🔒DATA PROTECTION & GDPR COMPLIANCE

PRIVACY POLICY & DATENSCHUTZ.

At The Sprach Studio, protecting your personal information and handling it with strict transparency is our highest priority.

LAST UPDATED: AUGUST 2026 • VERSION 3.2
AT A GLANCE

Our Core Privacy Principles

We strictly adhere to the European Union General Data Protection Regulation (EU GDPR) and the Indian Digital Personal Data Protection Act (DPDP). Here is what you should know in short:

Zero Data SalesWe never sell, rent, or trade your personal contact information to any third parties.
Purpose LimitationYour data is only used for German language training, host matching, and visa consultations.
Right to DeleteYou can request complete erasure of your data at any time with a simple email request.
01

Data Controller (Verantwortliche Stelle)

The data controller responsible for the processing of personal data on this website in accordance with Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is:

The Sprach Studio
Operating Headquarters: Greater Noida West, Uttar Pradesh, India
Country of Operation: India
Upcoming Student Representatives: Berlin & Hamburg, Germany (On-ground orientation points only; no commercial business establishment in Germany)
General Data Inquiries: info@thesprachstudio.com
Telephone: +91 93159 17301
02

Categories of Personal Data We Process

We collect and process personal data only to the extent necessary to deliver our educational and placement services:

  • Inquiry & Communication Data: Full name, WhatsApp phone number, and specific questions or messages submitted through our online inquiry forms.
  • Academic & Language Profile: Current German CEFR proficiency level (A1, A2, B1, B2), educational qualifications, target departure dates, and program preferences (FSJ, BFD, Ausbildung, Exam Prep).
  • Enrollment & Visa Documents: For enrolled candidates, we process CVs (*Lebenslauf*), passport copies, school certificates, and motivation letters required for German host institution interviews and embassy appointments.
  • Server Log & Technical Data: Anonymized IP addresses, browser types, operating systems, referring URLs, and timestamps collected automatically to ensure server stability and cyber security.
03

Legal Basis for Processing (Rechtsgrundlagen)

Under Art. 6(1) GDPR, we process your personal data under the following legal frameworks:

  • Art. 6(1)(a) GDPR (Consent): When you voluntarily submit an inquiry form or contact us via WhatsApp asking for program or batch advice.
  • Art. 6(1)(b) GDPR (Contractual Performance & Pre-contractual Measures): For processing course enrollments, batch scheduling, mock exam simulations, host matching interviews, and visa dossier coordination.
  • Art. 6(1)(c) GDPR (Legal Obligations): For maintaining mandatory accounting, billing, and tax documentation under Indian and German commercial regulations.
  • Art. 6(1)(f) GDPR (Legitimate Interests): For maintaining website uptime, preventing malicious DDoS attacks, and optimizing our user interface.
04

Direct WhatsApp Inquiries & Communications

When you click the floating WhatsApp button or submit an inquiry using our WhatsApp action button, you are redirected to the official WhatsApp application (operated by WhatsApp Ireland Limited / Meta Platforms Inc.).

Your initial message is transferred via WhatsApp’s end-to-end encrypted messaging service. We only use your WhatsApp contact number to respond to your direct queries regarding course batches, eligibility assessments, and placement status. We do not subscribe your phone number to unsolicited third-party marketing broadcast lists.

05

Sharing of Data & International Transfers

We only share your profile documentation with third parties when strictly necessary for the fulfillment of your Germany relocation pathway:

  • Accredited German Host Institutions & Employers: German hospitals, senior care foundations, kindergarten networks, and vocational schools for scheduling candidate interviews and issuing binding contracts (only after your explicit written approval).
  • German Embassy & Visa Authorities: To assist you with preparing complete, compliant visa dossiers for appointment submissions.
  • Secure Cloud & Web Hosting Providers: State-of-the-art server infrastructure operating under strict Data Processing Agreements (DPA).

Transfers between our Indian operating headquarters, student representatives, and German host institutions comply with EU Standard Contractual Clauses (SCCs) and GDPR Chapter V requirements to ensure an adequate level of data protection at all times.

06

Data Retention & Erasure (Speicherdauer)

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

  • General Consultation Inquiries: Deleted or anonymized after 12 months of inactivity if no course enrollment or placement agreement is initiated.
  • Enrolled Students & Placed Candidates: Retained during the duration of your course and relocation onboarding, plus the statutory retention periods mandated by fiscal and commercial law (typically 6 to 10 years for financial records).
07

Your Statutory Rights under GDPR & DPDP

Under data protection regulations, you hold the following unconditional rights regarding your personal data:

  • Right to Access (Art. 15 GDPR): Obtain confirmation of whether your data is being processed and receive a free copy of your stored records.
  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal information.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request immediate deletion of your personal data when it is no longer needed.
  • Right to Restriction of Processing (Art. 18 GDPR): Limit how we process your data under specific contested conditions.
  • Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used, and machine-readable format.
  • Right to Object & Revoke Consent (Art. 21 & Art. 7(3) GDPR): Revoke consent for communications or processing at any time with immediate future effect.

To exercise any of these rights, simply contact us via email at info@thesprachstudio.com.

08

Cookies & Technical Storage

Our website uses strictly necessary technical cookies to enable fundamental navigation, ensure CSRF security, and preserve essential UI states. We do not deploy invasive third-party cross-site advertising trackers or sell browsing data to data brokers.

Have questions about your data?

Contact our Data Protection Officer directly for prompt assistance.