Search

Privacy Notice

The data controller for the processing of data in connection with visits to and use of this website is:

Fremdsprachen-Institut Colón GmbH & Co. KG.
Colonnaden 96
, 20354 Hamburg

Email: info@colon.de
Telephone: (040) 345850

Representatives of the data controller:
Managing Directors: Marcus Blecken, Normen Niebuhr
; Authorised signatory: Karen Pfeiffer

You can contact our data protection officer(s) at:

TC UNIX Systemberatung GmbH – Data Protection Team –
Neumann-Reichardt-Str 27–33, Building 11
, 22041 Hamburg
, Germany

. Email: datenschutz@tc-unix.de 

We are delighted that you have taken an interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal details. Each time you access a web page, the web server automatically stores a so-called server log file which contains, for example, the name of the file requested, your IP address, the date and time of the request, the volume of data transferred and the requesting internet service provider (access data), and documents the request. This access data is analysed solely for the purpose of ensuring the smooth operation of the website and improving our service. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the correct presentation of our services in accordance with Article 6(1), first sentence, point (f) of the GDPR. All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.

2. Data processing for the purposes of contract fulfilment and establishing contact

As part of our customer communications, we collect personal data in accordance with Article 6(1), first sentence, point (b) of the GDPR for the purpose of processing your enquiries, if you voluntarily provide this data to us when contacting us (e.g. via the contact form, live chat tool or email). Mandatory fields are marked as such, as we require this data in these cases to process your enquiry. The data collected is specified in the relevant input forms. Once your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

2.1 Use of Friendly Captcha

To protect our contact forms from misuse, spam and automated enquiries from so-called bots, we use the Friendly Captcha service provided by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany, on our website.

Friendly Captcha is used to distinguish automated access from human input, thereby ensuring the security and proper functioning of our website.

To this end, when a suitably secured form is used, a cryptographic computation task is provided, which is processed in the background by the users’ devices. The solution is then submitted for verification.

As part of this security check, the following data in particular may be processed:

  • Connection data, such as browser type, operating system and the time of the request
  • Technical information about the device used
  • Information relating to the processing and verification of the security task
  • IP addresses which, according to the provider, are anonymised using a one-way hash function

Data is processed solely to protect our website and contact forms from spam, automated attacks and misuse.

The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the security and proper functioning of our website and in preventing unauthorised access.

According to the provider, Friendly Captcha does not use HTTP cookies and does not permanently store any information in users’ browsers.

Data processing is carried out within the framework of data processing on behalf of a client in accordance with Article 28 of the GDPR.

Further information on data protection at Friendly Captcha can be found at:

https://friendlycaptcha.com/de/legal/privacy-end-users

3. Cookies and other technologies

3.1 General information

To make your visit to our website more engaging and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser’s cookie settings.

Privacy protection on end devices

When you use our online services, we employ technologies that are strictly necessary in order to provide the digital service you have expressly requested. The storage of information on your device or access to information already stored on your device does not, in this respect, require your consent.

In the case of functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give your consent, you may not be able to use parts of the website to their full extent. Any consent you have given will remain valid until you adjust or reset the relevant settings on your device.

Any subsequent data processing carried out by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information regarding your use of our website. This is based on a balancing of interests, where our overriding legitimate interests in optimising the presentation of our website prevail, in accordance with Article 6(1), first sentence, point (f) of the GDPR.

We also use technologies to comply with the legal obligations to which we are subject (e.g. to be able to provide evidence of consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal basis for data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of the technologies in accordance with Article 6(1), first sentence, point (a) of the GDPR, you may withdraw your consent at any time by contacting us via the contact details provided in the privacy policy.

Alternatively, you can also access your cookie settings via the link in the footer.

3.2 Use of Borlabs for consent management

On our website, we use the Borlabs cookie plugin (“Borlabs”) to inform you about the cookies and other technologies we use on our website, and to obtain, manage and document your consent – where required – to the processing of your personal data by these technologies. This is necessary under Article 6(1), first sentence, point (c) of the GDPR to fulfil our legal obligation under Article 7(1) of the GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. Borlabs is a service provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. When you visit our website, the Borlabs web server stores a so-called Borlabs cookie, which contains information on the cookie’s duration and version, device and browser details, as well as information regarding your consent behaviour. No personal data is transferred to Borlabs in this process. Your data will be deleted after one year, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement. 

4. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for individual technologies, this is done on the basis of your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR. Once the purpose has ceased to apply and we have stopped using the relevant technology, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect. Further information on your options for withdrawal can be found in the section ‘Cookies and other technologies’. Further information, including the legal basis for our cooperation with the individual providers, can be found under the descriptions of the individual technologies. If you have any questions regarding the providers and the legal basis for our cooperation with them, please use the contact details provided in this privacy policy.

