Privacy policy

The key points at a glance

Below we explain this in detail.

1. Who is responsible?

The controller responsible for processing your data on this website is:

English in Britain

Owner: Daniel Baruch

Fichardstraße 38

60322 Frankfurt am Main

Email: info@englishinbritain.de

Telephone: +49 69 91 50 96 80

If you have any questions about data protection or wish to exercise your rights, you can contact us at this address at any time. We have not appointed a data protection officer, as our company is not legally required to do so.

2. No cookies, no tracking

Our website does not store any information on your device when you visit it, nor does it read any from it — neither cookies nor comparable technologies such as your browser’s local storage. We do not use visitor statistics, advertising networks or social media plugins. Fonts and images are hosted on our own server; no content is loaded from third-party servers when you open a page.

The only exception is embedded videos from YouTube and Vimeo. However, these are only loaded after you click on them (see section 7).

3. Visiting the website and hosting

Our website is hosted on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, with its data centre in Germany. netcup processes the data exclusively on our behalf; we have a data processing agreement with netcup.

When you visit our website, your browser necessarily transmits information to our server for technical reasons, in particular your IP address, the address requested and details of your browser and operating system. This data is needed in order to deliver the page to you at all.

We do not keep an access log. The data mentioned above is processed only for the duration of the connection and is not stored.

If a technical error occurs, the server may write an error log that also contains the IP address of the request concerned. These error logs serve solely to ensure the secure and smooth operation of the website and are automatically deleted after 14 days.

The legal basis is our legitimate interest in a functioning and secure website (Art. 6(1)(f) GDPR).

4. Enquiry forms

4.1 What happens to your details?

When you submit one of our forms, your details are transmitted to our server, checked there and sent as an email to our company mailbox. The content of your enquiry is not stored on the web server itself — the only technical record is that a form was submitted and whether it was sent successfully, without your details.

Required fields are marked as such. All other details are voluntary; they help us to make you a suitable offer.

4.2 Our forms at a glance

FormWhat we use the data forTypical detailsLegal basis
Course enquiry and enquiry forms on our topic pages (e.g. language courses abroad, scholarship)Answering your enquiry, preparing an offerName, email address, telephone number if applicable, travel plans, period, your messageSteps prior to entering into a contract (Art. 6(1)(b) GDPR)
Extended enquiry formDetailed, individual offerAs above, plus your postal address and details of children travelling with you (age, course preferences)Steps prior to entering into a contract (Art. 6(1)(b) GDPR)
School year enquiryAdvice and an offer for a stay at a school or boarding schoolNames of the parents and of the child, place of residence, contact details, the child’s date of birth and current school year (class), desired startSteps prior to entering into a contract (Art. 6(1)(b) GDPR)
Request a callbackAdvice by telephone at the time you chooseName, telephone number, preferred time, your concernSteps prior to entering into a contract (Art. 6(1)(b) GDPR)
Contact formAnswering your messageName, email address, telephone number if applicable, messageSteps prior to entering into or performance of a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR)

You do not have to answer the question of how you heard about us. If you do, we only evaluate the answers in aggregate, to understand how people find us.

4.3 Enquiries for children and teenagers

Many of our programmes are aimed at school students. Enquiries for minors — particularly for a school year abroad — are usually made by their parents. We use the details about the child exclusively to select suitable schools and programmes and to prepare an offer. They are not passed on to schools at the enquiry stage (see section 6).

4.4 Protection against automated spam enquiries

To protect our forms against large numbers of automatically sent enquiries, we use simple technical checks, without an external service and without a captcha. For this purpose, the form receives a time-limited check value when it is opened, which is contained only in the form itself and is not stored on your device. In addition, your IP address is used briefly in the server’s memory to limit the number of enquiries per sender — to a maximum of five enquiries per hour. It is not stored permanently and is not written to disk.

The legal basis is our legitimate interest in protecting our forms against misuse (Art. 6(1)(f) GDPR).

