Privacy Policy

BALTIC COUNCIL FOR INTERNATIONAL EDUCATION GENERAL PRINCIPLES TERMS AND DEFINITIONS FOR PROCESSING PERSONAL DATA.
In order to be able to offer you the services of the Baltic Council for International Education, we also need some data about you. We take the protection of personal data very seriously and always process it in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation. With this data protection declaration we would like to inform you about the type, scope and purpose of the personal data processed by us and your rights as the person concerned.

Personal data provider means any person who processes personal data and / or any person on whose behalf personal data is processed. The main operator is the company BALTIC COUNCIL FOR INTERNATIONAL EDUCATION, registration number: 40008085919, address: 33/35 Gertrudes str, Riga, LV 1011, Latvia. The authorized operator is the person authorized by the main operator to process personal data. The authorized operator is an internal employee of BALTIC COUNCIL FOR INTERNATIONAL EDUCATION.

"Data subject" means any natural or legal person who has shared its personal data to the Principal Operator and whose data is processed by the Principal Data Operator in accordance with the general principles of personal data processing.
Personal data - data about the data subject that the data subject sent / informed the operator of personal data via a website, e-mail or telephone. These data include the name, surname, phone number, e-mail address, address, passport number, date of birth, gender and other data that allow you to identify a person.
Personal data processing - any activity carried out with personal data, including collecting, recording, organizing, storing, changing, disclosing, accessing, viewing, extracting, using, transferring, sharing, merging, terminating, deleting or destroying personal data or some of the above actions, regardless of how the activities are carried out or what means are used.
"Third party" means any natural or legal person, with the exception of the data subject, the main operator, the authorized operator or the person processing personal data on behalf of the principal or authorized operator.

OBJECTIVES AND PRINCIPLES OF PERSONAL DATA PROCESSING
The personal data operator processes personal data for the general management of relations with customers and for the provision, sale, promotion and administration of products and services.
The personal data operator can not transfer, lease or transfer personal data or transmit them in any other way to third parties and for use by third parties (except in cases and where provided for in these General Principles of Personal Data Processing).
When processing personal data, the personal data operator must comply with the principles stipulated in the Personal Data Protection Act and the General Regulation on Data Protection of the EU.

COLLECTION AND PROCESSING OF DATA
We process your data exclusively on the basis of one or more of the possible legal bases:
According to the GDPR, personal data can be processed in particular on the basis of a contract or to carry out pre-contractual measures, if consent has been given, on the basis of a legitimate interest or a law and to protect vital or public interests.
When booking a language course or accommodation or when purchasing other services that are subject to payment, we use your contract master data, including contact details, for the execution and fulfillment of the contract, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, as well as the enforcement of legal claims or demands is necessary (Art. 6 Para. 1 lit. b GDPR). The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. In the case of paid services, we process certain data because we are subject to a legal obligation.

We also use the e-mail address you provided during registration or as part of the execution of the contract to inform you by e-mail about our own similar goods or services and about existing bookings or about the BCIE in general. In this case, the e-mail address is processed on the basis of our legitimate interest in advertising our goods and services (Article 6 (1) (f) GDPR).
In addition, we use your e-mail address to send you our newsletter if you have given us your prior express consent to receive a newsletter or advertising. In this case, we process your e-mail address in order to be able to send you the newsletter as requested (Art. 6 Para. 1 lit. b GDPR). You can object to the use of your e-mail address for such purposes at any time in writing via info@balticcouncil.org.

Every device on the Internet needs a unique address, the so-called IP address, to transmit data. The at least temporary storage of the IP address is technically necessary to enable delivery of the website to the user's computer. We shorten the IP addresses before any processing and only process them anonymously. There is no storage or further processing of the unabridged IP addresses. Our servers also store your IP address for 14 days for their own security purposes.
In the case of processing operations that are not covered by any or more of the aforementioned legal bases, processing takes place if it is necessary to safeguard a legitimate interest and, based on a comprehensive weighing of interests, your interests, fundamental rights and fundamental freedoms do not outweigh them (Art. 6 Para. 1 lit. f GDPR). A legitimate interest can be assumed if the data subject is a customer of the person responsible. If the processing of personal data is based on this, our legitimate interest is, in particular, conducting our business for the benefit of all our employees and our shareholders.
Our legitimate interest in being able to offer you products that are tailored to your needs, to inform you about new products and to constantly improve our services and thereby increase our sales, is the legal basis for processing for usage-based online advertising and web analysis. For web analysis services in detail, see section 9. Another legitimate interest is the functionality of company processes (e.g. address management / accounting). You can object to processing based on a legitimate interest at any time.