4.1 Use of Google services

We use the technologies set out below provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google’s technologies regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the GDPR. Further information on data processing by Google can be found in Google’s privacy policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists. No adequacy decision has been issued by the European Commission for these countries.

 Google Analytics

For the purposes of website analysis, data (IP address, time of visit, device and browser information, and information regarding your use of our website) is automatically collected and stored using Google Analytics; this data is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

In order to optimise the marketing of our website, we have enabled the data sharing settings for ‘Google products and services’. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google’s services. The sharing of data with Google under these data-sharing settings is based on a separate agreement between the data controllers. We have no influence over the subsequent processing of data by Google.

In order to optimise the marketing of our website, we use what is known as the ‘user ID’ function. This function enables us to assign a unique, permanent ID to your interaction data from one or more sessions on our websites, thereby allowing us to analyse your user behaviour across different devices and sessions.

For web analytics, the Google Signals extension for Google Analytics enables what is known as ‘cross-device tracking’. Provided that your internet-enabled devices are linked to your Google Account and you have enabled the ‘personalised advertising’ setting in your Google Account, Google may generate reports on your usage behaviour (in particular, cross-device user figures), even if you switch devices. We do not process any personal data in this regard; we merely receive statistics generated on the basis of Google Signals.

For web analytics and advertising purposes, the Google Analytics extension enables the so-called DoubleClick cookie to recognise your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services relating to website usage.

If you do not give us your consent to the use of Google Analytics in accordance with Article 6(1), first sentence, point (a) of the GDPR, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address) are sent to Google. 

 Google Maps

In order to display geographical information visually, Google Maps collects data relating to your use of the Maps functions – in particular your IP address and location data – which is transmitted to Google and subsequently processed by Google. We have no influence over this subsequent data processing.

 Google Tag Manager

Google Tag Manager enables us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of a data processing agreement with Google.

Google Tag Manager can be used to integrate various services and technologies. If
you do not wish to use certain tracking services and have therefore disabled them, this setting will remain in place for all relevant tracking tags integrated via Google Tag Manager.

4.2 Use of meta-services

 Use of Meta Pixel

We use the Meta Pixel as part of the technologies described below, provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a web page or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of what is known as ‘extended data matching’, information that can be used to identify individuals (e.g. names, email addresses and telephone numbers) is also collected and stored in hashed form for matching purposes. To this end, when you visit our website, the Meta Pixel automatically sets a cookie which, by means of a pseudonymous cookie ID, enables your browser to be recognised automatically when you visit other websites. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalised and audience-based advertising.
The information automatically collected by Meta Platforms Ireland’s technologies regarding your use of our website is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information on data processing by Meta Platforms Ireland can be found in Meta Platforms Ireland’s privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by decision, determined an adequate level of data protection: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been obtained.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. There is no adequacy decision by the European Commission for these countries.

 Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the actual implementation, in particular for deciding where the adverts are placed for individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Joint controllership is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on the statistics on visitor activity on our website generated via Meta Pixel, we run group-based advertising on Facebook (by Meta) via Custom Audiences by defining the characteristics of the respective target audience. As part of the extended data matching process carried out to identify the relevant target group (see above), Meta Platforms Ireland acts as our data processor.

Based on the pseudonymous cookie ID set by Meta Pixel and the data collected about your usage behaviour on our website, we use Custom Audiences to deliver personalised advertising.

We use conversions (via Meta Pixel or the Conversations API) to measure your subsequent usage behaviour for the purposes of web analytics and event tracking when you have accessed our website via an advert from Meta Ads Manager. Data processing is carried out on the basis of a data processing agreement with Meta Platforms Ireland.

5. Social media

Our online presence on Facebook (by Meta), Instagram (by Meta) and LinkedIn

Provided that you have given your consent to the relevant social media operator in accordance with Article 6(1), first sentence, point (a) of the GDPR, when you visit our online presence on the social media platforms mentioned above, your data will be automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These may be used, for example, to display adverts both on and off the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the relevant social media operator, as well as contact details, your rights in this regard and settings to protect your privacy, please refer to the providers’ privacy policies linked below. Should you nevertheless require assistance in this matter, please do not hesitate to contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including details on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been granted.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
The European Commission has not issued an adequacy decision for these countries.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (‘Meta Platforms Ireland’). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including details on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been granted.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
The European Commission has not issued an adequacy decision for these countries.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transmitted to and stored on a server belonging to LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists: the USA.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been granted.

6. Processing of data when contacting Lime Connect via live chat and the AI chatbot 

6.1 Your rights

On our website, we use the Lime Connect communication service (formerly Userlike) to enable you to contact us directly via live chat and to process your enquiries.

The data controller and data processor is:

Lime Connect (Userlike) GmbH
Kölnturm, Im Mediapark 8
50670 Cologne, Germany

Lime Connect processes personal data in the context of data processing on behalf of a controller in accordance with Article 28 of the GDPR.

