The protection of your personal data is very important to us. It is protected according to the relevant legal provisions. The following policy details which data is collected when you visit our website and how it is used.
1. Name and contact details of those responsible for the processing of data (controllers) and of the data protection officer
This data protection information pertains to data processing by:
Phone: +49 (0)40 650525-3
Fax: +49 (0)40 650525-55
Registered court: District Court of Hamburg
Company registration number: HRB 119105
Nina Zolezzi (Chief Executive Officer), Dr Catherine Molohan and Marlen Schrader
The data protection officer can be contacted at email@example.com
2. Collection and storage of personal data and the nature and purpose of its use
- a) On visiting the website
By accessing our website, www.englishbusiness.com, information is sent automatically to the server on which our website is hosted by the browser that is in use on your end device. This information is temporarily stored in a log file. This results in the collection of the following data without your involvement, which is stored until it is automatically deleted:
- IP address of the end device being used;
- date and time of access;
- name and URL of the accessed file;
- websites from which the server was accessed (referrer URL);
- the browser used and, if available, the operating system of your computer and the name of your access provider.
The aforementioned data is processed by us for the following purposes:
- ensuring the seamless connection to our website;
- ensuring our website is easy to use;
- evaluation of system security and stability; and
- additional administrative purposes.
- b) On using our contact form
Should you have any questions for us, we offer you the opportunity to establish contact with us via the contact form available on our website. In filling out this form, you must provide a valid email address, your first and additional names and your company name so that we will know who the enquiry has come from and so that we can respond to it properly. Further information may be provided voluntarily.
The processing of data for the purpose of establishing contact occurs in accordance with Art. 6 (1) (1) (a) GDPR on the basis of your voluntarily provided consent.
The personal data that we collect for the use of our contact form is automatically deleted after your enquiry has been addressed.
Your data is not transmitted to third parties for purposes other than those listed as follows.
We will forward your personal data to third parties if, and only if:
- you have provided your explicit consent in accordance with Art. 6 (1) (1) (a) GDPR;
- the data must be forwarded according to Art. 6 (1) (1) (f) GDPR to validate, exercise or defend legal claims and there is no reason to assume that you have a prevailing interest that must be protected by the data not being forwarded;
- the forwarding of the data is legally required in accordance with Art. 6 (1) (1) (c) GDPR; or
- it is lawful and necessary according to Art. 6 (1) (1) (b) GDPR in order to enter into contractual relationships with you.
3. Duration of storage and deletion
The personal data of data subjects is deleted or access is removed to it as soon as the purpose for its storage ceases to exist. Data may also be stored if this is determined by the European or national legislature via EU Regulations, statutes or other provisions that the controller is subject to. The removal of access to or deletion of data also occurs if a duration of storage stipulated by the aforementioned legal provisions expires, unless the continued storage of the data is required to conclude a contract or to fulfil a contract.
Information is stored in the cookie that relates to the specific end device used. However, this does not mean that the cookies will provide us with direct knowledge about your identity.
We also use temporary cookies to optimise user-friendliness, which are saved on your end device for a specific amount of time. If you visit our website again to make use of our services, these cookies will automatically recognise that you were already on our website and which information you have provided/settings you have used, so that you do not need to input these again.
Besides this, we used cookies to collect statistical data on the use of our website and in order to evaluate the optimisation of our offers to you (see Fig. 5). These cookies allow us to automatically recognise, upon returning to our website, that you have already visited us. These cookies are automatically deleted after their respective defined period of validity.
Data processed through cookies is necessary to serve our legitimate interests for the named purposes and those of third parties according to Art. 6 (1) (1) (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that cookies are not saved on your computer or so that you always receive an alert before a new cookie is saved – though the complete deactivation of cookies may mean that you cannot use all of the features of our website.
Duration of storage of cookies:
5. Website tools
- a) Tracking tools
The tracking measures listed below and used by us are based on Art. 6 (1) (1) (f) GDPR. Through the tracking measures that we use, we wish to ensure that we can shape our website according to our needs and continue to optimise it. Besides this, we use these tracking measures to collect statistical data on the use of our website and to evaluate the optimisation of our offer to you. These interests are to be regarded as legitimate with regard to the aforementioned provision.
The respective data processing purposes and data categories can be determined by reference to the respective tracking tools.
- i) Google Analytics
To shape our website according to our needs and to continually optimise it, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; henceforth referred to as “Google”). In this regard, pseudonymised user profiles are produced and cookies (see below, Fig. 4) are used. The information produced by the cookie about your use of the website, such as
- browser type/version,
- operating system in use,
- referrer URL (of the previously visited website),
- hostname of the computer accessing the website (IP address) and
- time of the server request,
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide further services concerned with website and internet use for the purposes of market research and shaping these websites according to the user’s needs. This information will also be transmitted to third parties where necessary, if this is lawful or third parties process this data on our behalf. Your IP address will never be merged with other data from Google. IP addresses are anonymised so that they cannot be assigned to individuals (IP masking).
You can prohibit the installation of cookies through relevant settings in your browser; however, we would like to point out that if you configure your settings in this manner, some features of this website cannot be used to their full extent.
