Study.EU takes your privacy seriously. With this Policy, we intend to inform the public why and how we collect, store and process personal data, and inform data subjects about their rights in relation to their personal data. We will only collect, store, and use personal data in the ways describe in this document, and in strict abidance by the applicable laws and regulations.
As a company based in Germany, Study.EU complies with the General Data Protection Regulation (EU) 2016/679 (“GDPR”, or “DSGVO” in German), the Bundesdatenschutzgesetz (Federal Data Protection Law, “BDSG”) and the Telemediengesetz, (Tele Media Law, “TMG”).
|“BDSG”||Bundesdatenschutzgesetz (German Federal Data Protection Law)|
|“GDPR”||General Data Protection Regulation (EU) 2016/679|
|“data subject”||an identified or identifiable natural person whose personal data are collected, stored or processed by Us|
|“personal data”||any information relating to an identified or identifiable natural person (Art. 4(1) GDPR)|
|“third-party”||a natural person, corporation, or other kind of organisation that is neither Us nor the data subject|
|“TMG”||Telemediengesetz (German Tele Media Law)|
|“We”, “Study.EU”, or “the Company”||Study.EU UG (haftungsbeschränkt), see “Who we are”|
|“the Website”||our website, accessible at www.study.eu|
Please note that in some instances when we collect, store and process personal data, our role is that of the data controller (Art. 4(7) GDPR), whereas in some other instances our role is that of the data processor (Art. 4(8) GDPR) on behalf of third-parties - in most cases educational institutions - for whom we collect, store and process data, in which case the respective third-party is legally the data controller.
As a company based in Hamburg, Germany, the supervisory authority responsible for us is the
Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
We collect personal data in a number of ways:
We collect, store and process the following types of personal data:
Where we deem it necessary or beneficial to best fulfill the purposes of our data processing (see section “Purposes of our data processing”), and in particular in order to be able to recommend suitable study and career options to you, we may complement the data we store about you with information from publicly available sources, such as your public social media profiles.
We collect, store and process personal information for the following purposes:
Protecting your personal data against loss or unlawful use is of the highest importance to us. We ensure that our systems and processes follow industry best practices.
Some or all of your data may be stored outside of the European Union, in some cases on servers and in storage solutions provided by third-parties. We exercise care and diligence in choosing our partners to ensure the highest standards for safety and security. All third-parties with whom we work for data storage are based in the EU, based in the US and certified under the EU-U.S. Privacy Shield Framework, or can otherwise reliably ensure compliance with the GDPR and BDSG. Your personal data will be stored for as long as necessary for the purposes as described in this Policy, or as long as necessary for us to comply with our legal or contractual obligations, and will be deleted thereafter.
Within our organisation, access to personal data follows strict access protocols. Controls are in place to ensure that personal data is only accessible to those that need access for the purposes as described in this Policy.
In order to achieve the purposes of our data processing (see Purposes of our data processing), and/or in order to comply with legal, regulatory or contractual requirements, we may share your personal data with third-parties. Data is shared in line with the legal bases indicated in the section “Purposes of our data processing”. Third-parties with whom we share data fall into one of the following categories:
To achieve the purposes of our data processing, we cooperate with third-parties that render technological services to us. These include website analytics providers, server operations providers, data storage providers, mail processing providers, security solutions providers, advertising delivery networks, and content delivery providers e.g. for fonts, images or videos.
When you submit your personal data to us in connection with specific study destinations, universities, or study programmes, we consider it our duty to assist you, in the best way we can, in choosing the right education for yourself. Specifically, when you inquire about a particular study destination, university, or study programme, we may share your data with the respective university or country organisation so that they can get in touch with you and provide you with the information you need in order to proceed to application or admission. We may also share your personal data with other carefully chosen education providers that offer related courses which would also be suitable for you; e.g. taking into account your desired subject discipline, destination, tuition fee level or other factors. That way we can ensure that you are optimally equipped to make the best choice among the options that are suitable for you. If and when we share personal data with a third-party in such a way, we will limit the data shared to the necessary minimum, and we will explicitly inform them of the purposes for which the data was originally collected, and that they can only use your data for these purposes. You have the right to revoke your consent to this at any given time, for example by sending an e-mail to email@example.com. For further information, please refer to the section “Your rights” in this Policy.
To achieve the purposes of our data processing as described in this Policy, we may share personal data with companies affiliated to us, i.e. shareholding companies, subsidiaries, or associate companies (i.e. subsidiaries of our shareholders).
If you participate in a prize draw and are among the winners, it may be necessary for us to share your contact details with the respective prize sponsor in order for them to ship the prize. Each prize draw may have more explicit Terms & Conditions that will apply. Please consult them when applicable.
Our Website, as well as content by us on other channels, contain hyperlinks to third-party websites. When you follow such links, you will leave our Website. This Policy only applies to our Website and our services. When you leave our Website through a link, we are not responsible nor liable for the ways in which the respective third-parties collect, process or store your data. Please consult their respective privacy policies for more information.
The GDPR grants you, as the data subject, certain rights in relation to your personal data. Specifically, these include:
If you wish to exercise any of your rights in relation to how we collect, store or process your personal data, either follow the instructions that we provide in the relevant channel or material, or send an e-mail to us at firstname.lastname@example.org. Furthermore, if you wish to revoke your consent to receive marketing communications by us at any given time, please follow the instructions provided in the relevant channel or material, or inform us via e-mail to email@example.com.
If you believe we act in violation of the GDPR, you have the right to make a complaint with the responsible supervisory authority. Please refer to the section “Supervisory authority” for more details.