Privacy Policy - Nipponcademy

Privacy Notice

Name and Address of the Data Controller

The responsible entity for data protection regulations, including the General Data Protection Regulation (GDPR), is:

Eurasia-Linkup Nipponcademy GmbH
Im Flath 9, 29313 Hambühren, Germany

Tel: +49 5084 9609890
Email: info@nipponcademy.com

General Information on Data Processing

Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:

The necessity of processing for the performance of a contract or in order to take steps prior to entering into a contract.
Compliance with a legal obligation to which we are subject.
Your consent to the processing of your personal data for one or more specific purposes.
The necessity of processing for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

Data Deletion and Storage Period
We adhere to the principles of data minimization and storage limitation. We store your personal data only as long as necessary to achieve the purposes mentioned here or as required by applicable law. After the respective purpose ceases to exist or after the expiration of these periods, the corresponding data is routinely deleted.

External Links
This website may contain links to third-party websites or other websites within our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy policies. We do not assume any responsibility or liability for these third-party websites and their privacy practices. Before using these websites, check whether you agree with their privacy policies.

Rights of the Data Subject

As a data subject, you have the following rights:

Right to access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority

Right to Withdraw Consent
You may withdraw your consent at any time. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to Object
If the processing of your personal data is based on our legitimate interests, you have the right to object to the processing at any time for reasons arising from your particular situation. If we cannot demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims, we will cease processing your data after your objection.

Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged violation.

Right to Data Portability
You have the right to receive your data in a structured, commonly used, and machine-readable format and to request the transfer of this data to another controller, where technically feasible.

Right to Access, Rectification, and Erasure
You have the right to obtain information about the processing of your personal data, the purposes of processing, the categories of data processed, the recipients, and the duration of storage. For questions about this or other matters concerning personal data, you can contact us using the contact details provided in the legal notice.

Right to Restriction of Processing
You can request the restriction of processing of your personal data under the following conditions:

You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead.
We no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims.
You have objected to processing pending the verification whether our legitimate grounds override yours.

Provision of the Website (Web Hosting)

Our website is hosted by:

DM Solutions GmbH Friedrichstr. 50A 63450 Hanau, Germany

When you access our website, we automatically collect and store information in server log files that your browser transmits to our server or to the server of our hosting provider. These are:

IP address of the requesting device
Device used
Hostname of the accessing computer
Operating system of the visitor
Browser type and version
Name of the accessed file
Time of the server request
Data volume
Information whether the retrieval of the data was successful

This data is not combined with other data sources. The legal basis for processing this data is our legitimate interest in the technically error-free presentation and optimization of our website.

Use of Cookies, Local Storage Items, and Session Storage Items

Our website uses local storage items, session storage items, and cookies. Local storage is a mechanism that allows data to be stored within the browser on your device. These data typically include user preferences, such as the “day” or “night” mode of a website, and remain until you manually delete the data. Session storage is similar to local storage, but the storage duration is only for the current session, i.e., until the current tab is closed. Afterward, the session storage items are deleted from your device. Cookies are pieces of information that a web server stores on your device to identify the device. They are either temporarily stored for the duration of a session (session cookies) and deleted after your visit to a website or permanently (permanent cookies) stored on your device until you delete them or an automatic deletion is carried out by your web browser.

These objects can also be stored on your device by third-party companies when you visit our site (third-party cookies). This allows us and you as a visitor to use certain third-party services installed on this website, such as payment services or video display.

These mechanisms have a variety of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website usage, and conduct analyses regarding visitor flows and behavior. Depending on the specific functions, these are to be classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website, their use is based on our legitimate interest in the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items, and cookies are only stored with your explicit consent.

As far as local storage items, session storage items, or cookies are used by third parties or for analysis purposes, we will inform you separately within this privacy notice. Your required consent will be requested and can be withdrawn at any time.

Use of External Services

We use external services on our website. External services are services provided by third parties that are used on our website. This can occur for various reasons, such as embedding videos or ensuring the security of the website. When using these services, personal data is also transmitted to the respective providers of these external services. If we do not have a legitimate interest in using these services, we obtain your revocable consent as a visitor to our website before use.