4.5 Sending emails

To send the form emails and for our email mailboxes, we use hosting.de GmbH, Franzstr. 51, 52064 Aachen, as a service provider with servers in Germany. hosting.de processes the data exclusively on our behalf; we have a data processing agreement in place.

4.6 Language tests

Our online language tests do not ask for any personal details. They are evaluated entirely in your browser; your answers are neither transmitted to us nor stored.

5. Contact by email or telephone

If you contact us directly by email or telephone, we process your details in the same way and on the same legal bases as for a form enquiry (section 4).

6. Booking and disclosure to schools and course providers

As long as you are only making an enquiry, your data stays with us.

Only once you decide to make a booking do we pass on the details required to carry it out to the booked language school, boarding school or the relevant course or camp provider — so that they know who is arriving and can organise lessons, accommodation and supervision. The data is transmitted individually and by hand, not automatically. The schools and providers then process the data under their own responsibility.

The legal basis is the performance of the contract concluded with you (Art. 6(1)(b) GDPR).

Our partners are based in the United Kingdom (England, Scotland, Wales, Northern Ireland), in Ireland and in Germany. Ireland and Germany are members of the European Union. Since Brexit, the United Kingdom is no longer part of it; however, the European Commission has found that it provides an adequate level of data protection (adequacy decision, valid until December 2031). Transfers there are therefore permitted without further safeguards.

7. Videos (YouTube and Vimeo)

On some pages we show videos from the platforms YouTube and Vimeo.

7.1 How the videos are embedded

All videos are embedded in such a way that no connection whatsoever to YouTube, Google or Vimeo is established when the page is opened. At first you only see a preview image hosted on our own server, or a placeholder — each with a notice that data will be transmitted to the respective provider when the video is played.

Only when you click on the video is it loaded from the respective provider. Clicking establishes a connection to the provider’s servers; among other things, your IP address, the address of our website and technical details of your browser are transmitted. The provider may also store information on your device or read it from there.

The legal basis is your consent, which you give by clicking on the video (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies only to the video you clicked on. If you reload or leave the page, the video will not be loaded again until you click on it again.

7.2 YouTube

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use the so-called privacy-enhanced mode (youtube-nocookie.com). It cannot be ruled out that data is also transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

Further information: https://policies.google.com/privacy

7.3 Vimeo

The provider is Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. Its representative in the European Union is the European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

We embed the Vimeo player with the “Do Not Track” setting. Vimeo then does not set its own cookies for recognition and does not record any session data for analysis. However, Vimeo uses the infrastructure service provider Cloudflare, which may place technical cookies on your device to fend off automated access; some of these may remain stored for up to one year. From our website, Vimeo only receives the address of our domain, not the specific page on which you watched the video.

Vimeo processes the data in the USA. Vimeo.com, Inc. is certified under the EU-US Data Privacy Framework.

Further information: https://vimeo.com/legal/privacy

On some pages we link to maps on Google Maps. These are simple links — no map is loaded and no connection to Google is established when you open our page. Only when you click the link do you leave our website and open Google’s page; Google’s privacy policy applies there.

9. Who receives your data?

In summary, your data is only received by:

We do not sell data and do not pass it on for advertising purposes.

10. How long do we store your data?

11. Your rights

You have the right at any time

An informal message to info@englishinbritain.de is sufficient.

Right to object: Insofar as we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your data unless there are compelling legitimate grounds.

12. Right to lodge a complaint

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wilhelmstraße 7, 65185 Wiesbaden (PO Box 3163, 65021 Wiesbaden), telephone +49 611 1408-0, email poststelle@datenschutz.hessen.de. You can, however, also contact the supervisory authority where you live.

13. Other information

Obligation to provide data: You are not obliged to provide us with any data. Without your contact details, however, we cannot answer your enquiry.

No automated decisions: We do not make any decisions about you that are based solely on automated processing.

Encryption: The entire website is transmitted in encrypted form (HTTPS). You can recognise this by the padlock symbol in your browser’s address bar.

Changes: We adapt this privacy policy when our website or the legal situation changes. The version published here applies in each case.

Last updated: 27 September 2026