Data Protection Declaration

The Goethe-Institut e.V., Dachauer Str. 122, 80637 Munich ("Goethe-Institut" or "We") is the operator of the website www.goethe.de ("Website") and the responsible body for the personal data of the website's users ("You") in the sense of the EU data protection basic regulation (GDPR) and German data protection laws, in particular the Federal Data Protection Law (BDSG).

Content

  1. Informational use of the website
  2. Data collection and use for the contract execution
  3. Data collection and use for the purposes of direct advertising
    Email newsletters
  4. Cookies
  5. Web analytics
    a) Webtrekk
    b) Google(Universal) Analytics
  6. Remarketing
    a) Google AdWords Remarketing
    b) DoubleClick
    c) Google Tag Manager
  7. Social Networks
    Youtube and Vimeo video plugins
  8. Data protection
  9. Your rights and data protection contact information
  10. Right of objection


The Goethe-Institut takes the protection of your data very seriously. With this privacy policy we want to transparently inform you about which personal data ("your data") we collect, process and use if you visit our website and/or use the Goethe-Institut website.

 

1. Informational use of the website

You can visit our website and use some of our internet offers without providing any personal information. Whenever a web page is called up, the web server merely automatically stores access data in so-called server log files which are automatically communicated by your browser. This includes data such as the name of the requested file, the last visited website, the date and time of the retrieval, the browser used, the amount of data transmitted, your IP address, the requesting provider etc. Within the scope of a processing procedure on our behalf, a third-party provider provides the services for hosting and displaying the website. This service provider is located within a country in the European Union or the European Economic Area.

For the purpose of a shorter loading time of our online presence, we also use a so-called Content Delivery Network ("CDN"), in which the website is delivered via the web server of a CDN provider working for us within the scope of order processing. Accordingly, access data is also collected on the web servers of the provider.

All access data is stored for a period of 7 days. This data is evaluated solely to ensure interference-free operation of the website, error analysis, and to improve our service. The use of a CDN provider, as well as the procedure described here, serves to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests in accordance with Art. 6 (1) lit. f GDPR regarding the correct representation of our offer.

 

2. Data collection and use for the contract execution

We collect personal data if you provide this to us when contacting us (for example, via a contact form or email), when registering for a user account ("Goethe.de account"), or when you make a booking, for example within the scope of a course or test booking. The specific data collected in detail and that information which is mandatory and that which is voluntary, can be found in the respective input forms.

In these cases, we collect and process the data you have provided for the purpose of carrying out the respective contract, for example, to conduct a placement test for your language courses, or complete a language course including a subsequent examination, as well as to process your inquiries in accordance with Art. 6 (1) lit. b GDPR. Insofar as you have expressly consented to the processing of special data categories in accordance with Art. 9 (a) lit. GDPR, we collect your health data (e.g. allergies) only for the purpose of which you are informed when granting consent.

After complete processing of the respective contract or deletion of your user account, your data will be blocked from further use and deleted after expiry of the statutory fiscal and commercial retention periods. If any statutory fiscal or commercial data retention requirements for individual data do not apply, these will be deleted immediately after the respective contract has been processed. Any other state of affairs is only valid if you have expressly consented to the further use of your data or if we reserve the right to use the data beyond that in a manner permitted by law and about which we will inform you below.

Your account information associated with our learning platform will also be automatically deleted after three years of non-use.


Data transfer for contract execution

As part of the course and exam bookings, your personal data is processed in our central language course management system to which other Goethe-Instituts have access worldwide. This is done to fulfil the contract in accordance with Art. 6 (1) Clause 1 lit. b GDPR and to safeguard our legitimate interests in valid information and correct data records when booking a course in accordance with Art. 6 (1) Clause 1 lit. f GDPR. Insofar as the processing of personal data takes place in countries outside the European Union or the European Economic Area, we, alongside the relevant Goethe-Instituts, have agreed upon the EU standard data protection clauses as a suitable guarantee for data protection within the meaning of Art. 46 (2) lit. c GDPR.

For fulfilment of the contract, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we will forward payment data collected to the credit institution commissioned with the payment and any payment service providers commissioned by us to process the payments or to the selected payment service. In part, the selected payment service providers will also collect this data themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy held by the respective payment service provider applies.

As part of the execution of our contracts with you, for example, through the provision of language courses, we pass your data in part to service providers who process them on our behalf and within the framework of a contract between the Goethe-Institut and the respective service provider for order processing. Such a service provider may, for example, be the provider of a software that the Goethe-Institut uses for contract execution.

