Privacy policy

# Privacy Policy

## 1. Controller

The controller responsible for the processing of personal data on this website is:

**HOGA Career Academy**

Owner: Mohamed Houmam Ghareeb

Liebigstraße 11

73249 Wernau (Neckar)

Germany

Telephone: +49 (0) 7153 7501 253

Mobile: +49 (0) 1522 7509938

Email: [info@hoga-academy.de](mailto:info@hoga-academy.de)

Website: https://www.hoga-academy.de

---

## 2. General Information

The protection of your personal data is important to us.

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection regulations.

Personal data means any information relating to an identified or identifiable natural person.

---

## 3. Purposes of Data Processing

We process personal data in particular for the following purposes:

* Processing inquiries

* Preparing individual offers

* Providing consulting and coaching services

* Conducting online appointments

* Providing support with application processes

* Organizational support for recognition and visa procedures

* Communication with customers and prospective customers

* Contract processing

* Invoicing

* Compliance with statutory retention obligations

* Ensuring IT security

* Improving our services

---

## 4. Legal Bases

Personal data is processed in particular on the basis of:

* Art. 6(1)(a) GDPR (consent)

* Art. 6(1)(b) GDPR (contract or pre-contractual measures)

* Art. 6(1)(c) GDPR (legal obligation)

* Art. 6(1)(f) GDPR (legitimate interests)

---

## 5. Hosting

Our website is hosted by **Hostinger International Ltd.**

As part of the hosting services, Hostinger processes personal data that is technically necessary whenever our website is visited. This includes in particular:

* IP address

* Date and time of access

* Pages accessed

* Browser type and browser version

* Operating system used

* Referrer URL

* Hostname of the accessing device

* Amount of data transferred

* Server log files

This data is processed to provide the website, ensure system security, and analyze errors.

The legal basis is Art. 6(1)(f) GDPR.

Where Hostinger processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Further information is available at:

https://www.hostinger.com/privacy-policy

---

## 6. Contacting Us

If you contact us by email, telephone, or via a contact form, we process the personal data you provide exclusively for the purpose of handling your inquiry.

This may include, in particular:

* Name

* Telephone number

* Email address

* Content of the message

* Application documents

* Other information voluntarily provided

The legal basis is Art. 6(1)(b) GDPR.

---

## 7. Communication via WhatsApp

We use **WhatsApp Business** to communicate with prospective customers and customers.

In this context, the following data in particular may be processed:

* Name

* Telephone number

* Message content

* Documents transmitted

* Profile picture, if available

Please note that WhatsApp may also process personal data outside the European Union.

Further information is available at:

https://www.whatsapp.com/legal/privacy-policy

---

## 8. Online Consulting via Google Meet

Consultations and coaching sessions may be conducted via **Google Meet**.

The following data in particular may be processed:

* Name

* Email address

* Audio and video data

* Chat messages

* Screen sharing content

The data is processed exclusively for the purpose of conducting the agreed consultation.

Further information:

https://policies.google.com/privacy

---

## 9. Application and Consulting Documents

As part of our services, we process – where necessary – personal documents such as:

* CVs/résumés

* Certificates

* Language certificates

* Proof of employment

* Motivation letters

* Passport copies

* Recognition-related documents

* Other documents voluntarily provided by the customer

This data is processed exclusively for the purpose of providing the agreed consulting and support services.

Data is only disclosed to employers or other third parties with your explicit consent or upon your instruction.

---

## 10. Recognition and Visa Procedures

If you use our organizational support in connection with recognition or visa procedures, we process only the personal data required to provide the agreed service.

We do not provide legal advice.

Your documents will only be forwarded upon your instruction or with your explicit consent.

---

## 11. Payment Processing

Depending on the agreement, we use in particular the following payment methods:

* Bank transfer

* PayPal

* Revolut

* Western Union

Payment processing is carried out through the respective payment service provider.

The privacy policies of the respective payment service providers additionally apply to the processing of personal data.

---

## 12. Storage Period

We store personal data only for as long as:

* it is necessary for the performance of the contract,

* statutory retention obligations apply,

* legitimate interests require storage,

* or until consent that has been granted is withdrawn.

Once the respective purpose of processing no longer applies, the data will be deleted unless statutory retention obligations prevent deletion.

---

## 13. Your Rights

Within the framework of the applicable statutory provisions, you have, in particular, the following rights:

* Right of access to your stored data (Art. 15 GDPR)

* Right to rectification of inaccurate data (Art. 16 GDPR)

* Right to erasure of your data (Art. 17 GDPR)

* Right to restriction of processing (Art. 18 GDPR)

* Right to data portability (Art. 20 GDPR)

* Right to object to processing (Art. 21 GDPR)

* Right to withdraw consent at any time with effect for the future

---

## 14. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

In particular, the competent supervisory authority may be the data protection authority responsible for your habitual place of residence or the registered place of business of our company.

---

## 15. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, or other unauthorized processing.

Our security measures are regularly reviewed and adapted in accordance with technological developments.

---

## 16. External Links

Our website may contain links to external websites.

The respective operators of those websites are solely responsible for their content and data protection practices.

---

## 17. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to changes in legal requirements, technological developments, or changes to our services.

The version currently published on our website shall apply.

---

# Notes Before Publication

This draft provides a solid basis but should be adapted to the actual technical implementation of your website before it goes live.

In particular, you should check whether the following services are used and, where applicable, add the relevant information:

* Cookie consent tool (e.g. Borlabs Cookie, Complianz, or Cookiebot)

* Google Fonts (hosted locally or via Google servers)

* Google Maps

* YouTube embeds

* Instagram or Facebook feeds

* Meta Pixel

* Google Analytics or Google Tag Manager

* Google reCAPTCHA

* Calendly or other appointment booking systems

* Newsletter service (e.g. Brevo or Mailchimp)

* Google Workspace (Gmail, Drive, or Calendar), where personal data is processed through these services