What data is processed?

When using the chat function, the following personal data in particular may be processed:

  • technical connection and usage data, in particular your IP address, the date and time of access, browser type and version, the operating system used, and the page accessed,
  • information about your enquiry,
  • the content of communications and chat histories,
  • data you have voluntarily provided within the chat,
  • contact details such as your name, email address or telephone number, if you provide them,
  • where applicable, any further information required to process your enquiry.

The personal data that is actually processed depends on how you use the chat and the information you provide.

Purposes of processing

Data is processed, in particular, for the following purposes:

  • Provision and technical implementation of the chat function,
  • Processing and responding to your enquiries,
  • personalised customer and prospect support,
  • Providing support with technical or content-related queries,
  • improving our communication and range of services, as well as
  • where applicable, to analyse and optimise our chat service.

Legal basis

Insofar as your enquiry is for the purpose of entering into or performing a contractual relationship, the processing is carried out on the basis of Article 6(1)(b) of the GDPR.

In other cases, processing may be carried out on the basis of our legitimate interest in ensuring swift, efficient and user-friendly communication with visitors to our website, in accordance with Article 6(1)(f) of the GDPR.

Where consent is required for the use of the chat function or related technologies, or where we only activate the chat function following your express consent, processing is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG, insofar as information is stored on or read from your device in the process.

You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out up to the point of withdrawal.

Use of an AI-powered chatbot

Within Lime Connect, we can use an AI-powered chatbot or AI agent (Connect AI). The AI chatbot can initially process and respond to your enquiry automatically.

You will be informed if you are communicating with an AI system rather than a natural person. This complies with the applicable transparency requirements for interactive AI systems under Article 50 of the EU AI Regulation.

To enable the automated processing of your enquiry, the AI system may, in particular, process and analyse the messages you have entered as well as the conversation history to date. The AI chatbot draws on knowledge content provided by us or a knowledge database maintained by us. Where appropriately configured, further information required to process your enquiry may also be processed.

The purpose of processing your data is to understand your enquiry, generate appropriate responses and provide you with prompt and, as far as possible, targeted support.

If the AI chatbot is unable to provide a definitive answer to your enquiry, or if personal assistance is required, your enquiry can be transferred to a member of staff.

No fully automated decision within the meaning of Article 22 of the GDPR, which produces legal effects concerning you or similarly significantly affects you, takes place within the context of the chatbot.

The data entered in the chat is not used to train external AI models, insofar as this is ensured by the configuration we have chosen and the contractual agreements with the service provider.

Please avoid, where possible, entering any special categories of personal data as defined in Article 9 of the GDPR in the chat, in particular health data, information about religious or political beliefs, or similarly sensitive information, unless this is necessary for the processing of your enquiry.

Storage of chat histories

Lime Connect can save chat histories. This is particularly useful for reviewing the history of your conversation should your enquiry need to be dealt with at a later date, and for improving the quality of our chat service.

Data collected during the chat will, as a rule, only be stored for as long as is necessary to process your enquiry and for the purposes stated. Statutory retention obligations remain unaffected.

Where specific automatic deletion periods have been set up in Lime Connect, the retention periods specified by us shall apply.

Data processing on behalf of third parties and recipients

Chat data is processed by Lime Connect, our data processor, in accordance with Article 28 of the GDPR.

Personal data will only be disclosed to other recipients where this is necessary to provide the chat function, to process your enquiry, to comply with legal obligations, or on any other basis permitted under data protection law.

Further information

Further information on the processing of personal data by Lime Connect can be found in the provider’s privacy policy: Lime Connect’s privacy policy

7. How to contact us and your rights

7.1 Your rights

As a data subject, you have the following rights:

  • in accordance with Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data processed by us;
  • pursuant to Article 16 of the GDPR, the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
  • pursuant to Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing
    • for the exercise of the right to freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest; or
    • for the establishment, exercise or defence of legal claims;
  • in accordance with Article 18 of the GDPR, the right to request the restriction of the processing of your personal data, provided that
    • you contest the accuracy of the data;
    • the processing is unlawful, but you object to its erasure;
    • we no longer require the data, but you require it for the purpose of establishing, exercising or defending legal claims; or
    • you have objected to the processing in accordance with Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller;
  • in accordance with Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence or work, or for the location of our registered office.

In addition, you have a

Right to object (Article 21 of the GDPR)

If we process your personal data on the basis of legitimate interests, you may object to this on grounds relating to your particular situation.

Furthermore, you may object to a data processing agreement if we enter into it for the purposes of direct marketing.

7.2 Contact details

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, have your data rectified, restricted or erased, or to withdraw your consent or object to a specific use of your data, please contact us directly using the contact details provided in section 1.