  

3. Data collection and use for the purposes of direct advertising

 

    
Email newsletters

If you subscribe to one of our newsletters, we will use the information required or separately provided by you to periodically send you the subscribed email newsletter. The sending of email newsletters takes place on the basis of your separate explicit consent according to Art. 6 (1) lit. a GDPR. For security reasons, we use the so-called double opt-in procedure: We will only send you a newsletter by email if you have previously confirmed your newsletter subscription. For this purpose, we will send you an email confirming the subscription via the link contained therein. We want to make sure that only you as the owner of the specified email address can subscribe to the newsletter.

The newsletter is sent as part of a processing order on our behalf by a service provider, to which we pass on your email address.

You may object to this use of your email address at any time by sending a message to the contact details provided below or through a dedicated link in the email message, without incurring any costs other than the transmission costs according to the basic tariffs.

 

4. Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimised presentation of our offer pursuant to Art. 6 (1) lit. f GDPR. These are small text files that are stored on your device.

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser the next time you visit it and possibly enable you to log in automatically (persistent cookies). For example, if you activate the option "Remember me" by ticking a checkmark at goethe.de, a cookie will be set which we will use to recognise you within a certain period of time when calling up goethe.de.

You can view the duration of the persistent cookies via your browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:

Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Safari™: https://support.apple.com/kb/ph21411?locale=en_US

Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&;hlrm=en&answer=95647

Firefox™: https://support.mozilla.org/en/kb/cookies-allow-and-recognize

Failure to accept cookies may limit the functionality of our website.

 

5. Web analytics

 
a) Webtrekk

We use the services of Webtrekk GmbH (www.webtrekk.com) o collect statistical information about the use of our website, to improve it, to analyse the use of our website and to compile reports on website activities. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimised representation of our offer pursuant to Art. 6 (1) lit. f GDPR. Cookies can be used. As part of this tracking, pseudonymised usage profiles are created. These will not be combined with personal data about the bearer of the pseudonym without specific, express consent. After purpose and end of the use of Webtrekk by us, the data collected in this context will be deleted.

You can object to this data collection and storage at any time with effect for the future by clicking this button.

So that any objection You may have registered will be taken into account at the time of your next visit to the site, the objection is stored in a cookie on your browser.

In order to be able to consider a declared contradiction on your next page visit, it will be saved in a cookie in your browser. After your opposition, an opt-out cookie will be stored on your device. If you delete your cookies, you must click the link again.

 
b) Google(Universal) Analytics

For website analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.com). This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in order to optimise the representation of our offer in accordance with Art. 6 (1) Clause 1 lit. f GDPR. Google (Universal) Analytics uses methods that allow you to analyze the use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address will be shortened prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymised IP address provided by Google Analytics within the framework of Google Analytics will generally not be merged with other data provided by Google. After purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

Google LLC is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can be found here. Under the agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can prevent the collection of the data (including your IP address) generated by the cookie and related to your use of the website from Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively to the browser plugin you can click this link to prevent Google Analytics tracking on this site in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.

 

6. Remarketing

 
a) Google AdWords Remarketing

Google Adwords promotes this site on Google's search results and on third-party websites. For this purpose, when visiting our website, the so-called Remarketing Cookie is set by Google, which automatically allows using a pseudonymous CookieID and, based on the pages you visit, interest-based advertising. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our website according to Art. 6 (1) lit. f GDPR.

Additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account by Google and information from your Google Account will be used to personalise the ads you see on the web. In this case, when you log in to Google during the page visit to our website, Google uses your data with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily associate your personal information with Google Analytics data to create target groups. After the expiration and end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted.

Google AdWords Remarketing is an offer from Google LLC (www.google.com). Google LLC is headquartered in the United States. This country has an adequacy ruling from the European Commission. This goes back to the EU US Privacy Shield, under which Google LLC is certified. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can deactivate the remarketing cookie over this link. You can also inform yourself about the setting of cookies and adjust settings in relation to them via the Digital Advertising Alliance

 
b) DoubleClick

As part of the use of Google Analytics (see above), this website also uses the so-called DoubleClick Cookie, which allows you to recognise your browser when visiting other websites. The information automatically generated by the cookie about visiting this website is transmitted to a Google server in the USA and stored there. The IP address will be shortened by activating the IP anonymisation on this website prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymised IP address provided by Google Analytics within the scope of Google Analytics will not be merged with other data provided by Google. After the expiration and end of the use of Google DoubleClick by us, the data collected in this context will be deleted.