In the event that the data is processed for a purpose other than that stated when the data was collected, a compatibility check will be carried out in accordance with Article 6 (4) GDPR. Further processing is only permitted if the original purpose is compatible with the new purpose or is permitted on the basis of a separate legal basis. Recognized compatible purposes include the assertion, exercise or defense of civil claims unless the data subject has an overriding interest. In this case we will inform you about the change of purpose. If the new purpose is not compatible with the purpose stated at the time of collection, a new collection will take place on the basis of a new legal basis. Again, we will inform you about the change of purpose.

Every access to our homepage and our blog and every retrieval of a file stored on the homepage are logged. The storage serves internal system-related and statistical purposes. The following are logged: name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. Additionally, the IP addresses of the requesting computers are logged. Further personal data is only recorded if you provide this information voluntarily, for example as part of an inquiry or booking.

Our services are intended for the general public. Since minors can also use our services, such as language courses and other programmes , we collect data from minors only with the consent of the legal guardian.

You can also use our online services that do not require payment or registration without providing any personal data. In principle, this only happens to the extent that this is necessary to provide a functioning website and our content and services. Furthermore, we process personal data in connection with the use of BCIE if you provide it yourself, e.g. as part of an inquiry or when booking a language course or because there is another legal basis for this. If you do not want this, you will unfortunately not be able to use our services or not to the full extent.
If you send us inquiries (e.g. ordering a catalogue) or register for a language trip or free consultation using the form, your details, including contact details, will be used for the purpose of processing your inquiry or booking and stored by us.

STORAGE OF PERSONAL DATA
In the event of follow-up questions after your request has been processed or your ordered service has been completed, as well as taking into account the retention periods under tax and commercial law, the data that you have made available to us as part of an inquiry or booking will be stored as follows:
-when booking: 10 years in accordance with the statutory retention obligation
-for inquiries/offers: 2 years
If you have made personal data available to us, we only use this to answer your inquiries and bookings, to process contracts concluded with you and for technical administration.
Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing - in particular the transmission of order data to suppliers - this is necessary for billing purposes or you have given your prior consent.

CONSENT OF THE DATA SUBJECT
Personal data is processed on the basis of the consent of the data subject indicated in accordance with Section 7 (1) of the Personal Data Protection Act and Article 6 (1) of the EU General Data Protection Regulations.

The data subject must consent to the operator of personal data to process his personal data in accordance with these principles and the purpose of processing personal data. To give their consent, the data subject must fill in the appropriate printed questionnaires or online forms on the website of the personal data operator www.balticcouncil.org  or provide their data by e-mail or telephone.
Granting consent is a prerequisite for cooperation with the data subject, and uncoordinated consent means that the primary operator can not perform the requested service of the data subject.

The data subject may withdraw his consent at any time by notifying the operator of his personal data to the e-mail address info@balticcouncil.org or unsubscribe from the electronic mailings sent by the Personal Data Operator. The withdrawal of consent does not affect the legality of the processing of personal data that occurred prior to the withdrawal of consent.

