Privacy Policy
Information on how we process your personal data.
Deutschkurse Kreuzlingen GmbH
As of: 26.11.2025
1. Responsible Party
Deutschkurse Kreuzlingen GmbH
8280 Kreuzlingen, Switzerland
Email:
datenschutz@deutschkurse-kreuzlingen.ch
This privacy policy explains how we process personal data when you visit our website or use our services.
2. Applicable Law
We process personal data in accordance with the requirements of the Swiss Federal Act on Data Protection (revDSG / Swiss FADP).
Where individual processing activities concern providers subject to the EU GDPR (e.g. Google, Meta, WhatsApp), we additionally rely on the following legal bases:
- Consent (Art. 6 (1) (a) GDPR)
- Performance of a contract and pre-contractual measures (Art. 6 (1) (b) GDPR)
- Legitimate interests (Art. 6 (1) (f) GDPR)
3. What Data We Collect
3.1 Data You Actively Provide
When you contact us, register for courses or request information, we collect in particular:
- First and last name
- Postal address
- Phone number
- Email address
- Information on the desired course / level
- Personal messages
- Billing and payment information (where required)
The data is transmitted to us by email via our web form. The form is encrypted (HTTPS), however emails can in principle carry security risks.
For particularly confidential matters, we recommend postal contact.
3.2 Automatically Collected Technical Data
When you visit our website, technical data is automatically recorded by our hosting provider metanet.ch (Switzerland), including:
- IP address
- Browser type and version
- Pages visited
- Date and time of access
- Referring page (referrer)
- Technical log files
This data is necessary for the stable and secure operation of the website.
4. Purposes of Data Processing
We use personal data for the following purposes:
- Processing of course registrations
- Delivery of our language courses
- Communication and responding to enquiries
- Invoicing and payment processing
- Customer support
- Optimisation of our website offering
- Ensuring IT and system security
5. Disclosure of Data to Third Parties
We only pass on personal data where this is necessary for the performance of a contract, for technical reasons or based on your consent.
5.1 Hosting (metanet.ch)
Our website is operated by metanet.ch in Switzerland. Technical data (e.g. IP address, log files) is processed there.
5.2 Payment Processing
We offer the following payment methods:
- Invoice / bank transfer
- TWINT
With TWINT, payment data is processed by TWINT or the responsible bank. We ourselves do not store complete payment data.
5.3 Communication via WhatsApp Business
If you contact us via WhatsApp Business, the WhatsApp/Meta privacy policies additionally apply.
Note: With WhatsApp, data may be transferred to the USA. The transfer is carried out in accordance with the Standard Contractual Clauses (SCC) of the EU Commission.
We recommend not transmitting any sensitive data via WhatsApp.
5.4 Social Media (Instagram, Facebook, TikTok)
We maintain social media presences on:
- TikTok
When you interact on these platforms, Meta services partly process data in the USA as well, on the basis of the Standard Contractual Clauses (SCC). Meta's own privacy policies apply to the processing of data by Meta.
5.5 Google Analytics 4 (with Consent Mode v2)
We use Google Analytics 4 (GA4) to analyse website usage. We employ Google Consent Mode v2, which takes your consent behaviour into account.
Before you give consent, our website transmits to Google exclusively anonymous, cookieless pings (so-called "cookieless pings"). No cookies or comparable identifiers are stored on your device. No conclusions about you as a person can be drawn from these pings; they merely serve Google for the statistical extrapolation of aggregated metrics.
After you give consent, we activate the full tracking. The following data can then be processed:
- IP address (truncated / anonymised, "IP masking" activated)
- Usage behaviour and click paths
- Device information (browser, operating system, screen size)
- Time spent and session history
- Approximate location at city or regional level
Google processes data partly in the USA. The transfer is carried out in accordance with the Standard Contractual Clauses (SCC) of the EU Commission.
Withdrawal of your consent: You can withdraw your cookie consent at any time. To do so, click the link "Cookie settings" in the footer and select "Only necessary". From that moment on, only anonymous, cookieless pings will be transmitted again and analytics cookies that were set will no longer be used on your next visit.
6. International Data Transfers
Some service providers (e.g. Google, Meta, WhatsApp) are based in or process data in countries without an adequate level of data protection, in particular in the USA.
We ensure an adequate level of protection through the following safeguards:
- Standard Contractual Clauses (SCC) of the EU Commission
- Additional technical and organisational measures
7. Retention Period
We store personal data only for as long as is necessary for the respective purpose or as we are legally required to do.
Typical retention periods:
- Course and invoice data: 10 years
- General enquiries: 6–12 months
- Server logs (metanet): 7–30 days
8. Data Security
We protect personal data with appropriate technical and organisational measures, in particular:
- encrypted transmission (HTTPS)
- protected server infrastructure (metanet)
- access restrictions
- regular security reviews
9. Your Rights
Under the revDSG (Swiss FADP) you have the following rights:
- Information about which data we process about you
- Rectification of inaccurate data
- Erasure, unless legal obligations prevent this
- Restriction of processing
- Release or transfer of your data, where technically possible
To exercise your rights, please contact us by email.
There is no obligation to appoint a data protection officer under the revDSG.
10. Cookies
Our website uses cookies in order to:
- provide basic functions
- enable Google Analytics 4 after your consent
- ensure technical stability
Cookie types:
- technically necessary cookies (set automatically)
- analytics cookies (Google Analytics 4, only with your consent)
As long as you have not given consent, we set no cookies for analytics purposes. In this case, Google Analytics 4 only sends anonymous, cookieless pings (Google Consent Mode v2).
You can adjust or withdraw your consent at any time via the link "Cookie settings" in the footer. In addition, you can block or delete cookies in your browser.
11. Links to External Websites
Our website contains links to external platforms (e.g. Instagram, Facebook). We assume no responsibility for their content and data protection practices.
12. Changes to the Privacy Policy
We may adapt this privacy policy at any time. The version currently published on our website applies.