Information about the processing of your data
Leipzig International School
David Smith / Thomas Pessara
c/o Leipzig International School gGmbH
Questions about data protection
If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:
Leipzig International School, Könneritzstraße 47, 04275 Leipzig, Germany, email: firstname.lastname@example.org
Spirit Legal LLP Attorneys at Law
Lawyer and Data Protection Officer
data protection officer
c/o Leipzig International School, Könneritzstrasse 47, 04275 Leipzig
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.
You have the following rights with regard to the personal data concerning you that you can assert against us:
· right of access (Art. 15 GDPR),
· right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
· right to restriction of processing (Art. 18 GDPR),
· right to object to processing (Art. 21 GDPR),
· right to withdraw your consent (Art. 7(3) GDPR),
· right to receive the data in a structured, commonly used, machine-readable format (‘data portability’) and the right to transfer the data to another controller, if the prerequisites
of Art. 20(1) (a) and (b) GDPR are fulfilled (Art. 20 GDPR).
You can assert your rights by informing us using the contact details specified above under ‘Responsible provider’ or by contacting the data protection officer designated by us.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).
Use of the website, access data
In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:
- browser type/browser version
- operating system used
- language and version of the browser software
- hostname of the accessing device
- IP address
- website from which the request comes
- content of the request (specific page)
- date and time of the server request
- access status/HTTP status code
- referrer URL (website visited before)
- volume of data transferred
- time zone difference from Greenwich Mean Time (GMT)
Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis for such processing is Art. 6(1) Sentence 1(f) GDPR.
The access data is not used to identify individual users and is not combined with other data sources. The access data is deleted when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.
IP addresses are stored in log files to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context either. In principal, data is deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or so transformed that an assignment of the retrieving client is no longer possible.
a) Technically necessary cookies
Some elements of our website require that the retrieving browser can be identified even after a page change. This involves processing the following data in the cookies:
• language settings
• items in shopping basket
• login information
The user data collected by technically necessary cookies is not processed to create user profiles. We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used when you return to the website. If you have an account with us, we use this cookie to recognise you on subsequent visits to the website; otherwise you would have to log in again each time you visited. The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. We use session cookies to make using our website more attractive and effective. Session cookies are deleted as soon as you log out or close your browser.
b) Technically non-essential cookies
• entered search terms
• frequency of page views
• use of website functions
These cookies are used to make using the website more efficient and attractive. The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. The technically non-essential cookies are automatically deleted after a specified period, which may vary depending on the cookie.
Where we integrate cookies from third-party providers into our website, we point this out to you separately below.
Furthermore, HTML5 storage objects are used, which are stored on the device you are using ("Flash cookies"). These process the required data independently of the browser used and do not have an automatic expiry date. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. These cookies are used to make the website more efficient and attractive.
We use external hosting services to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. All data necessary for the operation and use of our website will be processed.
We use external hosting services for the operation of this website. By using external hosting services, we aim to make our website available efficiently and securely. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO.
The collection of data for the provision and use of the website and the processing of data via external web hosts is absolutely essential for the operation of the website. You may object to the processing. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.
Contacting our company
When contacting our company, e.g. by email or using the contact form, the support form or a feedback tool on the website, the personal data provided by you will be processed by us so that we can respond to your enquiry.
In order for us to process enquiries submitted via the contact form on the website, it is essential that you provide a name or pseudonym and a valid email address. At the moment when you submit the message to us, the following data, among others, will also be processed:
• IP address
• date/time of registration
Processing the personal data from the form allows us to process the contact you make with us. Where you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems.
The data will not be transmitted to third parties in this context. As soon as processing is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.
Registration/password-protected area on the website
If you wish to use the password-protected area of our website, you must register by providing the following information:
- email address
- password chosen by you
Furthermore, the following data is processed at the time of registration:
- IP address
- date/time of registration
The data will be deleted as soon as it is no longer required for achieving the purpose of its processing. This is the case for the data collected during the registration process if the registration on the website is cancelled or modified.
The following functions are available to you in the password-protected area:
- Edit your profile data,
- edit your content and
- manage, change or cancel your newsletter subscription.
If you use the password-protected area of the website, e.g. to edit your profile data or to view orders and bookings made, we also process the data about your person required for the initiation or fulfilment of the contract, in particular address data and information about the payment method. The legal basis for the processing is Art. 6(1) Sentence 1(b) GDPR. The data will be deleted as soon as it is no longer required for achieving the purpose of its processing or as soon as there are no legitimate interests preventing its erasure. Due to mandatory commercial and tax regulations, we are obliged to keep your address, payment and order data for a period of ten years.
If you provided further data voluntarily, we process your data which is not necessary for the initiation or fulfilment of a contract, for as long as you use the area and if you do not delete it yourself beforehand. Our aim in this respect is to optimise the use of the website for you as a user. The legal basis for this is Art. 6(1) Sentence 1(f) GDPR.
Advertising to existing customers
We reserve the right to process the email address provided by you when registering in accordance with the statutory provisions in order to send you the following content by email whilst or after processing the contract, unless you have already objected to this processing of your email address:
· further interesting information on events and dates
· technical information,
· overview of possible leisure activities
The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. We carry out this processing to inform you about important topics and events/dates and to increase our services. We delete your data when you cancel your newsletter subscription, but no later than two years after termination of the contract.
SmartSerialMail email marketing service
We use the e-mail marketing service "SmartSerialMail" of the provider Jam Software GmbH, Am Wissenschaftspark 26, 54296 Trier, Germany, website: https://www.jam-software.de/; data protection information at: https://www.jam-software.de/company/privacy.shtml.
The legal basis of the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. We process this data until two years after termination of the contract. If the newsletter registration takes place outside a contract conclusion, we process these data up to the expiration of two years after termination of the use procedure. We delete this data immediately when the newsletter subscription ends. All data processing takes place in the European Economic Area.
Integration of third-party content
The website integrates third-party content such as videos, maps, RSS feeds and graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of users. This is because without the IP address they would not be able to send the content to the browser of the respective user. As such, the IP address is required to display this content.
We endeavour to only use content from third-party providers who process the IP address solely for delivering the content. We do however have no influence over whether the third-party providers process the IP addresses, e.g. for statistical purposes. If we are aware of such activity, we inform you of this in the following.
Some of the third parties may process data outside the European Union.
We use web fonts provided by Google for the uniform display of fonts. When you retrieve a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. By doing so, Google becomes aware that our website has been accessed via your IP address. Our use of Google Fonts is in the interest of a uniform and visually appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how long Google stores data and have no way of influencing this.
Integration of Google Maps
This website also uses the Google Maps service from Google to display maps or sections of maps, thus enabling you to conveniently use the map function on the website.
By visiting the website, Google receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under ‘Access data’ is transferred to Google. This occurs regardless of whether Google provides a user account that you are logged in with or no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your Google profile, you must log out before activating the button.
Google stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.
The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long Google stores data and have no way of influencing this.
We use plug-ins from the video platform YouTube.de or YouTube.com on the website, a service operated - represented by Google - by YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). Using the plug-ins, we can also include visual content ("videos") that we have published on Youtube.de and Youtube.com on this website.
The videos are all in "extended privacy mode", which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos, the following data will be transmitted. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in the "Access data" section are transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and processes them for advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the Social Network about your activities on our website. Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. The processing serves to make our range of products more attractive and to offer you additional service. We have no knowledge of the storage time on YouTube and have no influence on it.
You have the right to object to the processing and must contact YouTube to exercise this right. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.