COOKIES
Some of the websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit, for example if you have created a watch list.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

USE OF GOOGLE ANALYTICS
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics has been expanded to include the code "anonymizeIp" in order to ensure that IP addresses are recorded anonymously (so-called IP masking). As a result, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de  
You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set, which prevents future collection of your data when you visit this website (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must use this Click link again): Disable Google Analytics
Further information on terms of use and data protection can be found at  https://www.google.com/analytics/terms/de.html  or at  https://www.google.de/intl/de/policies/   

GOOGLE ANALYTICS REMARKETING
As an Adwords customer, we use the Google remarketing function. With this function, we can address users of our website on other websites within the Google display network (on Google itself, so-called “Google ads” or on other websites) with advertisements based on their interests. For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to present the user with targeted advertising on other pages after visiting our website. The advertisement is displayed using cookies, which are small text files that are stored on the user's computer. With the help of the text files, user behavior when visiting the website can be analyzed and then used for targeted product recommendations and interest-based advertising. The cookies are used to uniquely identify a web browser on a specific computer and not to identify a person, personal data is not stored. You can deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin .
You can find more information about Google Remarketing and Google's privacy policy at:  https://www.google.com/privacy/ads/ .

GOOGLE ADWORDS WITH CONVERSION TRACKING
As an Adwords customer, we also use the analysis function Google Conversion Tracking. Google Adwords sets a conversion tracking cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days. They do not contain any personal data and are therefore not used for personal identification. If you visit certain web pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. There is therefore no way for cookies to be tracked through AdWords advertisers' websites.

The information obtained using the conversion cookie is used to create conversion statistics for those AdWords customers who have opted for conversion tracking. The Adwords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to take part in the tracking process, you can prevent the setting of a cookie required for this by generally deactivating the automatic setting of cookies through a corresponding setting in your browser. You will then not be included in the conversion tracking statistics.  https://www.google.de/policies/privacy/

SOCIAL MEDIA WIDGETS
Social media widgets from Facebook, Instagram, Twitter, Pinterest and Google+ are integrated on our website. Via these social media services, users of such a service can collect links and news reports. These services are only included on our website as a link to our respective profile pages. After clicking on the integrated graphic, you will be redirected to the website of the respective provider, ie only then will user information be transmitted to the respective provider.
Information on the handling of your personal data when using the websites of Facebook, Instagram, Twitter, Pinterest and Google+ can be found in the respective data protection regulations of the providers.
You can find Facebook's privacy policy at https://de-de.facebook.com/policy.php .
Information on Instagram's privacy policy can be found at: https://instagram.com/about/legal/privacy/  
You can find Twitter's privacy policy at  https://twitter.com/privacy. You can change your privacy settings on Twitter in the account settings at  https://twitter.com/account/settings  .
You can view Pinterest's privacy policy at https://pinterest.com/about/privacy
You can find more information about Google's data protection regulations at the following Internet addresses: https://policies.google.com/privacy?gl=de  or https://policies.google.com/privacy/partners?hl=de

PROTECTION OF PERSONAL DATA AND RESPONSIBILITY
The personal data operator ensures the protection of personal data by all types of organizational, physical and IT security measures. The personal data operator confirms that all measures necessary to protect personal data have been implemented, the processing of personal data is limited to the extent necessary to achieve the purpose of processing personal data.

If the data subject has agreed to the processing of personal data in connection with the requested service, the personal data must be stored to refuse the consent of the data subject.

The personal data operator permits access to personal data only to those employees of the personal data operator who have the right to process personal data, and only to the extent necessary to achieve the purposes for which the processing of personal data is carried out.

The operator of personal data is responsible for compliance with the requirements set forth in the Personal Data Protection Act and the General Provision on Data Protection of the EU after its entry into force.

YOUR RIGHTS AS A DATA SUBJECT
You havethe right to access your personal data stored by the Personal Data Operator and to obtain additional information on the processing of your personal data.
You have the right at any time to apply for processing of his personal data, including requesting the termination of processing or disclosure of his personal data or the termination of access to personal data and / or the removal, correction or blocking of collected data, if this right is in compliance with the standards The law on the protection of data of individuals or any other law.
If you discover that the Personal Data Operator has violated your rights in the processing of personal data or if the data subject is requesting the deletion of  your data, you have the right to file a request to terminate or eliminate the operator's personal data violation via e-mail info@balticcouncil.org. The data subject has the right to apply to the State Data Inspectorate or the court at any time to protect his rights.

COMPANY DETAILS
Baltic Council for International Education
Registration №    40008085919
VAT №    LV40008085919
Address: Ģertrūdes 33/35, Rīga, LV-1011
SWEDBANK, HABA LV 22
LV52HABA0551009046271