Matomo Analytics

We use the web analytics service Matomo, which we host locally on our own servers. We use Matomo exclusively with anonymous data, making it impossible to precisely identify website visitors.

The processing is based on our legitimate interest in an anonymized evaluation of user behavior and access figures. IP addresses are anonymized to 2-byte length, making tracing back impossible. Moreover, we do not use cookies or similar technologies within the use of Matomo.

Consent Management

To comply with data protection requirements, we use a consent management tool on our website. This tool obtains the necessary consents for setting cookies or using external services. The consents are stored.

The processing is necessary to fulfill a legal obligation to which the controller (website operator) is subject. The legal basis for the processing is therefore compliance with legal obligations.

Borlabs Cookie

We use the Borlabs Cookie service on our website. The provider of the service is Borlabs – Benjamin A. Bornstein, Rübenkamp 32, 22305 Hamburg, Germany.

Since this service is hosted locally on the web server, no data is transmitted to third parties.

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. The provider of this network processes your IP address and the time of your visit to our website. All other information about the data processing by this provider can be found in their privacy notice.

We base this processing on our legitimate interest in providing our website as quickly, securely, and reliably as possible.

Google Static

We use the Google Static service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: Google Privacy Policy.

Content Management System

A Content Management System (CMS) allows the creation, editing, organization, and display of digital content. We use a CMS to create content for our website, enabling us to provide a more engaging website.

We base this processing on our legitimate interest in the technically error-free presentation and optimization of the website.

Elementor

We use the Elementor service on our website. The provider of the service is Elementor Ltd., Tuval St. 40, Ramat Gan, 5126112, Israel.

Since this service is hosted locally on the web server, no data is transmitted to third parties.

WordPress

We use the WordPress service on our website. The provider of the service is Automattic Inc., 60 29th Street #343, San Francisco (CA), USA.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: Automattic Privacy Policy.

Map Service

We use a map service on this website. To use and display the map on the website, the map must be loaded from the provider’s server. This involves transferring your IP address to the provider’s server. Depending on the provider, cookies and other technologies, including fonts, may also be loaded. Details can be found in the provider’s privacy notice.

Processing only occurs if you consent to this data processing through our consent banner on the website. The legal basis for this processing is consent. If you do not consent, the data processing described above will not take place. If you withdraw your consent, we will cease this data processing. The legality of the processing carried out until the withdrawal remains unaffected.

Google Maps

We use the Google Maps service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: Google Privacy Policy.

Interface Software

Business processes are more cost-effective, faster, and less error-prone when automated using interface software. This allows integration into company processes via the website or social networks efficiently. We use interface software on our website to connect different applications and securely transfer personal data from one application to another.

Google APIs

We use the Google APIs service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: Google Privacy Policy.

Video/Music Service

Our website integrates audio and video content. These are fetched from the server of the provider, the so-called audio or video platform. To play an audio or video, your device connects with the audio or video platform, transmitting personal data to them. This includes your IP address, any location data, and information about your browser and device.

YouTube

We use the YouTube service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: YouTube Privacy Policy.

Web Fonts

Our website uses web fonts provided by an external provider to ensure consistent display of fonts. When you access our website, your browser loads the required web fonts, establishing a connection to the provider’s servers. This results in the provider knowing that your IP address has accessed our website.

The legal basis for this processing is our legitimate interest in a visually appealing website.

Google Fonts

We use the Google Fonts service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in the transfer of data to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

For more information, please refer to the provider’s privacy notice at: Google Privacy Policy.

Contact Form

Our website offers the opportunity to contact us via a contact form. To use this form, your contact details are required.

The legal basis for processing these data is the performance of a contract or steps prior to entering into a contract. There may also be a legitimate interest in maintaining business relationships or responding to your inquiry for other reasons.

The data will be deleted once we have fully addressed your inquiry and no further retention obligations exist.

Telephone or Email Contact

We have provided a telephone number and email address on our website per legal requirements. The data transmitted to us via these means will be automatically stored to process your inquiry or contact you. This data will not be shared with third parties without your consent.

If the contact is made for pre-contractual or contractual purposes, the legal basis for processing personal data is the performance of a contract. For all other contact, our legitimate interest in processing the personal data applies.

