Privacy policy

Controller

URSCHILD UG (haftungsbeschränkt), Nordstrandweg 2, c/o Sadat, 22047 Hamburg, Germany, represented by its managing director Said Abdullah Sadat. Email: info@studyineu.de. For questions about your data or to exercise your rights, write to this address.

Visiting the website

When you open a page, your browser sends technical data that our hosting and network providers process to deliver the page and protect the service: IP address, date and time, the page requested, the referring page, browser and operating system, and status codes. This data is kept in the providers' logs only for the short period their operation and security require and is not combined with other data to identify you.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and attack resistant website.

Fonts are served from our own server. The website contains no advertising, no audience analytics and no embedded social media content. Links to our social channels only open those services when you select them.

Contact form

When you use the contact form we store your name, email address, subject, category and message, and, if you are signed in, the account and organization you choose. We use them only to answer your enquiry and to keep the conversation in our support inbox, which only authorized staff can open.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or steps before one, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries. The name, email address, subject and message are needed to answer you.

Email

Emails to addresses at studyineu.de are received and stored in Microsoft 365. Account emails such as invitations and password recovery, and support replies sent from the support inbox, are delivered through Resend. We use your email address and the content of your message only to handle the matter you contact us about or the account action you requested.

Legal basis: Art. 6(1)(b) GDPR for account emails and contract related messages, otherwise Art. 6(1)(f) GDPR, our legitimate interest in communicating with you.

Accounts

Accounts are opened by invitation only. For an account we process your email address, name, role and organization memberships, a protected form of your password, your authenticator registration for two step sign in, and security records of sign in events with time and IP address.

Legal basis: Art. 6(1)(b) GDPR for providing the account, and Art. 6(1)(f) GDPR for security records, our legitimate interest in protecting accounts against misuse.

Service providers

We use service providers that process data on our behalf under data processing agreements (Art. 28 GDPR) and only on our instructions.

Supabase (Supabase Pte. Ltd., Singapore) operates our database and account sign in. The database is located in Frankfurt, Germany. Access from outside the European Union is covered by the EU standard contractual clauses.

Render (Render Services, Inc., United States) hosts the website in its Frankfurt region.

Cloudflare (Cloudflare, Inc., United States) provides the domain name service and network protection for studyineu.de.

Resend (United States) delivers emails sent by the platform. The content and delivery records of these emails are stored in the United States.

Microsoft (Microsoft Ireland Operations Limited, Ireland) provides the mailboxes for addresses at studyineu.de.

Render, Cloudflare and Resend, and Microsoft for its affiliates in the United States, are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR). Where a certification does not apply, transfers rely on the EU standard contractual clauses (Art. 46 GDPR).

We do not sell your data or pass it to other third parties unless the law requires us to.

How long we keep data

We keep personal data only as long as the purpose requires. Enquiries and support conversations are kept while the matter is open and as long as follow up questions can reasonably be expected. Account data is kept while the account exists. Where commercial or tax law requires us to keep records, we keep them for the statutory period and restrict their use to that purpose. Afterwards the data is deleted.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). Write to info@studyineu.de.

You can also lodge a complaint with a supervisory authority, for example the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, www.datenschutz-hamburg.de.

We do not use automated decision making or profiling within the meaning of Art. 22 GDPR.