Privacy Policy

German International Pathway College (GIPC)

Last updated: 23 August 2026

1. Privacy at a glance

General information

The following information provides an overview of what happens to your personal data when you visit the website of the German International Pathway College (GIPC) or contact us through the website. Personal data means any information relating to an identified or identifiable natural person.

How we collect data

Some data is provided directly by you, for example when you submit an enquiry, send us documents, contact us by email, telephone or WhatsApp, or communicate with our Admissions Team. Other data is generated automatically when you visit the website, in particular technical information such as browser type, operating system, time of access and IP address.

How we use data

to provide, secure and technically operate the website;
to process enquiries, information requests and applications;
to assess which GIPC programme and whether the T-Course or W-Course Foundation pathway is appropriate for your intended Bachelor pathway;
to prepare programme offers, contracts, payment information and programme-related documents;
to communicate with you regarding Admissions, GIPC programmes, fees, documents, visa-related programme documentation and organisational matters;
where applicable and subject to the required consent, to analyse website usage and improve our services.

2. Controller

The controller responsible for data processing on this website is:

GIPC German International Pathway College GmbH
Franklinstrasse 28-29
10587 Berlin
Germany

Email: info@gip-college.de
International Admissions / Applications / Partners: international@gip-college.de
Phone: +49 15566 577188
Managing Director: Adil Yilmaz

3. Data protection contact

For questions concerning the processing of your personal data or the exercise of your data protection rights, you may contact GIPC at info@gip-college.de.

4. Your rights

Subject to the applicable legal requirements, you have in particular the following rights:

Right of access: you may request information about whether and which personal data we process about you.
Right to rectification: you may request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: you may request deletion of personal data where the legal requirements are met.
Right to restriction of processing: you may request that processing of your data be restricted under certain conditions.
Right to data portability: where applicable, you may request personal data provided by you in a structured, commonly used and machine-readable format.
Right to object: you may object to processing based on legitimate interests where the legal requirements are met.
Right to withdraw consent: you may withdraw consent at any time with effect for the future.

5. Data collection on this website

5.1 Cookies and comparable technologies

The website may use cookies or comparable technologies. Technically necessary cookies may be used to provide, secure and operate the website. Cookies or comparable technologies that are not technically necessary are used only where the applicable legal requirements are met, in particular where the required consent has been obtained. Where a consent management interface or cookie banner is used, you can manage your choices there.

The storage of information on your device or access to information already stored on your device is carried out in accordance with the applicable provisions of the German Telecommunications Digital Services Data Protection Act (TDDDG).

5.2 Server log files

When you visit the website, the server may automatically process technical information transmitted by your browser. This may include:

browser type and browser version;
operating system used;
referrer URL;
host name and/or IP address of the accessing system;
time of the server request;
pages accessed and data volumes transferred.

This processing is carried out to ensure the technical availability, stability and security of the website on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.

5.3 Optional analytics, marketing, security and external media services

Where optional analytics, marketing, spam-protection, CRM, embedded media or comparable third-party services are used, they are integrated and activated only in accordance with the applicable data protection and consent requirements. Where required, the services actually used and the related consent options are identified through the website’s consent management interface or cookie settings. You can withdraw a previously granted consent with effect for the future.

6. Enquiry and contact forms

If you use a GIPC enquiry or contact form, we process the information you provide in order to respond to your enquiry, review your stated educational objective, prepare a programme offer and continue communication with you.

Depending on the form and the information you provide, the following data may be processed:

first name and last name;
email address;
telephone number and/or WhatsApp contact;
country of residence;
intended Bachelor field or study objective;
preferred T-Course or W-Course Foundation pathway;
highest school qualification;
English language level;
year of school graduation;
country in which school education was completed;
information on APS availability, where relevant;
free-text message and other information voluntarily submitted by you.

Depending on the content of your enquiry, the legal basis is Article 6(1)(b) GDPR for pre-contractual measures, Article 6(1)(a) GDPR where you provide consent, and, where necessary for organisation, documentation, security or traceability, Article 6(1)(f) GDPR.

7. Admissions, document review and programme allocation

As part of Admissions and programme enquiries, we may process documents and information required to review your application, allocate the appropriate T-Course or W-Course Foundation pathway, conduct the admissions process and prepare programme and contractual documentation.

