Data protection - all information about how we protect your data

The speakeasy Berlin GmbH (hereinafter as “speakeasy” or “we”) runs a language school with a corresponding website available under www.speakeasy.berlin, www.speakeasy.hamburg and www.speakeasysprachzeug.de and the corresponding subdirectory (hereinafter “the website”).

speakeasy would like to describe to you with this data protection declaration which data we process in which form: when visiting our website and when registering at our language school. By doing so, we fulfil our information obligation according to Art. 13 General Data Protection Regulation (GDPR).

I. Controller and contact details of the data protection official

The controller regarding data protection law for the data processing in our school and on our website is

speakeasy Berlin GmbH
E-Mail: info@speakeasy.berlin
Phone number: 030 60 95 41 49

Our data protection official can be reached via:
m.nikolov@gfw.education

II. Personal Data, Purposes and legal basis of Data Processing

1. Personal Data

According to the GDPR, ‘personal data’ means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

• a) General Usage of the Website

  We collect and save no personal data when you visit our website.

  Notwithstanding the aforementioned general situation, the webserver of our host automatically registers the access to our website and especially your IP address.

  Our host also creates so-called logfiles for the maintenance of our system security.

  These logfiles contain the following information:

  • date of the access
  • the URL
  • accessed contents
  • the transferred information
  • your IP address

  This information remains anonymous to us. A conclusion regarding your identity is therefore not possible.

  The processing of your IP address during the connection build-up is done so that we can make our website available to you. The subsequent saving, to maintain the security and integrity of our systems. The processing is based on Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in the aforementioned purpose.

• b) Live Chat

  You can contact us via a live chat on our website. In order for us to process your request, we have to process the data you make available to us in the chat. Depending on the inquiry, this data can include your name, your email address and the content of your message.

• c) Contact Form

  You can contact us via a contact form on our website. For us to be able to respond to you, you have to give us your email address. Additionally, you must provide your name, a subject and an actual message.

  If you contact us via the email address provided on our website, you give us at least your email address as well as further information provided in your message. In order for us to process your request, we have to process this data.

• d) Registering for language courses or language exams via our website

  You can register for a language course or for a language exam at speakeasy via our website. In order to do so, you must provide the following data: name, email address, sex, date of birth, place of birth, your address, the course or exam level and the course or exam date you wish to register for.

  For the purpose of finalising your registration we also save the price of the items booked as well as your chosen method of payment.

  When registering for a language exam, we pass on your data to the telc gGmbH,

  Bleichstraße 1, 60313 Frankfurt/Main.

  If the registration is aborted, the data entered up to this point will still be saved.

• e) Registering for language courses or language exams at speakeasy

  You can also register in person for a language course or a language exam at speakeasy. In order for us to process your registration, you have to provide the following data: name, email address, sex, nationality, first language, date of birth, address, phone number, course or exam level and course or exam date.

  To finalise the booking, we also save the price of the items booked and the payment method.

2. Purposes and legal bases of data processing

The processing of your IP address during the connection build-up is done so that we can make our website available to you. The processing is based on Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in the aforementioned purpose.

The processing in the context of contacting us is done so that we can process and respond to your request. The legal basis is Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in the aforementioned purpose.

The processing in the context of a registration – via the website or in person at school – is done so that we can process your registration and admit you for the language course or the language exam. The legal basis is Art. 6 Par. 1 lit. b) GDPR.

III. Recipients of data

At our company, the departments responsible for processing your request have access to your data. We also work with external service providers where we cannot carry out the tasks

ourselves or not in a reasonable way. These external service providers are mainly IT service providers and telecommunications service providers.

A transfer into third countries does not generally take place and if it does, only in a capacity necessary for the processing of your request, required by law or if you have given us consent to do so.

IV. Duration of data storage

Our logfiles are saved for 14 days. We save your emails and approach for the time it takes to process your request and subsequently for a time period of 11 years, in case you contact us again regarding previously discussed matters.

If you register for a language course or a language exam at speakeasy, we save your data for the duration of the contractual relationship and subsequently for a time period of 11 years starting with the year in which the contractual relationship ended.