Handling Applicant Data

You may send us applications (e.g., by post, online application form, or email). The personal data obtained through the application process will be stored and processed by us.

The legal basis for processing is the performance of a contract or steps prior to entering into a contract, and consent if granted. If applicable, Section 26 of the Federal Data Protection Act (BDSG) is used as the legal basis for processing. You can withdraw your consent at any time. The legality of processing until withdrawal remains unaffected.

If the application results in an employment relationship, the data will be stored for the execution of the employment relationship. If no employment relationship arises, the data will be stored based on legitimate interest to defend against possible legal claims. If consent is given, data may be stored longer. You can withdraw your consent at any time. The legality of processing until withdrawal remains unaffected.

If no employment relationship arises, you may be included in our applicant pool. Your application data will be stored to contact you for future job openings.

Data stored in the applicant pool will be kept only with your consent. You can withdraw your consent at any time, and the data will be deleted unless legal retention requirements exist. The legality of processing until withdrawal remains unaffected.

Facebook Presence

Social networks process extensive personal data of their users. Visiting our profiles can result in the processing of your IP address and other device information, allowing for user identification. We have no control over this data processing. Note that you use our social media profiles at your own risk. Details about data processing are provided in the privacy notice of the respective operator.

We have a profile on Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For more information, see Facebook’s privacy policy: Facebook Privacy Policy.

Our profiles aim to increase our online presence and brand awareness. The legal basis for this processing is our legitimate interest. Further processing by social networks is based on their legal grounds, such as consent.

We are jointly responsible with the social media platform for data processing when visiting our profiles. Therefore, you can exercise your data subject rights against both the platform and us. However, we have no influence over the platform’s data processing.

Presence on Instagram

We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For more information, see Instagram’s privacy policy: Instagram Privacy Policy.

Presence on YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For more information, see YouTube’s privacy policy: YouTube Privacy Policy.

Google Data Transfer and Processing in the USA

Google transfers and processes data in the USA. Currently, there is no adequate level of protection for data transfers to the USA. This results in risks when processing the data. Google uses standard contractual clauses and is part of the Data Privacy Framework, committing to ensuring an adequate level of data protection.

Website Registration

Visitors can register on our website, requiring the provision of personal data. Registration allows the offering of services or content requiring special information about your person. These personal data are processed and stored exclusively for the use of the respective service or offer.

These data are stored for the duration of your registration on our website. A longer storage period may apply if required by law.

These processing activities are based on consent. The data subject has consented to the processing of their personal data by voluntarily, explicitly, and in advance giving their consent. This also applies if the data subject withdraws their consent.

If registration on the website is necessary to process contract-related content, we rely on the legal basis for the performance of a contract.

Processing for Japan Programs

In the context of facilitating and supporting language trips to Japan (hereinafter referred to as “Japan Programs”), we need to process various personal data. This is necessary to fulfill our contractual obligations and, in some cases, legally required, such as for visa applications. For example, copies of passports, as well as information on occupation, nationality, language proficiency, marital status, religious affiliation, employer, and residence, may be needed.

Where necessary, the personal data provided by the customer will be transmitted to authorized Japanese organizations, such as the Japanese immigration authorities and the respective language school. The specific recipients vary depending on the case; please contact us for a relevant overview. The data transfer is based on the EU Commission’s adequacy decision.

We process special categories of personal data (e.g., religious affiliation, passport copies) based on the customer’s consent under Article 9(2)(a) GDPR. This consent is necessary for us to provide our services. Without the appropriate consent, the customer must provide these data to the respective institutions and organizations. If this does not occur, we cannot ensure the fulfillment of the contract.

Payment Service Providers

We integrate payment services from a specialized provider on our website. When you make a purchase with us, your payment data (e.g., name, amount, bank details, credit card number) are transmitted to our payment service provider and processed by them for the purpose of payment processing. The provider’s contractual and privacy policies apply to these transactions.

The processing of payment data is based on the performance of a contract and the legitimate interest in ensuring a smooth, convenient, and secure payment process.

Stripe

For customers within the EU, the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

The data transfer to the USA is based on the EU Commission’s standard contractual clauses. For details, see: Stripe Privacy Policy.

For more information, see Stripe’s privacy policy: Stripe Privacy Policy.

Stay in Contact with Us