Furthermore, you can prohibit the collection of the data produced by the cookie and relating to your use of our website (inc. your IP address) and you can prohibit the processing of this data by Google by downloading a browser add-on and installing it (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, particularly for browsers on mobile end devices, you can prohibit the collection of your data by Google Analytics by clicking on this link. This stores an opt-out cookie on your end device, which prevents the collection of your data when visiting this website with prospective effect. The opt-out cookie only applies to this browser and only for our website, and is stored on your device. If you delete cookies stored in this browser, you will have to store the opt-out cookie again.
Further information on data protection with regard to Google Analytics can be found on the Google Analytics help page (https://support.google.com/analytics/answer/6004245?hl=en)
- b) Google reCAPTCHA
To ensure sufficient data security when transmitting form data, in certain circumstances we use the reCAPTCHA service provided by Google Inc. This primarily serves to determine whether the information is being provided by a natural person or is being provided in a malicious manner by a machine through automated processing. The service includes sending the IP address and, where necessary, additional data required by Google for the reCAPTCHA service to Google. With regard to this transmission, the specific data protection provisions of Google Inc. apply. Further information on the data protection guidelines of Google Inc. can be found at http://www.google.com/intl/en/privacy or https://www.google.com/intl/en/policies/privacy/
- c) Google Web Fonts
- d) Vimeo
If you have a Vimeo user account and do not want Vimeo to collect data about you through this website and link it to the user data Vimeo has already saved about you, you must log out of Vimeo before you visit this website.
In addition, Vimeo connects to the Google Analytics tracker through an iframe in the video being watched. This pertains to Vimeo’s own tracking measures, which we have no access to. You can restrict this tracking through Google Analytics by using a deactivation tool that Google provides for certain internet browsers. Furthermore, you can prohibit the collection of the data produced by Google Analytics and relating to your use of our website (inc. your IP address) by Google and you can prohibit the processing of this data by Google by downloading the browser plug-in available under the following link and installing it:
6. Rights of data subjects
You have the right:
- according to Art. 15 GDPR to request information on what data of yours has been stored, for what purpose it has been stored, where the data came from and who the data was forwarded to, where relevant.
In particular, you can request information on the categories of personal data collected, the categories of recipients to which your data was or will be published, the planned duration of storage, the establishment of a right to rectification, deletion, restriction of processing, or objection, the existence of a right to lodge a complaint and the existence of automated decision-making, including profiling, and, where relevant, significant details thereon;
- according to Art. 16 GDPR to demand the prompt rectification of incorrect personal data or the completion of incomplete data stored by us;
- according to Art. 17 GDPR to demand the deletion of personal data stored by us, as long as the processing of your data is not necessary to exercise the right to freedom of expression and information, or to fulfil legal obligations, to serve the public interest or to validate, exercise or defend legal claims;
- according to Art. 18 GDPR to demand the restriction of processing of your personal data where the correctness of this data is disputed by you, where the processing of this data is unlawful but you reject the deletion of this data, where we no longer need this data but you need it for the purpose of validating, exercising or defending legal claims, or where you have filed an objection against the processing of this data in accordance with Art. 21 GDPR;
- according to Art. 20 GDPR to demand the receipt of information on the data portability of the personal data you have provided to us in a structured, understandable and machine-readable format or to demand the transfer of this data to another controller;
- According to Art. 7 (3) GDPR, to rescind the consent that you previously provided to us at any point in time. This means that any data processing that requires this consent will no longer take place in the future; and
- according to Art. 77 GDPR to lodge a complaint with a supervisory authority. You can generally refer to the supervisory authority of your place of habitual residence, place of work or company headquarters.
7. Rights with regard to direct marketing
If we use your personal data to carry out direct marketing, according to Art. 21 (2) GDPR, you have the right to object against the processing of the affected personal data for the purpose of this type of marketing; this also applies to profiling, where this is in connection with such direct marketing.
In the event that you object to processing your data for the purposes of direct marketing, we will no longer process your personal data for this purpose.
8. Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) (1) (f) GDPR, according to Art. 21 GDPR, you have the right to file an objection to the processing of this personal data, insofar as this objection is justified by special circumstances or pertains to direct marketing. With regard to the latter, you have a general right to object, which does not require you to inform us of any special circumstances.
If you would like to make use of your right to object or appeal, all you need to do is send an email to firstname.lastname@example.org.
9. Data security
We use the widespread SSL process (secure socket layer) along with the highest encryption level supported by your browser when you visit our website. This normally consists of 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use 128-bit v3 technology. You can see whether an individual webpage of ours is encrypted by looking at the padlock symbol on the lower taskbar of your browser; if it is encrypted, the padlock will be closed.
We also make use of suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete data loss or destruction, or against unauthorised access of third parties. Our security measures will be continually improved in accordance with technological development.
10. Right to lodge a complaint with a supervisory authority
Regardless of any other administrative or judicial method of redress, you possess the right to lodge a complaint with a supervisory authority, particularly in the Member State in which you are habitually resident, your workplace is located or in the place of the purported breach, if you are of the opinion that the processing of personal data pertaining to yourself was in violation of GDPR.
The supervisory authority with which the complaint is lodged will inform the complainant of the status and outcome of the complaint, including the possibility of judicial redress in accordance with Art. 78 GDPR.
The Hamburg Commissioner for Data Protection and Freedom of Information
20097 Hamburg, Germany