Privacy Policy

Data protection statement

We are pleased to welcome you to our website Heidelberg International School. We take the protection of your personal data very seriously. The following notes are intended to inform you about our policy on gathering and protecting personal data when you use our website. In addition to providing information, our website offers a variety of services which you can use if you are interested. This statement informs you about the protection of your personal data when you visit our website, use our online tools and register for our events.

Personal data

The term “personal data” covers all information that relates to you as a person, for example, name, address, telephone number, email address and user profile. Information that cannot identify you as a person, for example, the number of users of our website, is not covered by the term “personal data”.

Service provider

The Service Provider according to Article 13 of the German Telemedia Act (TMG) and the 'Controller' according to Article 4 (7) of the General Data Protection Regulation (GDPR) is Phorms Education SE.

Contact information:

Phorms Education SE
Ackerstrasse 76
13355 Berlin

Visiting our website

When you use our website for informational purposes only, we do not gather any personal data, except for the data which your browser transfers in order to make your visit to the website technically possible. For organisational and technical reasons, our web servers temporarily store any access in a log file. The following data is gathered and stored until it is deleted automatically: IP address, date and time of access, name and URL of the accessed file, the volume of data transferred, notification if the file was accessed successfully, the identification data of the browser system and operating system, the website from which access was made, the name of your internet access provider and the language and version of your browser software. This technical data is processed anonymously in the interests of system security, the technical administration of the network infrastructure and to help us on an ongoing basis to improve the design of our internet presence. This anonymised data cannot be traced back to an individual person and is stored separately from personal data on secure systems. This means that your personal data and privacy are protected at all times. Only in the event of an attack on the network infrastructure of the Phorms group of companies do we analyse the IP address. The legal basis for data processing in this regard is Article 6 (1f) GDPR. Our legitimate interest in data processing is based on ensuring the functionality of our websites and guaranteeing the integrity of the data made available by us (data security). Any log data is stored until legal retention requirements no longer apply and is deleted after one year at the latest.

Entering data on the website; newsletter

Insofar as it is possible on our website to enter personal or business data (email addresses, names, addresses, telephone numbers), the surrender of your data is entirely voluntary. We process any data provided by you for the purposes of communicating directly with you and – if you have submitted your express consent to be contacted for advertising purposes – sending you our newsletter. The legal basis for data processing in this regard is Article 6 (1a) GDPR. If you do not provide us with this data, we will be unable to contact you for technical reasons, or will only be able to contact you via the specified communication channels.

If you have not previously exercised your right to have your data erased, it will remain stored for as long as it is required for the purpose for which we collected it and will then be automatically deleted, unless it has to be stored for other reasons and this is permitted by law. The criteria for assessing the necessity of data storage are based on the specific benefit gained from storing the data. A benefit in this case could, for example, be the reuse of data for follow-up correspondence with you or for the verification and allocation of previous correspondence.

No link is created with the access data outlined above. You are free to choose whether or not to use the online registration system. If you do not consent to the gathering and use of your data, please don’t make use of the online tools.

We will gather, process and use the personal data which you make available to us online solely for the purposes you have stated. Your personal data is only transferred within the Phorms group of companies in order to process orders for their intended purpose. Insofar as external service providers come into contact with your personal data, we have adopted legal, technical and organisational measures and also carry out regular checks to ensure that these providers observe the requirements of data protection law. Your personal data cannot be forwarded to third parties without your consent. Your data can be used in anonymised form for the purpose of market research to enable us to further develop our services to meet your wishes and needs.

All our employees and any service providers commissioned by us have a duty to observe both confidentiality and the provisions of the German Data Protection Act and the General Data Protection Regulation (GDPR).

The gathering of personal data and the transfer of such data to state institutions and authorities with a right to this information is only carried out within the terms of the relevant laws or insofar as we are required by a court decision to do this.

Data security

We carry out technical measures to ensure the safety of your data, particularly to protect personal data from the risk of being transferred or of passing into the hands of third parties. These measures are constantly being adapted to ensure that they are technically up to date.


On our website, we sometimes use so-called cookies. These are designed to make our website more user-friendly, more effective and safer. Cookies are small text files that are deposited on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted when you finish visiting our website. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser when you visit us again.

You can set your browser in such a way as to ensure that you are informed about the creation of cookies and only allow cookies in individual cases or prevent cookies from being accepted in certain situations or in general, or in order to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, this can affect the functionality of our website.

COOKIE preferences

Data protection declaration for the use of Google Analytics

To help us to design our website to meet our users’ needs, we use the web analysis service Google Analytics of Google Inc. With the help of this service, pseudonymous user profiles are created. Google Analytics uses cookies. The information generated by the cookie about your use of the website (including your IP address) is transferred to a Google server in the USA and stored there. Google will use this information in order to evaluate your use of the website, to compile reports about activity on the website for the website operator and to provide other services related to the use of the website and the internet. It is also possible that Google will forward this data to third parties insofar as this is legally required and insofar as third parties process this data on behalf of Google. Under no circumstances will Google combine your IP address with other Google data. The European Commission has not passed an adequacy decision for the USA within the meaning of Article 45 (1) GDPR. However, Google Inc. is certified under the EU-US Privacy Shield, which means that transmission according to Article 46 (2f) GDPR is permitted (Implementing Decision (EU) 2016/1250 of the European Commission dated 12 July 2016).

You can prevent the installation of the cookies by making a corresponding setting in your browser software. However, we would point out that in this case you might possibly be unable to make full use of all of the functions on this website. By using this website, you state your consent to the processing by Google of the data gathered about you in the manner described above and for the purpose stated above.

Furthermore, you can prevent the gathering of the data (including your IP address) that is generated by the cookie and that relates to your use of the website and the processing of this data by Google by downloading and installing the browser plugin that is available via the following link:

We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technical developments. In such a case, we will also adapt our notes on data protection accordingly. Please inform yourself from time to time about our data protection policy and make sure that you have the current version of our data protection statement.

No profiling

We do not use the data processed as a result of data exchange with or via for automated decision-making processes. We do not carry out profiling (creating an overview of a person by analysing the data available).

Revocation; right to access, rectification, erasure and restriction of processing; right to lodge a complaint with supervisory authorities

You can revoke your consent regarding the collection and storage of your personal data at any time. To do this, please contact If you decide to revoke your consent, this will not affect our authorisation over processing activities that took place before you revoked consent.

By contacting us (, you can also exercise your right to access, rectify, or erase your personal data, your right to restrict processing, or your right to object to processing.

If you have any questions or complaints about our compliance with this Data Protection Policy or if you wish to make any recommendations or comments regarding data protection, please contact us at

You also have the right to lodge a complaint with a supervisory authority of the European Union.

Video surveillance

The video recordings serve the protection of our customers, employees and our property, the prevention of vandalism as well as the exercise of the house right. The legal basis for this data processing is Art. 6 Para. 1 f) DSGVO. The use of security cameras is indicated by a clearly visible sign in the entrance area of the school. The video recordings are automatically deleted after 7 days.

Last updated: May 2018