Data Privacy Policy

Last updated: 24 May 2018

Data protection and data security for our organisation’s customers and partners as well as interested parties in and users of our website are of high importance within our organisation. Transparency regarding the processing of your personal data as well as protecting your data are therefore of key importance to us. We created this Policy to provide you with an overview of how your personal data is collected and processed when using our website, and what you can do yourself to ensure your data is better protected, where applicable.

Data Processing Controller

SRH Higher Education GmbH

Bonhoefferstr. 1                                   
69123 Heidelberg, Germany

Phone: +49 6221 8223-065                            
Fax: +49 6221 8223-109

Data protection officer of our organisation

What is personal data?

Personal data is any information that relates to an identified or identifiable natural person. What is essential here therefore is whether a personal reference can be made using the collected data. This includes information such as your name, address, telephone number or email address. Information which is not directly connected to your actual identity, such as favourite websites or number of users of a site, is not regarded as personal data.

How we collect and process your personal data

When you visit our web pages, we save the connection data from the requesting computer, the web pages you visit on our website, the date of your visit, identification data of the browser and operating system used and the website you are visiting us from for the duration of your visit as standard. Additional personal data, such as your name, your address, telephone number, or email address is not collected; unless you provide this data voluntarily, e.g. in connection with a registration, with a survey, with a prize competition, with the implementation of a contract, or with a request for information.

How we use your personal data and how we disclose it

If the online service includes the option to enter personal or commercial data (email addresses, names, addresses, etc.), this data may be disclosed by the user on a purely voluntary basis. Emails are transmitted via a contact form. When you send such a message, your personal data is collected only to the extent necessary to reply. The email is sent in an unencrypted manner.

If you have provided us with any personal data, we shall only use this data for the technical administration of the web pages and to respond to your wishes and requests, which as a rule means to process any contract concluded with you or to reply to any queries you may have.

It is only if you have given us your consent beforehand, or if you – subject to it being provided for under statutory regulations – have not raised an objection, that we will also use this data for product-related surveys, marketing and statistical purposes.

Your personal data is not disclosed, sold or transmitted in any other way to third parties unless it is necessary in order to fulfil a contract or you have given your express consent. Any consent granted can be revoked at any time with future effect.

For how long will my data be stored?

Generally speaking, we store all information that you send to us until the respective purpose, i.e. the contractual purpose, has been fulfilled. This means, for example, until any queries have been resolved, or in the case of newsletters, until you to choose to unsubscribe from them. If there is provision in place by law for an extended storage period, the data will be stored within this framework.

If you no longer wish us to use your data, we will of course comply with this request immediately (please also refer to the address stated under “Contact”).

When will my data be deleted?

The deletion of the personal data stored is carried out if you revoke your consent to such storage, if knowledge of such data is no longer necessary for the fulfilment of the purpose pursued with the storage, or if the storage of such data is inadmissible on other legal grounds. Data for invoicing and accounting purposes will not be affected by a deletion request.

Use of cookies

We make use of so-called cookies during your visit to our website. Cookies are small data files which are stored on your computer. Cookies help us to check on the frequency of use and the number of users who visit our web pages, and to make our services to you as convenient and efficient as possible.

On the one hand, we use so-called “session cookies”, which are exclusively stored temporarily for the duration of your use of one of our web pages. On the other hand, we also use “permanent cookies” in order to record data on visitors who repeatedly access one of our web pages. The purpose of using cookies is to be able to offer you optimal user guidance as well as to "recognise" you and thus be able to present to you as diversified a website as possible along with new content during repeated use. The content of a permanent cookie is limited to an identification number. Name, IP address, etc. are not stored. No individual profile is created on your usage behaviour.

Our website offer can also be used without cookies. You can change your browser settings to disable cookies, restrict them to certain websites or set your browser to alert you whenever a cookie is sent. Please note, however, that applying such settings may affect the way in which the website is displayed or limit user guidance.

Cookies that are needed to carry out electronic communication processes or to provide certain functions that you wish to use (such as the shopping cart function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies on your computer to allow it to provide you with a technically flawless, streamlined service. If other cookies (such as cookies for analysing your browsing behaviour) are stored on your computer, they will be treated separately in this Privacy Policy.

What we do to ensure security of data processing

Our organisation takes all of the necessary technical and organisations security measures to ensure your personal data is protected from loss or misuse. Accordingly, your data shall be stored in a secure operational environment that is not open to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and our organisation’s servers if your browser supports SSL.

Or: SSL and TLS encryption

For reasons of security and to protect the transfer of confidential content, such as the orders or enquiries that you send to us as the website operators, this site uses SSL and TLS encryption. You can identify an encrypted connection from the padlock symbol in your browser bar and the fact that “http://” in the address bar changes to “https://”.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Should you wish to contact our organisation via email, we would like to point out that the confidentiality of the transmitted information cannot be guaranteed. The content of emails may be viewed by third parties. We would therefore recommend that you arrange for confidential information to be sent to us exclusively by post.

