractual clauses. A link to the relevant EU standard contractual clauses will be provided upon request. Please contact datenschutz@berlitz.de if you are interested in receiving these contractual clauses.

5. Data retention period
We will only store personal data for as long as is required for the purpose for which it is processed or until you withdraw your consent to the processing of such data. Where statutory retention obligations must be complied with, the storage period for certain data may be up to 10 years, regardless of the processing purposes.

6. Your rights as a data subject
‍
‍a) Right of access
‍On request, we will provide you with information on the personal data stored on you, at any time and free of charge.
‍
‍b) Rectification, erasure, processing restrictions (blocking), objection
‍If you no longer consent to the storage of your personal data or if your personal data is no longer accurate, we will initiate the erasure or blocking of your data at your request or ensure that your data is updated accordingly (to the extent possible in accordance with the applicable laws and regulations). The same applies if you want your data only to be processed subject to certain restrictions in the future. You have the right to object in particular in cases in which your data is necessary for the performance of a task carried out in the public interest or on the basis of our legitimate interest, as well as profiling based on this. You also have such a right to object in the case of data processing for the purpose of direct advertising.

c) Right to withdraw consent with future effect
‍You can withdraw your given consent at any time with future effect. The withdrawal of your consent will, however, in no way affect the lawfulness of the processing of your Data before the time of withdrawal.
‍
‍d) Data portability
‍You have the right to data portability in cases where data is processed on the basis of a contract, pre-contractual negotiations, consent or by means of an automated process. On request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can transfer the data to another competent party, where required.
‍
‍e) Limitations
‍Data which cannot be used to identify the affected party, for example which has been anonymized for analytical purposes, is not affected by the above rights. The provision of information, erasure, blocking, rectification or transfer of data to another company may be possible if you provide us with additional information which enables an identification by us.
‍
‍7. Asserting your rights as a data subject
‍If you have any questions regarding your personal data, the provision of information, rectification, blocking, objection or the erasure of data or want your data to be transferred to another company, please contact datenschutz@berlitz.de. You also have the option to complain to a supervisory authority on account of your right as a data subject.