Move Abroad Easy SRL processes personal data in compliance with the EU General Data Protection Regulation (GDPR) and the German Telecommunications-Telemedia Data Protection Act (TDDDG).

1. Data Controller Information

The legal entity responsible for data processing on bharatingermany.com and academy.bharatingermany.com is:

  • Controller Entity: Move Abroad Easy SRL
  • Registration Address: Șos. Nicolae Titulescu nr. 10, bl. 20, sc. A, et. 9, ap. 41, Sector 1, BucureÈ™ti, 011141, România
  • Tax Registration: RO49898240 / CUI 49898240
  • Privacy Contact: bharat@bharatingermany.com

2. Legal Bases for Data Processing

Personal data is processed under the following provisions of Art. 6(1) GDPR:

  • Consent (Art. 6(1)(a) GDPR / § 25(1) TDDDG): Processing marketing cookies, analytics, and tracking pixels.
  • Contract Fulfillment (Art. 6(1)(b) GDPR): Processing customer details to deliver course access, handle billing, and provide account features.
  • Legal Obligation (Art. 6(1)(c) GDPR): Retaining invoices and transaction logs under Romanian fiscal law.
  • Legitimate Interest (Art. 6(1)(f) GDPR): Safeguard platform integrity, preventing account-sharing abuse, and securing web server containers.

3. Tracking, Tag Management & Server-Side Data Processing

To analyze platform performance and run ad campaigns, Move Abroad Easy SRL utilizes client-side cookies and server-side tracking pipelines:

A. Google Tag Manager (Server-Side Container)

We utilize Google Tag Manager (GTM) provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

  • Technical Setup: Our setup uses Server-Side Tagging (sGTM). Web requests pass through an intermediate server container hosted on our behalf. This container strips raw client IP addresses and anonymizes request headers before forwarding necessary event data to analytics destinations.
  • Legal Basis: Server deployment relies on Art. 6(1)(f) GDPR (legitimate interest in security). Tracking tags managed by GTM execute only upon explicit user consent (Art. 6(1)(a) GDPR / § 25(1) TDDDG).

B. Google Analytics & Google Ads (Enhanced Conversions)

Subject to your consent, we deploy Google Ads and Google Analytics.

  • Enhanced Conversions: When enabled by user consent, SHA-256 hashed customer identifiers (e.g., encrypted email addresses submitted at checkout) are transmitted server-side to match conversions with Google ad interactions.
  • Legal Basis: Explicit consent via Cookie Banner (Art. 6(1)(a) GDPR).

C. Meta Pixel & Meta Conversions API (CAPI)

We use tools provided by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland).

  • Meta Pixel (Client-Side): Places browser cookies to measure web activity and enable retargeting on Facebook and Instagram.
  • Meta Conversions API (Server-Side CAPI): Transmits conversion pings directly from our server container to Meta’s API. This payload includes transaction metadata and SHA-256 hashed customer data (e.g., hashed email address).
  • Joint Controller Notice: Move Abroad Easy SRL and Meta Platforms Ireland Ltd. act as Joint Controllers (Art. 26 GDPR) for the collection and transmission of event data. Meta's Controller Addendum governs data responsibilities.
  • Legal Basis: Processing occurs exclusively upon prior explicit consent via our Cookie Banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG).

4. International Data Transfers

Data processing via Google and Meta services may involve transfer to servers in the United States. Transfers rely on active certifications under the EU-U.S. Data Privacy Framework (DPF) pursuant to Art. 45 GDPR, supplemented by Standard Contractual Clauses (SCCs).

5. Cookie Consent Banner (CMP)

Our Cookie Consent Banner ensures compliance under § 25 TDDDG and GDPR:

  • Marketing pixels (Meta Pixel, Google Ads) and analytical cookies are blocked by default and will not fire until you click "Accept All".
  • You can adjust or withdraw consent at any time via the "Cookie Settings" link located in the website footer.

6. Data Subject Rights (GDPR)

Under Articles 15–21 GDPR, you hold the following rights free of charge:

Rights under GDPR Description
Right of Access (Art. 15) Request confirmation of data processing and obtain a copy of your records.
Right to Rectification (Art. 16) Request immediate correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17) Request deletion of personal data where legal retention rules do not apply.
Right to Object (Art. 21) Object at any time to processing based on legitimate interest or direct marketing.
Withdrawal of Consent Revoke consent granted under Art. 6(1)(a) at any time with future effect.

To exercise your rights, email bharat@bharatingermany.com. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local EU supervisory authority.