Your data protection rights

In accordance with the various statutory provisions in place, you shall be entitled to obtain information at any time, and free of charge, regarding your stored personal data, its origin and potential recipients and the purpose of the data processing (Article 15 GDPR) and, where applicable, the right to rectification of inaccurate data (Article 16 GDPR), the right to erasure of such data (Article 17 GDPR), the right to restriction of processing according to Article 18 GDPR, the right to object (Article 21 GDPR) and the right to receive the personal data that you have provided according to Article 20 GDPR. The limitations according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

In addition, you shall also have the right to lodge a complaint with a responsible supervisory authority in the event of infringements under data protection law (Article 77 GDPR in conjunction with Section 19 BDSG). The responsible supervisory authority in data protection matters is the state data protection officer of the federal state in which our organisation has its registered office. A list of data protection officers and their contact details can be found under the following link:

How you can withdraw your consent to data processing

A lot of data processing operations can only take place with your express consent. You can withdraw your consent at any time. All you have to do is send us a simple email. The legality of any data processing carried out before you withdraw your consent will not be affected by withdrawal of your consent.

Contact details in the event of queries or complaints and assertion of your rights

Should you have any queries or complaints or wish to assert your data protection rights, please feel free to contact us.

Via Post: SRH Higher Education GmbH, Bonhoefferstr. 1, 69123 Heidelberg, Germany
Via E-Mail:

Changes to the Privacy Policy

Changes may be made to these privacy notices that must also be published in a timely manner on this website.

Google Analytics

We use Google Analytics, a web analysis service from Google Inc. ("Google"). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google uses cookies. The information generated by the cookie regarding use of this website by the user is usually transferred to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate use of our website by users, to produce reports on activity within this website offer and to provide other services to us related to the use of the website offer and of the Internet. As part of this process, pseudonymised usage profiles of users may be generated out of the data processed.

We only use Google Analytics with IP anonymisation enabled. This means that the IP address of users will first be abbreviated by Google within the Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports about website activities and to provide additional services relating to website and internet use. The IP address transmitted by the user’s browser will not be merged with other data by Google.

Browser plug-ins
You can prevent cookies from being stored by means of a special setting in your browser software; we must inform you, however, that if you do so, you will not be able to use all of the functions on this website fully. You can also prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

Further information on the use of data for advertising purposes by Google, as well as settings options and procedures available for opting out can be found on Google’s website: (“How Google uses information from sites or apps that use our services”), (“Advertising”), (“Control the information Google uses to show you ads”) and (“Take control of your Google ads experience”).

Data processing
We have concluded an agreement with Google on contract data processing and implement in full the strict provisions of the German data protection authorities for the use of Google Analytics.

Google Web Fonts

In order to ensure the uniform display of fonts, this website uses so-called Web Fonts provided by Google. When you visit a website, your browser loads the necessary Web Fonts in your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. In this way, Google is informed that our website has been visited via your IP address. We use Google Web Fonts in the interest of displaying our online platform in a consistent, appealing fashion. This represents a legitimate interest within the meaning of Article 6(1)(f) GDPR.

If your browser does not support Web Fonts, your computer will use a standard font.

You can find further information on Google Web Fonts at and in Google’s Privacy Policy:

Application and use of YouTube

YouTube components are integrated on this website. YouTube is an Internet video portal that gives video publishers the opportunity to upload video clips free of charge, and also gives other users the opportunity to view, rate and comment on these video clips free of charge. YouTube authorises the publication of all kinds of videos, which is why entire film and television programmes along with music videos, trailers or videos made by users themselves can be viewed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time you visit a page on our website on which a YouTube component has been integrated (YouTube Video), your Internet browser is automatically instructed by the respective YouTube component to download the corresponding YouTube component from YouTube. Further information on YouTube can be retrieved at As part of this technical process, YouTube and Google are both informed of the specific sub-pages on our website that you have visited.

If you are logged in to YouTube at the same time, YouTube is informed when you visit a sub-page containing a YouTube video of which specific sub-page of our website the data subject has visited. This information is collated by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will always be informed via the YouTube component about the fact that the data subject has visited our website if you are also logged in to YouTube at the same time as visiting our website. This happens regardless of whether you click on a YouTube video or not. If you do not want such information to be transferred to YouTube and Google, you can prevent this from happening by logging out of your YouTube account before visiting our website.

The privacy regulations published by YouTube, which can be retrieved at, give an insight into the collection, processing and use of personal data by YouTube and Google.