This may include in particular:

passport copy;
school-leaving certificate;
transcripts and grade reports;
language certificates;
curriculum vitae;
motivation letter, where requested;
APS certificate, where applicable;
certified translations, where required;
previous university documents, where relevant;
records relating to an admissions interview and the resulting admissions decision.

Processing is carried out primarily on the basis of Article 6(1)(b) GDPR for pre-contractual measures. Article 6(1)(c) GDPR may apply where processing is required to comply with legal obligations, and Article 6(1)(f) GDPR may apply where processing is necessary for legitimate organisational, documentation or verification purposes.

GIPC may assess programme suitability, course allocation and programme progression. Formal admission to an MDH Bachelor’s programme remains subject to the applicable admission requirements, the completeness and verification of the required documentation, and the responsible admission decision.

8. Programme-related documents and visa support

Where the applicable programme and payment conditions are met, GIPC may prepare and provide programme-related documents, for example a Letter of Admission, programme or enrolment confirmations, payment confirmations, information on the planned programme period, course descriptions, address or contact confirmations and other programme-related documentation.

If you provide documents for visa- or embassy-related preparation, we process them solely for the preparation and review of programme-related documentation and for communication with you. Decisions on visas are made exclusively by the competent German diplomatic mission or other competent authority. GIPC cannot guarantee the issuance of a visa.

Programme-related documents are prepared on the basis of the information available to GIPC and should correspond to the actual programme status, programme period, payment status and applicant file.

9. Fees, payments and contracts

If you receive a programme offer, pay a deposit or other programme fees, or enter into a contract with GIPC, we process the data required for contract preparation and performance, invoicing, payment allocation, administration of the programme, scholarship or fee-related processing where applicable, and compliance with legal obligations.

This may include contact data, contract and programme data, invoice and payment status, payment references, withdrawal or refund information and other contract-related communication.

The legal basis is Article 6(1)(b) GDPR insofar as processing is necessary for entering into or performing a contract, and Article 6(1)(c) GDPR insofar as processing is required to comply with legal retention or documentation obligations.

10. Communication by email, telephone and WhatsApp

If you contact GIPC by email, telephone or WhatsApp, we process the information you provide in order to respond to your request and manage the related communication. The legal basis is generally Article 6(1)(b) GDPR where the communication relates to pre-contractual or contractual matters and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

Use of WhatsApp is voluntary. Where you choose to communicate via WhatsApp, the platform provider may process data under its own privacy terms. You may contact GIPC by email instead.

11. Recipients of personal data

Personal data is disclosed only where this is necessary for the purposes described in this Privacy Policy or where there is another legal basis. Recipients may include:

responsible internal functions of GIPC and, where necessary for the relevant process, functions within the MDH group, including Admissions, programme coordination, Student Services, Finance/accounting and management;
IT, hosting, form, CRM, email and website service providers;
payment, accounting and tax service providers;
legal and professional advisers, where necessary;
public authorities, courts or other public bodies where required by law or necessary for the establishment, exercise or defence of legal claims.

Where service providers process personal data on our behalf, appropriate data processing agreements are concluded in accordance with Article 28 GDPR where required.

12. Transfers to third countries

Where personal data is transferred to a country outside the European Union or the European Economic Area, such transfers take place only where an appropriate legal basis and the required safeguards are in place, for example an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or an applicable legal derogation under Articles 45, 46 or 49 GDPR.

Whether a third-country transfer occurs depends on the service providers and communication channels actually used in the individual case.

13. Storage and deletion

We retain personal data only for as long as it is necessary for the purposes for which it was collected or processed. After that, the data is deleted unless statutory retention obligations, contractual documentation requirements, legitimate interests or valid consent require or permit longer storage.

Application and programme enquiry data that does not result in a contract is retained only for an appropriate review and documentation period and is then deleted unless a longer retention period is required or justified by law.

14. Data security

The website uses SSL/TLS encryption to protect confidential content transmitted through the website. You can recognise an encrypted connection by the ‘https://’ address and the lock symbol in your browser.

GIPC also applies appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised access or disclosure.

15. Changes to this Privacy Policy

This Privacy Policy may be updated where legal, technical or organisational requirements change. The version published on the GIPC website at the relevant time is the applicable version.