Privacy Policy

How UniAssist collects, uses, and protects your personal data.

Controller

The controller responsible for data processing on this website is: Rheinland-Privatschule Owner: Aydin Öztürk Viehofer Straße 14, 45127 Essen, Germany Email: info@uni-assist.com. Phone: +49 201 10 26731. VAT ID: DE300614393. Full provider details are set out in our Imprint.

What data we process and why

We process: (a) contact and enquiry data (name, email, phone, your message and study goal) to answer your enquiry and prepare guidance; (b) pathway-check data (your answers about where you completed your education, your current German level, your study goal and intended intake, together with your email) to generate your free eligibility result and, where you choose to continue, to prepare your application; (c) account data (email and optional name) to operate your portal account; (d) application data and uploaded documents (such as transcripts, certificates and other supporting documents) to prepare and support your university applications; (e) technical data (a salted, non-reversible hash of your IP address and your browser type) to secure the service and prevent abuse.

Legal basis (Art. 6 GDPR)

Consent (Art. 6(1)(a)) for enquiry and pathway-check forms and any marketing messages; performance of a contract or pre-contractual steps (Art. 6(1)(b)) for your account, applications and documents; our legitimate interest (Art. 6(1)(f)) in securing the service against abuse (for instance IP hashing).

Cookies

We use only strictly necessary, functional cookies and set no advertising or cross-site tracking cookies. These are: a session cookie that keeps you signed in to the portal, a security cookie that protects forms against cross-site request forgery, and a cookie that remembers whether you are signed in so the site can show the correct navigation. Because these cookies are essential to provide the service you request, no consent is required.

Analytics

Where analytics is enabled, we use Umami, a privacy-friendly, cookieless analytics tool that we host on our own server, to understand usage in aggregate. No cookies are set for analytics, no cross-site profiles are created, analytics data does not leave our infrastructure, and nothing is shared with advertising networks.

Bot protection (Cloudflare Turnstile)

To protect public forms (such as sign-in, contact and the pathway check) against automated abuse, we use the bot-protection service Cloudflare Turnstile, provided by Cloudflare, Inc. (USA). When you use a protected form, Turnstile processes technical data such as your IP address and browser characteristics to distinguish people from bots. The legal basis is our legitimate interest in securing the service (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, and processing is additionally safeguarded by standard contractual clauses.

Email and magic-link sign-in

Signing in uses a one-time link sent to your email address. Emails (magic-link sign-in, service notifications and, where you have consented, updates about our services) are sent through our email provider IONOS SE (Germany). Your email address is stored to operate your account.

Recipients and processors

Personal data is processed on our behalf by service providers under data-processing agreements. Your account data, applications and uploaded documents are stored on our own server infrastructure and database located in Germany and the EU; email is delivered via IONOS SE (Germany). Apart from the bot-protection service described above (Cloudflare, Inc., USA), we do not transfer your personal data to countries outside the EU/EEA.

Storage and retention

We keep personal data only as long as necessary for the purposes described above, or as required by statutory retention obligations (for instance under commercial and tax law), after which we delete or anonymise it.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact info@uni-assist.com. You also have the right to lodge a complaint with a data-protection supervisory authority; for our seat in Essen this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

Last updated: July 2026