V. Obligation to the provision of data

You have no contractual or legal duty to provide us with personal data. However, we cannot offer you our services without your personal data.

VI. Existence of automated decision making (incl. profiling)

We do not use any automated decision making which affects you or develops a legal effect.

VII. Internet specific data processing

• a) Cookies

  Our website uses cookies. These are small files stored on your terminal device and saved in your browser. Cookies have the purpose to improve our offer in terms of user friendliness, security and effectiveness and to recognise you on your next visit.

  You can delete cookies and set your browser in a way that it informs you about the usage of cookies. In your browser settings you can choose when you want to accept cookies.

  If you deactivate cookies, the usability of our website can be restricted.

• b) Google Maps

  We use Google Maps to display an interactive map. By using Google Maps, you transfer information (including your IP address) straight to Google’s servers. If you are logged in to your Google account, Google uses cookies to offer you personalised functions. We do not have any influence on this data processing. If you do not wish that Google places the corresponding cookies, please log out of your Google account before using the map.

  The legal basis for this service can be found in Art. 6 Par.1 lit. f) GDPR. The legitimate interest is the improved service quality we can offer our users. In this context we do not save any personal data.

• c) Google Analytics

  The website uses Google Analytics. This is a web analysis service by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043 USA.

  Google Analytics uses cookies – small text files which are saved in your browser and enable the analysis of your usage of our website. The information made available by cookies about your usage of our website are transferred to a Google Server in the USA and stored there.

  IP anonymisation

  Before being transferred to a Google Server in the USA, your IP address is shortened by the activated tool for IP anonymisation on our website. Only in exceptions, the shortening takes place after the transfer to the Google Server in the USA. On our behalf, Google uses the transferred information to analyse your usage of our website to compile reports about website activities and other services connected to the website and internet usage. Your IP address transferred to Google will not be combined with other data by Google. The remaining collected data will be deleted after 26 months.

  The legal basis for this is Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in the aforementioned purpose.

  Demographic features

  Our website uses the function “demographic features” by Google Analytics.

  With this function, it is possible to compile reports about age, sex and interests of the users of our website. These data come from interest-based advertisements by Google as well as visitor data from third-party suppliers. These data cannot be matched to an individual person. You can deactivate the feature in the settings of your Google account.

• d) YouTube

  Our website uses plugins of YouTube which is operated by Google. Operator of these sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When using our website with the YouTube plugin, a connection to the YouTube servers is established. It is communicated to the YouTube server which website you visited.

  If you are logged in to your YouTube account, you enable YouTube to link your surf behaviour to your personal profile. You can prevent this by logging out of your YouTube account.

  You can find out more about Google’s data processing in Google’s data protection policy which you can access here https://policies.google.com/privacy.

• e) Adroll

  Our website uses Adroll, a retargeting service. Adroll also works with cookies which are saved in your browser when visiting our website. This is how Adroll creates a list of all visitors and can show you speakeasy advertisement even when visiting different websites or using social media.

VIII. Rights of the data subject

The General Data Protection Regulation guarantees you certain rights which you can exercise, given that the legal requirements apply.

• Art. 15 GDPR – Right of access by the data subject: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, to which data this applies and what the conditions of the data processing are.
• Art. 16 GDPR – Right to rectification: The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Art. 17 GDPR – Right to erasure: Under certain conditions, the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.
• Art. 18 GDPR – Right to restriction of processing: Under certain conditions, the data subject shall have the right to obtain from the controller restriction of processing.
• Art. 20 GDPR – Right to data portability: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided if this is technically feasible.
• Art. 21 GDPR – Right to object: The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
• Art. 77 GDPR in connection with § 19 Federal Data Protection Act – Right to lodge a complaint with a supervisory authority: The data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this regulation.

IX. If you have questions or comments

We meet all conceivable precautions for the protection and safety of your data. Your questions and comments about data protection are welcome, just contact us via info@speakeasy.hamburg.

Hamburg, May 2018