Google will use this information to compile reports on website activity and to provide other website-related services. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our website according to Art. 6 (1) lit. f GDPR. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Google Double Click is an offer from Google LLC (www.google.com).

Google LLC is headquartered in the United States. This country has an adequacy decision by the European Commission. This goes back to the EU US Privacy Shield, under which Google LLC is certified. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can deactivate the DoubleClick cookie via this link. You can also inform yourself about the setting of cookies and adjust settings in relation to them via the Digital Advertising Alliance.

 
c) Google Tag Manager

We also use Google Tag Manager to manage the usage-based advertising services. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our website according to Art. 6 (1) lit. f GDPR. The Tag Manager tool itself is a cookie-free domain and does not collect personally identifiable information. Rather, the tool is responsible for triggering other tags that may collect data (see above).

Google Tag Manager is an offer from Google LLC (www.google.com). Google LLC is headquartered in the United States. This country has an adequacy ruling from the European Commission. This goes back to the EU US Privacy Shield, under which Google LLC is certified. A current certificate can be viewed here: https://www.privacyshield.gov/list

If you've opted out at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

 

 

7. Social Networks

  
Youtube and Vimeo video plugins

For the purpose of an interactive design of our content on Youtube and Vimeo, third-party content is integrated into this website. This serves to safeguard our predominant legitimate interests in a multimedia presentation of our services and our activities in accordance with Art. 6 (1) Clause 1 lit. f GDPR.

Youtube is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

Vimeo is operated by Vimeo LLC, 555 West 18th Street, NY, New York 10011, USA.

In order to increase the protection of your data when visiting our website, the plugins are integrated into the site so that they can only be activated by an additional click. This integration ensures that when you visit a page of our website that contains such plugins, no connection is established with the servers of the respective social network. Only when you activate the plugins does your browser establish a direct connection to the servers of the respective social network. 

The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there.

If you interact with the plugins, for example, by clicking the "Like" button, the corresponding information is also transmitted directly to a server of the provider and stored there.

For videos from Vimeo which are integrated on our site, the tracking tool Google Analytics is automatically integrated. We have no influence on the analysis results obtained from this and nor can we view them. In addition, the embedding of Vimeo videos allows web beacons to be set on the website visitors upon activation of said videos. To prevent the setting of Google Analytics tracking cookies, you can take the usual precautions to disable Google Analytics. For more information, see the web analytics section.

For more information on the purpose and extent of the data collection and the further processing and use of the data by the provider, as well as your related rights and setting options to protect your privacy, please refer to the privacy policy of the provider:

Youtube / Google: https://www.google.com/intl/en/policies/privacy/
Vimeo: https://vimeo.com/privacy

  

8. Data protection

We protect our website and other systems through technical and organisational measures against the loss, destruction, access, modification or dissemination of your data by unauthorised persons, such as during the creation of the Goethe.de account or a later login through an SSL encryption.

 

9. Your rights and data protection contact information

As a data subject, you have the following rights:

  • according to Art. 15 GDPR, you have the right to demand information on the personal data processed by us in the scope specified therein;
  • in accordance with Art. 16 GDPR, you have the right to demand without delay the correction of incorrect personal data or completion of personal data stored with us;
  • according to Art. 17 GDPR, you have the right to demand the deletion of your personal data stored by us, unless further processing is required
    • to exercise the right to freedom of expression and information;
    • to fulfil a legal obligation;
    • for reasons of public interest or
    • to assert, exercise or defend legal claims
  • according to Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data, insofar as
    • the accuracy of the data is disputed by you;
    • the processing is illegal, but you reject its deletion;
    • we no longer need the data, but you need it for asserting, exercising or defending legal claims, or
    • you have filed an objection against the processing in accordance with Art. 21 GDPR;
  • according to Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format, or to request the transfer to another responsible party;
  • according to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, information, correction, restriction of, processing or deletion of data, and revocation of any consent granted or objection to a particular use of data and the right to data portability, please contact our company data protection officer:

Die Datenschutzbeauftragte
Goethe-Institut e.V.
Dachauer Str. 122
80637 München
datenschutz@goethe.de

 

10. Right of objection

To the extent that we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, you can object to this processing with effect for the future. If the processing is for the purpose of direct marketing, you can exercise this right at any time as described above. Insofar as the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons that arise from your particular situation.

After exercising your right to object, we will not further process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case we will not process your personal data for this purpose.