Data protection
We, JP ACADEMICS and CULTURE, take the protection of your personal data very seriously. We would then like to inform you about what data we collect, for what purpose it is collected, how we use and protect it and on what legal basis this is based.
I. Collection, storage and processing of data
We collect, store and process personal data that you provide to us when you contact us or register and during the application process, during your stay and beyond, as well as when using our website and our external online presence, such as our social media profile.
JP ACADEMICS and CULTURE GbR
Friedrichstraße 3-4
37073 Göttingen
is responsible. Shareholders authorized to represent are
Peggy Mautz and Johanna Lemm
1 Collection of data
Data collection takes place through the use of all application and profile forms, communication by those affected by telephone, written or electronic means, the use of cookies on the website, through the use of the localization function on the end device of those affected, through business partners or vicarious agents.
“Cookies” are files that are stored on users’ computers and in which various information is stored. A cookie is primarily used to store information about a user during or after their visit to an online offering. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the browser’s system settings. The exclusion of cookies can lead to functional restrictions of this online offer.
When you contact us via contact form, email, telephone or via social media, the user’s information will be processed to process the contact request and process it in accordance with Article 6 Paragraph 1 Letter b) GDPR. The data can be stored in archive software or with a comparable inquiry organization.
Requests that are no longer required will be deleted. We review the necessity every two years; The statutory archiving obligations also apply.
2. Legal basis for data processing
With regard to the terms used, reference is made to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Unless otherwise stated in the data protection declaration, the legal bases for processing data are as follows:
- for obtaining consent: Art. 6 Para. 1 a) and Art. 7 GDPR
- for processing to fulfill our services and carry out contractual measures as well as answering inquiries: Art. 6 Para. 1 b) GDPR
- for processing to fulfill our legal obligations: Art. 6 Para. 1 c GDPR
- in the event that the vital interests of the data subject or another natural person require the processing of personal data: Art. 6 Para. 1 d GDPR
- for processing to protect our legitimate interests: Art. 6 Para. 1 f GDPR
3. Personal Data
“Personal data” means information or parts of information relating to an identified or identifiable person. The following information may be collected, stored and processed by us:
- Name and contact details (postal and email address, telephone number, etc.)
- Residence, nationality, date of birth, gender
- Preferences (e.g. courses, sports, hobbies)
- Name and address of the school or company attended, name and email address of teachers or supervisors, profession
- Payment details or account details
- Health status (allergies, illnesses, smoking habits, etc.), dietary habits, vaccinations
- Travel details, copy of passport, visa information
- Insurance data
- Name and contact details of family members
- Other information you provide during a telephone, video call or chat, as well as recordings and/or transcripts of such calls or chats
- User account information or user identification (e.g. username, profile picture or social media account ID)
- Technical information, e.g. Such as screen/user name, IP address, browser and device data, information collected through cookies, pixel tags and other technologies, server log file data and location data, page views and website navigation
- Grade average, certificates, language skills, grade, interests, allergies, information from motivation and application letters
4. Processing of data as part of the provision of contractual services and the fulfillment of pre-contractual measures
On the basis of Art. 6 Para. 1 b GDPR, we process the data necessary to fulfill our contractually guaranteed services and to fulfill pre-contractual measures for the purpose:
- answering contact and offer inquiries
- Compiling and sending the contract offer
- pre-contractual communication with our interested parties
- communication with our customers and business partners
- sending contract-relevant information material
- the creation of application documents; sharing data and documents with host schools or business partners that are necessary to fulfill the contract
- Support in the visa process
- the fulfillment of other contract-specific services
- transmission and communication to third-party companies and business partners
The data will be deleted when the data is no longer required to fulfill contractual or legal duties of care as well as to deal with any warranty and comparable obligations, whereby the necessity of retaining the data is reviewed every three years; Otherwise, the statutory retention requirements apply.
5. Processing of data for legitimate interests
Based on Article 6 Para. 1 f, we process necessary data for legitimate interest for the purpose:
- for statistical purposes
- data backup
- system maintenance
- the calculation of utilization levels
- ensuring the functionality of the products offered
- the establishment, exercise or defense of legal claims
6. Processing of data based on consent
Based on Art. 6 Para. 1 a GDPR, we process data based on your consent to the processing for the purpose:
- Offer analysis and improvement
- the marketing of products and services
7. Processing of data due to legal obligations
Based on Art. 6 Para. 1 c GDPR, we process data based on a legal obligation for the purpose:
- compliance with applicable legal and regulatory requirements
- to detect, investigate and prevent information security incidents and/or to report fraud, deception or crime
- To establish, exercise or defend legal claims
II. Rights of those affected
-
Right to information
According to Art. 15 GDPR, those affected have the right to confirmation as to whether data concerning them is being processed, as well as a right to information in accordance with the provisions of Art. 15 Para. 1 a-h GDPR and a right to be provided with a copy of the data in question in accordance with Art. 15 Paragraph 3 in conjunction with Paragraph 4 GDPR.
-
Right to correction and addition
According to Art. 16 GDPR, those affected have the right to request the correction of incorrect data concerning them and the completion of incomplete data.
-
Right to deletion
Within the framework of Art. 17 GDPR, those affected have the right to request the immediate deletion of their data under the conditions of Art. 17 Paragraph 1 a-f GDPR.
-
Right to complain
Those affected have the right to lodge complaints with the relevant supervisory authority about the handling of their personal data.
III. Data storage period
Personal data will be retained for as long as necessary for the purposes for which they were collected or in accordance with legal and market practices, usually up to two years after the last service completed, unless further reservation is made is necessary to fulfill a legal obligation or to establish, exercise or defend legal claims; a certain period of time has been agreed in order to use, store and process the personal data for a future contractual relationship, e.g. for another family member.
Personal data necessary for marketing purposes will be retained until you withdraw your consent, but in no case longer than 10 years after your last completed service or delivery of the product.
IV. Sharing data with third parties
The data collected will, to the extent permitted by applicable law, be shared with:
- Third-party providers and business partners who are necessary to fulfill the contract
- IT and system service providers necessary to maintain the system
- Messenger services used to communicate with those affected
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we use for the purpose of operating this online offering. In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offering based on our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR.
This Privacy Policy does not cover the privacy, information or other practices of any third party, including any third party operating a website, displayed on the JP ACADEMICS and CULTURE website.
V. Transfer of data to third countries
Information may be shared with JP ACADEMICS and CULTURE’s business partners who need the information for the purposes of providing the services you have requested or in accordance with this Policy. Such recipients may be located outside the EEA/Switzerland and may not ensure the same level of protection as countries within the EU.
VI. Security measures
In accordance with Art. 32 GDPR, appropriate organizational, technical and administrative means are used to keep the data collected accurate and up to date and to protect the personal data from unauthorized or unlawful processing and the accidental loss, destruction or damage to the personal data.
Right of withdrawal and right of objection
You have the right to revoke your consent in accordance with Article 7 Paragraph 3 of the GDPR with effect for the future
You can object to the future processing of your data at any time in accordance with Art. 21 GDPR.
By using our services, you agree to the above privacy policy.
